
IT Security E-Business and State LANs
Date: Tuesday, September 30 2003 Topic: Security
Are Mono culture operating systems the source for recent worms and viruses, or should blame be cast upon the ignorant or lazy end users who don't secure their home desktops? It was recently reported that an on-line automobile dealership left its patron's personal information -- including completed credit applications -- exposed on the site to whomever felt inclined to see it. And now, several US states are attempting to pass a law that would require all Internet purchases to incur sales tax, where before there was none.
Its true. An operating system mono culture does have the greater potential for allowing cascading viruses to infect our systems. However, this cascading effect is made orders of magnitude worse by the fact that the Internet is setup as a monolithic structure. End users will never have the expertise, ability or desire to maintain server level security on their PC's. Many of them are running the same insecure software that came on their box when it first shipped.
Whenever these individuals are on-line, they're exposed, and are potential victims of every malevolent hacker on the planet. The auto dealership problem (mentioned above) was not caused by a virus or worm. Rather, it was simply carelessness. It's potential damage was worsened by the fact that the information was exposed to the entire world.
The last straw that prompted me to write this piece was the states looking for sales taxes on Internet purchases. Not because I'm opposed to taxes, but that in their zeal to cure tax revenue shortfalls, the states have abandoned their local brick and mortar businesses. They've given them up for dead instead of looking for innovative ways to reinvigorate their local economies.
The accepted wisdom in computer security (in simplified terms) is 'compartmentalized total lock down'. It involves giving access permissions only as needed, which in turn reduces the risk of security breaches. It also localizes any security breaches that do occur.
If you view the Internet as one global server, the current monolithic structure of the Internet achieves none of these objectives. For example, there is no good reason why someone applying for an auto loan at their local dealership should have that information exposed to a global anything. If properly implemented -- by compartmentalizing the Internet by establishing statewide or local LAN's -- the potential for security breaches becomes greatly reduced.
The cascading effect of worms and or viri would be minimized by having "gate keeper" system administrators manning each LAN's access point, which would prevent infection. As a result, local on-line business transactions could continue as normal and be shielded from the evils on the Internet.
Offering free, greatly reduced (even subsidized) access fees to State LANs, but charging standard fees for access to the Internet as we do today would become a huge boon for our local economies and tax bases. Every local business would want to have a presence on these inexpensive LANs. People would be able to shop at the smallest, out-of-the-way, local niche businesses on-line, and save huge amounts of time, energy and fuel costs by simply accessing them online.
Many who prefer to shop locally but haven't bought computers yet, might feel more inclined to purchase them for the convenience of browsing their favorite service, restaurant, or store's ?mini website.? They would do so even if only to see if something is in stock, check menus etc... before physically driving there. This might even spark a reemergence of delivery services from local businesses, further reducing energy costs and benefiting the elderly, infirm or disabled.
The logical result of this type of compartmentalization would be the E-business mirror franchise or affiliate as seen more commonly in mass media. For example, Instead of Google having their search engine at one central point, the company would run from a collection of one or more servers within all of these LANs. Instead of having to charge a global-sized fee for their advertising and services, they could lower the costs of advertising on each localized LAN, making it more affordable for more businesses.
Also, local Google searches would be far more accurate than they are at present. E business mirror franchises would establish the physical presence needed by the supreme court for the states to collect tax revenue.
The implementation of this type of highly secure system would involve large numbers of small and large businesses having to buy small and large web servers, software and the hiring of IT professionals to set up and maintain them. This would put many IT people back to work because it's impossible to outsource most of this kind of work. The emergence of FOSS (free open source software) greatly reduces the cost of startup and maintenance for small businesses.
Our local economies would spring back to life, not to mention would also the entire IT industry. Orders for first time computer buyers, would start coming in. Local political discourse would take on a whole new meaning because of the home style accessibility. E-everything would become more personalized, meaningful, safer, and more enjoyable for us all.
There are those who would rather leave the Internet as it is, and instead, apply big brother type controls to us and our computers. I for one will resist this to the point of walking away from computing entirely. True, my suggestion would require a lot of work, but there are plenty of people who need work, and our local area businesses need help badly as well.
The Internet's current structure makes a very few people very wealthy while putting many other people out of work. My suggested Internet structure through connected state LAN's, spreads the wealth by making meaningful (home-town) jobs to a whole lot of people.
The ball is on the State's side of the court.
|
|