Network Security in the Workplace.

• Author: FLOOD WILLIAMS, COLLEEN MADONNA

In today's cyber community, network security is an essential but often overlooked business component. Securing an organization's computer system can cost anywhere from $500 to $50,000-plus, depending upon a company's size and needs, says Network Business Systems President Scott Thorson.

Proper network security can mean preventative savings of untold dollars in terms of maintaining the safety and integrity of a company's reputation, client trust and sales. Keeping a system secure also provides savings on equipment and software, and ensures sensitive financial information remains confidential. Thorson warns business owners to be wary of falling prey to what he refers to as an "automobile owner's mentality."

"Cars come with built-in security systems. Computer systems do not," explains Todd Clark, network business vice president of development for Network Business Systems. "If you're going to protect your business against inside and outside threats, then you have got to invest in firewalls, virus protection, intrusion detection systems and support. The problem for many is that they think that just like their automobiles, their computers should come equipped with locks to prevent vandals and thieves from damaging or stealing their property."

Security risks are dangers Rob Moore of Alyeska Pipeline Service Corp. understands. "Alyeska Pipeline sees its fair share of attempted security breaches," says Moore, network security engineer for the trans-Alaska oil pipeline computer network. Moore is always on both the offense and defense, working to protect Alyeska's computer network from various threats inherent to being connected to the Internet as well as possible threats from the internal network.

One of Alyeska's biggest network security concerns recently has been the amount of e-mail borne viruses and Trojan horses (these attack the network disguised as a useful program) that are frequently used in attempts to gain access to and/or cause problems for networks and systems. Moore reports that Alyeska uses ScanMail and InterScan VirusWall systems to implement a portion of the organization's security practices.

When asked what the most important part of Alyeska's network security is, Moore responded, "We see a lot of action with our top-of-the-line, real-time virus detection systems. Still, a security system is only as good as the sum of all its parts. We also use firewalls and intrusion detectors to help prevent unauthorized access to the network. In my humble opinion, security is a layering of many forms of protection ... starting with real-time virus scans on the desktop and other network applications as well as implementation of firewalls, DMZs and intrusion detection systems. You could say that these systems act as electronic security guards for the network. It's the combination of all of these items and the constant monitoring of the system by our network security team that helps to keep the network secure."

All of these systems are for naught without a strong security policy and backing from...