Home > Intel Communities > Open Port IT Community > Intel® vPro™ Expert Center > Blog > Tags > security
1 2 Previous Next

Intel vPro Expert Center Blog

23 Posts tagged with the security tag
2

1) It’s a major headache to replace the content;
2) It’s costly to replace the laptop;
3) It invites the misuse of the sensitive data files you have stored on it;
4) It opens the door to the potentially bigger problems of data loss and identity theft.

 

Unfortunately, it’s a growing reality for hundreds of thousands of consumers, as between 600,000 and 1.5 million laptops are stolen or lost each year in the U.S. alone. Clearly, it’s foolish for business and consumers to ignore this increasing threat and not have computer security software and anti-theft products, with the idea that it only happens to other people.
I recalled from this past spring that Intel and Ponemon Institute released a study about the cost to businesses of a lost or stolen laptop:

 

"A recent study commissioned by Intel and conducted by the Ponemon Institute shows that a lost or stolen laptop is worth far more than just the hardware. When everything is taken into account, such losses cost a company as much as $115,000 and an average of $49,000.

 

The study analyzed 138 cases of lost and stolen notebooks. The average cost of $49,246 was based on costs associated with much more than just hardware and software replacement: detection and escalation, forensics and investigation, data breach, lost intellectual property, lost productivity, and other legal or regulatory costs. The study notes that the highest cost components are data breach and intellectual property loss..."

 

Wondering how much costs could be reduced if lost or stolen laptops had a security product like Phoenix Technologies' FailSafe™ [http://www.failsafe.com] - a theft-deterrence product that helps "protect, track, and manage lost or stolen laptops" using a BIOS embedded, tamper-resistant tracking agent.
2 Comments Permalink
6

A while back I was lamenting the fact that Intel vPro technology promises to end the need (at least among businesses at the moment) for all of the creative low-tech fixes we all use when our PCs crawl onto the shoulder of the Internet and expire as if they've just ran out of electrons.  I asked you for your most useful low-tech fixes and many of you responded.  We also made this video that captured the secret tricks some San Franciscans use to pump life back into their under-the-weather PCs.

I asked my buddy Dave Buchholz in Intel’s internal IT group if he had any low-tech fixes.  Dave’s title is IT Technology Evangelist.  If his title conjures up the vision of someone perched atop an equipment cabinet with a tech manual cradled in one arm and soldering iron raised high in the other, well, that’s Dave.  He’s an accomplished IT professional and something of an IT historian as well.

Dave recalls years back that there was a period when the bearings in certain hard drives were typically the first thing to go.  An audible clicking noise was the giveaway to the problem.  Dave says he’d put the ailing drives in a freezer where the bearings would contract slightly as they froze. Once back on a computer, the chilled drives would spin just long enough to offload the data.  Dave must have been working for a appliance company at the time because his fix for a gummed-up keyboard was to run it through a dishwasher.  Dave, this was a specialized IT dishwasher?

I say low-tech, but when I asked readers to document their surefire fixes for getting their failed computers running again, solutions ranged from the spiritual (“shut down and restart and pray”) to "alchemy” (interestingly from an IT pro) with some tech solutions mixed in.

In the interest of archiving the responses for businesses who may not yet have vPro or consumers interested in bettering their computer capabilities, I’ve taken a shot below at cataloging those I deem key for quick reference.  I’ve placed them under appropriate tags that will make them easy to reference when the need arises.

vPro, of course, makes it possible to diagnose and fix problems even in computers that are turned off, or have toasted operating systems or hard drives, and it’s capabilities are now reaching the small-business world with Intel IT Director and even virtualized worlds.  Nonetheless, not everyone has vPro.

For that reason, this undoubtedly will become a watershed resource.  So, it’s important that it is complete and thoroughly thought through. If you want to propose a category to those below and add any solutions from the complete list of fixes into it or suggest fixes of your own, now is the time to append them in the comments before catastrophe strikes.

My thanks along with the appreciation of those who may eventually need this resource to all of you who contributed.

PC Fixes in Absence of Intel vPro Technology

KISS

Turn it off and on

Slightly Less Simple

Ctrl+Alt+Del, then task manager and ending a whole bunch of tasks so only a few are left. If that doesn't work, restart the computer…after two minutes.

KISS Plus

Turning it off and then turning it back on again. Then hitting it really hard and see if something gets knocked loose.

Wisdom from IT Pros (Apparently from different schools, however)

Extend the life of your computer - buy a desktop KVM and instead of chucking out the PC keep it as an internet-browsing "NetTop". Also useful for long-lasting downloads. Use the KVM to flick between your "main" PC and the NetTop

Black tape. Or sometimes a good kick will do.

Confidential – Not To Be Shared with the IT Department

Defrag, registration defrag and spyware removal

Complete Emotional Breakdown

Start crying, hit the delete button 1,000 times, and if all else fails call my sister and have her boyfriend save me from my tech catastrophe

Tears - it must be the salt or maybe the computer gods taking pity on me but it seems to work

Reboot, reboot, reboot!

Oxygen Depleted Environments

Worst comes to worst, I always just take the battery out of my laptop and let it "breathe" a bit before plugging it back in and booting it up

Try blowing air into any port - battery, power cord, usb port -- sometimes it actually works

Call In the Marines

Call my dad; he's some kind of a computer engineer

Pick the Right Man

Pawning it off on my boyfriend to fix!

Man Up and Do What Feels Right!

I've become very accustom to using hibernate and sleep modes. Why bother with a full shutdown and startup. But - IT support got a little upset…stating I was reckless, the system wasn't "made to do that", and so forth. So - back to the wasted time of shutdown and power-up

When Melt-Down (Structural or Emotional) Is Imminent

Close my eyes and hope the problem goes away

Call the geek squad – ask my children

Don’t Even Mess with It, Refresh

Accelerated upgrade cycle

 

6 Comments Permalink
0

Intel recently commissioned a study, conducted by Wipro Product Strategy and Services, that analyzed the costs of refreshing business PC fleets.  Wipro interviewed CIOs and IT professionals from 106 companies in the U.S., United Kingdom and Germany on many different aspects of the refresh equation, but three stood out as the most important to businesses – security, cost reduction and payback period.

Security is a big concern for businesses these days and their angst appears to be well founded.  According to the study, by the time a PC is four years old, security incidents have increased 52 percent from when it was new.  You don’t want to even peek at the data about what happens after that.

Software-based attacks, viruses and other threats continue to grow, of course, and that's the reason Intel has focused so much attention on incorporating new ways to defend against these attacks into its platforms. The 3X performance increase in the latest Intel Core2 processors help to keep antivirus software, patches and encryption from bogging down the system.  A host of features incorporated into Intel vPro technology have been aimed across the board at the points of vulnerability to protect applications, the platform and the network.

The big question keeping CFOs and CIOs awake at night revolves around how often to buy new PCs.  If we could only get by for one more year…. The study found that operational costs of four-year-old PCs can be reduced up to 52 percent for laptops and 46 percent for desktops by purchasing new systems.  In addition to rising maintenance costs, year four also is typically when warranties have expired and companies begin picking up the repair tab.

To make the data more meaningful, Wipro used the data from the companies polled to create a “model company.” The model company has 11,500 mobile PCs and 19,300 desktop computers at various ages.  For the first three years, acquisition and maintenance costs decline, but going into year four they begin to rise at a steepening rate.  The data shows that if the model company replaces its PCs at three years it saves $3 million versus holding off for just one more year.  The study also found that costs could be reduced another $3 million with vPro technology.  Wipro also determined that the model company would recoup its investment in 17 months by just purchasing new computers, but would it get its investment back in 10 months with vPro technology-based systems even with a $150 premium for the systems.

Slide2.JPG

OK, I can feel the doubters – the study is by a reputable research company and appears objective, but it was commissioned by Intel…and it’s a PR guy interpreting it.  So, let’s get away from empirical evaluation and hear from someone whose business strategy reflects the results of the study to see how he’s faring.  Terry Jocelyn is president of Western Blue, a Northern California-based service and solution provider for more than 20 years.  Western Blue is implementing laptops and desktop systems based on Intel Core2 processors and vPro technology.  I had a chance to talk with him recently about how PC refresh and vPro technology worked into his business strategy and benefited his customers.

0 Comments Permalink
0

While at Symantec ManageFusion 2009, we had a chance to talk to IT executives and managers from Disney International, Fox Interactive Media, Blue Cross Blue Shield and McCormick Spice Company and industry analysts from Enterprise Management Associates and Ptak, Noel & Associates LLC. In this video, they talk about the security benefits of Intel vPro technology - which include the ability to deploy software patches faster into the installed PC base, and the ability to quarantine infected PCs and remotely remediate them.

To learn more about Intel's presence at Symantec ManageFusion 2009, go to: http://www.intel.com/go/managefusion/

0 Comments Permalink
0

Hang Onto That Laptop

Posted by Scott Smith Apr 26, 2009

I attended an eye-opening press briefing the other day where George Thangadurai, strategic planning director for Intel’s Anti-Theft Program, Ponemon Institute founder Larry Ponemon; and Rex Rountree, an encryption expert from Intel’s IT group disclosed details from a study that calculated the actual cost of losing or having notebook computer stolen, a rapidly growing problem.  The basic message to the millions of us mobile workers was: Hang onto that laptop.

Chain it to you if you must because if it’s lost or stolen the bill to your company will be $49,264 on the average.  The “Cost of a Lost Notebook,” study was commissioned by Intel and conducted by the Ponemon Institute.  You can find an overview of the findings in the news release.

Intel undertook the study to better understand the problem and devise remedies that are simpler than handcuffing yourself to your notebook.  In January, Intel introduced Anti-Theft Technology as one way to help make laptops less appealing to thieves.  Anti-Theft Technology works by locking a computer reported lost or stolen either from a remote server or from policies embedded into the PC.  Once locked, the computer is useless until recovered at which time IT can issue the owner a password to make it functional once again.

Intel works with computer makers and service providers, such as Absolute, Lenovo, PGP and Phoenix to implement Anti-Theft Technology.  If used in conjunction with a hard-disk encryption service vendor, such as PGP, Anti-Theft Technology can house the encryption keys, which are normally stored on the hard disk, in the chipset.  If the PC turns up missing, the keys can be deleted.  So, even if a thief has the passwords to unencrypt the drive, they are useless and the data protected.  If the thief removes the hard disk from a locked computer in hopes of installing it in another computer to gain access to the data, he leaves the keys locked behind  But, back to the study.

That $50,000 cost, which I suspect has any CFO reading this clutching his chest, results, of course, from this potential compromise of data.  In fact, responding to a data breach is responsible for about 80 percent of the cost, according to the study.  The rest covers investigating the loss, the price tag for any lost intellectual property, legal expenses and making regulatory disclosures.  Let’s also not forget the disruption to an employee whose entire job function likely hinges on his computer.

So, what can a company do?  The study concludes that encryption helps.  It knocks about $20,000 of the bill.  Why doesn’t it eliminate all of the expense?  Encryption depends on who has access to the encryption credentials to decipher the data.  If they’ve somehow been compromised or you’re dealing with a disgruntled employee, then even the most elaborate cipher won’t help.  It also depends on employees actually using the encryption features and on which data they encrypt.

So, in the end, cutting the cost of missing laptops requires a multifaceted blend of technology and practices.  Rex added that training employees how to protect their notebooks goes a long way in cutting the risk as well.

After the briefing, I still had some questions and caught up with George, Larry and Rex for a chat.  If you’d like to listen to the briefing, it’s available at 1-800-475-6701, conference ID# 997098.

Ever had a laptop stolen or have any thoughts on preventing theft?  I’m sure everyone would be interested in your comments.

0 Comments Permalink
0

On the eve of April Fools' Day, Terry Cutler blogged about the Conficker worm and Intel vPro technology, posing the question "Can Intel vPro help combat Conficker worm?" In his post, Terry was looking for community feedback on what the IT community is doing to prevent such attacks from occurring. Are you taking advantage of the use cases on your activated vPro boxes? System Defense is your best friend here - it allows you to isolate infected clients from the network. You can also use vPro technology to do things like drastically improve patch saturation - whether the systems are powered on or out of band.

 

I just uploaded a paper with more information on this topic - please read and see how you can protect your network from attacks from worms like the Conficker.

 

Conficker Worm, Response Times, & Intel vPro Technology

0 Comments Permalink
5

Hi everyone. I have not been posting much lately, but have been keeping busy writing a book and white papers on Intel AMT. In the last section of the Intel Technology Journal article on extreme usages, I talk about how Intel AMT could be used to build a peer-to-peer mesh network, and that is what I have been working on for the last few months. More to come on this I am sure.

 

Right now, I want to talk about Wake-on-LAN and Intel AMT. I read somewhere that wake-on-LAN is obsolete with Intel AMT, but I want to disagree and explain why Intel AMT in fact makes Wake-on-LAN better. For people how don’t know, Wake-on-LAN is a way to wake-up a computer using a magic packet composed anywhere in the payload of “FFFF FFFF FFFF” + 16 repetitions of the MAC address of the computer you want to wake up.

 

In normal circumstances, the magic packet can only be really used within the same Ethernet subnet as the computer you want to wakeup. All this changes if the target computer supports Intel AMT, since even when sleeping or in soft-off, the Intel AMT computer will defend its IP address (ARP Protocol), it’s now possible to send a directed magic packet to a computer across many routers and have it reach its destination correctly and so, wake up the PC.

 

Now, why would you use a magic packet if you can use Intel AMT to do the same? Everything has to do with security. Because of how Intel AMT security realms are designed, granting permission within Intel AMT for a users to wake up a computer, also grants the same user permission to shutdown the PC at anytime (and not a nice shutdown too). You can’t just grant only the “power on” access in Intel AMT and so, this is a security concern.

 

In conclusion, if we want other general users to be able to wake up a PC on the network to perform routine tasks (access files, backup data, etc .). Making use of Wake-on-LAN + Intel AMT makes a lot of sense. With Intel AMT PC’s, Wake-on-LAN now works better than ever.

 

Ylian

5 Comments Permalink
3

The new generation of notebook PCs with Intel vPro technology includes Intel Anti-Theft Technology PC Protection (Intel AT-p). Intel AT-p offers you the option of activating hardware-based client-side intelligence to secure the PC and data if a notebook is lost or stolen. Because the technology is built into PC hardware, it provides local, tamper-resistant defense that works even if the OS is re-imaged, a new hard-drive is installed, or the notebook is not connected to the network.

For a good introduction of the Intel® AT-p Technology please visit - http://communities.intel.com/community/openportit/vproexpert/blog/2008/12/04/anti-theft-technology-has-arrived

In the following we describe an example of how this technology is deployed and used in the life of a typical employee working for a security conscious company. Consider a user Jane who is a new employee of a company called SecureBank. SecureBank wants all its employees laptops to be protected against theft and is therefore utilizing the Intel® vPro Anti-Theft Technology for Asset Protection (AT-p) with Absolute ISV.

In particular Jane has two (rather adventurous) days –

-         Day 1: IT admin receives a new laptop and sets it up for Jane. Jane uses the new laptop for the day when she receives her new laptop and manages to loose it to a thief!

-         Day 2: the thief is unable to use the laptop due to the poison pill sent as a feature of the AT-p technology. The thief therefore gives up on it and leaves it in a coffee shop. The laptop is subsequently recovered by SecureBank, made functional again and is ready to be handed over to Jane.

Below are the details –

(Check out the video uploaded at youtube –

http://www.youtube.com/watch?v=bnTggBxhOVk&feature=email)

Day 1:

(1) Initial Setup by IT Admin:

The IT admin receives a new laptop and creates the SecureBank IT image on the laptop. This includes the Absolute agent which would be used for AT-p. The Absolute Client Windows Installer is a part of the IT image. The two key steps are undertaken -

-         Enrollment: The IT admin runs the Absolute Client Windows Installer which installs the Absolute agent on the client. As part of the installation this client is enrolled with the Absolute server. Enrollment consists of the following steps –

1.      The Absolute Agent checks the local platform to ensure that the platform is eligible for Intel® AT-p.

2.      The Agent requests permission of activate AT-p with the ISV Server i.e. the Absolute Server.

3.      The ISV Server takes this unique client request and sends it (along with a license key) to the Intel permit signing server.

4.      Once the Intel signing server has validated this request, an AT-p permit is generated for that unique client. The client system is now ready to validate signed messages from the ISV server.

Once the machine is enrolled it shows up on the administrator console. The machine is identified using a unique identifier generated by the Absolute server, Detected Full Computer Name and Detected Serial Number. At this point a default policy for the client machine is also applied.

-         Policy Setup: The IT admin can also fine tune the policy for Jane. Examples of Attributes he can set include:

 

Policy Attribute

Example Value

Meaning

AT-p Timer Value

48 hours

The machine’s disablement timer (time after which the machine is disabled if it does not connect with the server) is 48 hours.

AT-p Timer Action

Immediate Lock

The action a machine performs once the AT-p Timer has expired. In this case, the machine will shut down immediately (even if OS was up and running) and not allow the boot process to be carried out.

AT-p Theft Action

Immediate Lock

The action a machine performs once the machine is marked stolen when connecting with the server. In this case, the machine will shut down immediately, same as above.

AT-p Password

“StRongP@ssw0rd”

Admin Password used to recover the machine when it is disabled or locked.

AT-pState

Active

Marks whether AT-p is currently active or not on a machine. When it has a legitimate working user then it is marked as active.

Theft Status

Secure

Marks whether the machine is stolen or secure. In this case, the machine is not stolen.



Once the IT admin has set the above policy he is ready to hand over the laptop to Jane.

(2) Normal Usage:

On receiving her new Laptop, Jane logs in with her domain credentials and uses it seamlessly (as if there were no AT-p). The rendezvous may occur without any active participation of Jane. As such the rendezvous happens in the background and is transparent to Jane.

- Rendezvous (Machine Not Stolen)
The Absolute solution has a rendezvous timer of 24.5 hours. After this time the following steps would occur –

1.      As the Rendezvous Timer (24.5 hours) expires the ISV Client Agent initializes a rendezvous.

2.      The ISV Server’s response is relayed to the Intel Management Engine (in the firmware) through the ISV Client Agent. Any new settings are relayed.

3.      Acknowledgments are generated for any message received.

4.      Once finished, the Disablement Timer (or AT-p Timer) reset message is sent to the Intel Management Engine.

(3) Theft:

After a good first day of work, Jane’s colleagues take her out for a dinner. She leaves her laptop in the car and heads to the restaurant. To Jane’s bad luck her car is broken into and the notorious thief steals her laptop.

- Malicious Usage: The thief has a hacking tool that allows bypassing the windows login/password challenge and can use the laptop. He feels he can make a good fortune by selling this laptop in the black-market.

- Theft Reporting: When Jane returns to the car, she is shocked to see her car broken into and her laptop stolen. She immediately calls the IT admin helpdesk and reports the theft. The IT admin sets the Theft Status to Stolen. Next time the laptop checks in with the Absolute server, the Theft Action, which is Immediate Lock, will take place.

Day 2:

(4) Poison Pill:

The attacker logs in again using his hacking tool. Since it is past 24.5 hours (i.e. the rendezvous timer has expired) the agent initiates a rendezvous. At this time the following steps happen -

- Rendezvous (Machine Stolen)

  1. As the rendezvous timer expires the ISV Client Agent initializes a rendezvous.
  2. The server has marked the system as stolen, and sends an AssertStolen message (“Poison Pill”) to the system.
  3. The local system takes action based on the current policy.

As the action is to immediately lock, the thief to his surprise observes that the machine just shuts down. When he tries to power on the machine he sees a pre-boot authentication screen which requests him to insert admin credentials. The thief’s hacker tools are not able to bypass this screen as the same OS (which is potentially more vulnerable) as the pre-boot environment serves as an extension of the boot firmware and guarantees a secure, tamper-proof environment external to the operating system as a trusted authentication layer. Brute force attacks in this environment are also much harder as the tamperproof firmware reboots the machine after a threshold time or number of attempts to login has expired.

To the thief’s dismay, he cannot really use the laptop and leaves it in the coffee shop where he logged in from.

(5) Asset Recovery:

The IT admin of SecureBank was able to get the IP of the location where the thief last logged in from and contacts the coffee shop. SecureBank officials pick up the laptop and bring it back to the IT admin desk for recovery. To recover the platform the IT admin carries out the following steps –

  1. The IT admin (re)sets the Theft Status to be Secure (from Stolen).
  2. Upon boot, the admin is presented with a “system locked” message in the pre-boot environment.
  3. The admin recovery passphrase must be entered before a given time (say 2 minutes). The admin immediately inputs his admin passphrase for the given machine.
  4. When the admin credentials and theft status have been verified, the AT-p timer is reset and the client platform is unlocked. The platform then boots to the OS. 

Once this is done, the IT admin is ready to return this machine back to Jane without loosing any time. Thus we can see that AT-p solution not only provides a way to secure machines against theft and continued malicious use, but also ensures efficient recovery and continued use of the recovered machine!


3 Comments Permalink
0

At Fall IDF 2008, we had a chance to talk to industry analysts, Intel partners, and Intel engineers and they commented on whether Intel is a security company.  Watch their responses below.

 

 

0 Comments Permalink
1

Hey, you guys, those of you makin’ like you’re part of the décor in an airport lounge or imitating camouflage behind a fern in a hotel lobby waiting for some mark to get distracted so you can lift his laptop. I’m going to save you some major grief. I’m feeling like a snitch doing this since I’m an Intel flack, but even criminals deserve an inside tip once in awhile. So, listen up, swifty. Before you slip ‘n slide that notebook under your trench coat, look it up and down carefully. If it says Lenovo Thinkpad T400 anywhere on it just put it back and save yourself a raft of frustration. Here’s the inside skinny: Absolute Software, Lenovo and Intel ganged up to develop this diabolical security stuff that’s … well, I was going to say almost criminal. They took these Lenovo ThinkPad T400 notebooks and booby-trapped ‘em with Intel’s new Anti-Theft PC Protection and Absolute’s Computrace technology. Here’s what’s gonna happen if you’re a sucker enough to boost one of these units. First thing you’re gonna do is turn it on to see if you can crack the password. These guys are just waiting for you to do that. They’re probably standing behind the other fern laughing their beanies off. After a few missed tries this notebook’s going to shut down like an iron door on the hole. It won’t do nothin’. It becomes a brick. Good luck tryin’ to hawk that. It’s because of this Intel Anti-Theft PC Protection. But let’s say you’re smart enough not to try to crack the password. Instead, you’re sitting there admiring the family of five on the screensaver trying to figure out what it will go for on eBay when WHAM! the thing shuts down. Won’t turn back on or nothin’. That’s ‘cause of Absolute’s Computrace. What happened was that soon as the mark saw his computer flew the coop, he called the guys at Absolute and they fixed their servers, so as soon as that computer came online, they sent it a poison pill through the Internet and that laptop became, yep, a brick. You’d do life for sending a poison pill, but these mugs got good lawyers and get away with it. But let’s say you’re a real Einstein, and you’re casing the airport parking lot and see some stiff shove one of those T400s in his trunk, grab his suitcase and head for the terminal. You’re figuring he’s gonna be gone for days, long enough to fence that T400 before he even knows it’s gone. So, you’re hanging out in a back alley, whispering “Hey, you wanna good computer cheap?” to every Joe that strolls by, until you finally hook some patsy. But you hit the button to turn it on and nothing happens. Yeah, you guessed it. You’re peddling that brick, again. This is because these Lenovo, Absolute, Intel guys covered that angle, too. Turns out the pigeon’s computer geniuses at the office set that ThinkPad T400 so it has to check in regularly, like it’s on parole. If it misses even once, it gets the poison pill treatment thanks to Computrace and Intel Anti-theft PC Protection, and, of course, dem guys at Lenovo who stick that stuff into those ThinkPad T400s in the first place. In the end, filching these rigged T400s will drive you crazy. Worse than being in the cooler. I know what you’re thinking, I’ll just grab another brand of computer. All I can say is, Are ya feelin’ lucky, punk? ‘Cause Lenovo is gonna be putting this Computrace and Anti-Theft PC Protection in their other computers. And, well, this ain’t no exclusive deal, if you know what I mean. So, before you do something stupid, my pal Josh Hilliker spills all the beans here. Check it out and save yourself some time…maybe hard time, not to mention saving you’s from going crazy frustratin’ yourself.

1 Comments Permalink
2

At ManageFusion Orlando and in The Hague, we did a hands-on lab which combined Intel vPro System Defense capabilities, customized network filter from Altiris, and Altiris Software Delivery to securely update a client(summary available at http://juice.altiris.com/node/5721)

 

One of the attendees pointed out the following real-world challenge: They are migrating from one security solution to another. This will temporarily expose their client systems to attacks. With the capability to do secure updates – as noted in the lab – they are much better positioned to do to the migration for vPro\AMT enabled systems.

 

If you’re unsure what 5 minutes “in the open” can do to unsecure client – read the following news article entitled “Malicious ‘botnets’ turn PCs into ‘zombie’ slaves” - http://www.oregonlive.com/business/oregonian/index.ssf?/base/business/1224564910237820.xml&coll=7

 

Another attendee provided more reference to how they could use this. A classic "chicken/egg" problem - if a client is out of compliance or infected, it must be patched. The patch solution is on the production network, yet corporate policy states systems out of compliance are placed on an isolated or remediated network. So - how do you patch a client to which the production software delivery server cannot connect? Sneaker-net shouldn't be the answer... especially when the target client system is far outside the building you're in.

 

The key to remember about this use case - the System Defense filters must allow communications on the software delivery network ports. The Altiris Juice article above provides references on this is done in a Symantec\Altiris environment

2 Comments Permalink
0

A while back, I was talking with Dave McCray, a buddy in Intel's IT group, about a training room that he'd just finished equipping with Intel® vProTM Technology-based PCs. As the vPro PR guy, I'm always looking for stories that might interest the media and thought Dave's hands-on experience might yield some angles. Dave has been working with vPro since its early days, and as we chatted about the installation, it became apparent that he'd developed an extensive toolbox of BKMs (Intelese for "best known method methods") that make it quicker and easier to fire up vPro. We came up with the idea for a series of how-to videos as a way to share his honed procedures. To do that, we recruited another friend, Brett Twiggs, a systems engineer with LANDesk, an Avocent company, whose LANDesk* Management Suite incorporates vPro's capabilities in its user-friendly approach. The result is a four-part series of chats and hands-on demos that make the implementation and use of vPro that much easier, plus some sage advice gleaned from Brett's and Dave's experience. They start with some Shop Talk, and then discuss Green IT, Enhancing Security, and finally Remote Diagnostics and Repair. Hope these are helpful. And if you have some tips, let us know.

0 Comments Permalink
0

This page was created to address frequently asked questions (FAQ) related to security of provisioning and configuration of vPro™ machines as well as value added security features introduced with vPro™ technology.

 

0 Comments Permalink
0

 

NOTE: If you have not read parts 1 through 5, please read these before reading this part as this is a continuation of the story begun in the previous sections. http://juice.altiris.com/book/4687/altiris-and-intel-vpro-use-cases

 

 

 

 

 

The Might Modern Marketing IT team has just seen two suspected competitors encroach on the home turf. What can they do in light of this brazen intrusion? Can Altiris and Intel's vPro help them gain the upper hand when the opposition brings the fight to the very top? In this part of the story we'll learn the final outcome of their major competitor's struggle to gain the majority share of the market through fierce competition and unscrupulous IT sabotage.

 

 

 

Mighty Modern Marketing HQ - Boston, Massachusetts

"Bobby!" Jessica Langley whispered loudly. Or, more accurately, she said loudly to just pierce the cacophony of fans filling the server room. She turned the corner and saw Bobby perched at his desk. His hands rested on his keyboard, as if posed to begin coding at an instant's notice. He seemed to be looking intently at his monitor.

 

"Bobby?" she urged, stepping closer. He didn't respond, and as she watched his head tipped forward. He jerked, a loud snort escaping his nose. He glanced around, blinking bleary eyes, before his eyelids seemed to close of their own volition. He settled back into his chair, hands still poised.

 

 

Jessica tapped him on the shoulder. He didn't respond. She tapped harder, and he shrugged, but his eyes remained closed. She shook the back of his chair, and he jumped, hand flailing out to grab the sides of his desk. He whirled around, staring at her with wide, reddened eyes.

 

 

"Jessica!" he said, blinking rapidly. "Something wrong?"

 

 

She folded her arms. "Yes, something's wrong," she responded tersely. "We're under attack."

 

 

He wiped at his face with his long-fingered hands. "A virus?"

 

 

"No, something a bit more direct. I saw that ninja guy again, and some smooth-slick character with him. He might be Jake, the New Nifty Network CEO."

 

 

"The ninja? The guy I thumped with the laptop??"

 

 

"Yes."

 

 

Bobby looked at her wide-eyed. His eyes darted about, and he finally picked up a power strip, gripping the plug and cord. He twirled a few times, and Jessica backed away.

 

 

"What are you doing?" she demanded.

 

 

"I need something in case he comes after me for revenge!"

 

 

"Is that supposed to be a ball and chain?"

 

 

He glanced down at the strip, the empty black slots seeming to stare back up at him forlornly.

 

 

"Yes. No. Maybe... I don't know!"

 

 

She reached out and took it from him. "Tevita's following them, but we need to lock things down."

 

 

Bobby rubbed his hands together, his expression tightening a little. "I always have things locked down," he said. "You're insulting my..."

 

 

"No time for that. Lock up all the servers, and backup all databases right now. If possible bring non essential applications down until we get these guys out of here. And call security."

 

 

Bobby nodded. "There's a ton of locks. Can you help while I call?"

 

 

As Jessica set locks on the server's chassis and covers, she watched the door leading into the server room. She couldn't seem to keep her eyes away from it, half expecting one of the suspects to barge in waving a bat around and demanding their most sensitive data. Halfway through the process Bobby gave her a large key ring full of small metal keys with short-stubby teeth.

 

 

"Go check the server racks and lock any covers that are open with those," he instructed.

 

 

She stared at him. "There are a hundred keys here, and none of them are labeled!"

 

 

"I know. I keep meaning to get around to label them, but... well... how fun would that be?"

 

 

"Yeah, how fun?" she mumbled as she headed around the corner. She started down the row, checking the front of the cases. She made it almost halfway around before she found one that opened. She looked down at the mass of keys and sighed.

 

 

She only had inserted about thirty keys, all without budging the lock, when her mobile phone rang. She quickly fished it out of her jacket pocket, glancing at the number before putting it to her ear as she pushed the answer button.

 

 

"Tevita?" she prompted.

 

 

"Jessica! They're up here on the executive level!" he said in a loud whisper, and she had to press her phone hard against her ear to hear.

 

 

"Bobby called security..."

 

 

"These guys are really delivering packages as if they're legit, but that taller guy, the slick one, keeps looking around as if expecting to see something."

 

 

"Why don't you go tell Mr. Johnson? I think that's Jake Wells."

 

 

"That's a good idea. I'll call back if I need anything..."

 

 

"Just be careful..." she started to say when the line dropped. She locked the keypad and slipped the phone back in her pocket. She stared down at the keys on her other hand, and finally decided she had better things she could do. She walked quickly to Bobby's office. He started intently at his screen, his fingers flying over the keyboard so fast they seemed to blur in her vision. She placed the key ring on his desk and he looked up.

 

 

"The first half of them are secure," she said, not mentioned she hadn't needed the keys for any of those.

 

 

"That was fast..."

 

 

"I got a call from Tevita. I think I need to secure some of the more vital PCs in the office, here. Did you ever finish those network filters I asked for?"

Bobby nodded. "I did. I still need to test the last one..."

 

 

"But the accounting and executive filters are ready?"

 

 

He nodded again. "Yes. I'll email them to you now. It wasn't easy, what with the limitation on how many filters I can apply, but I weeded out the nonessentials. Instant Messenger won't work, nor will standard Internet Explorer stuff, but all the applications the two groups will use respectively are available."

 

 

"Email?"

 

 

"I think so... it's not reliable..."

 

 

She shrugged. "Better than nothing. Thanks!"

 

 

She hurried out the door. Her eyes looked around the office as she walked tensely back towards her desk. She expected to see signs of stress or something, but everyone acted normally. Several even said hi, and she managed to smile back, though the smile felt stiff on her face. Why couldn't she have a normal IT job where emergencies consisted of no coffee in the break room, or typical, non-intentional application crashes? Couldn't someone simply forget their domain password for the highlight of the day? That kind of stress she could handle without her stomach tying itself into knots.

 

 

She sat down as a new email came in from Bobby. She opened the email, and downloaded the attachments to a share on the Notification Server. She quickly initiated a Remote Desktop to the Notification Server. When she clicked connect, she received a message indicating the max number of session had been reached. She stared at the screen.

 

 

"No way," she muttered as she jumped to her feet. She hurried over to Tevita's desk, but he'd locked all his systems. Definitely wise, but If he had sessions open she'd be unable to close them. She hurried back and launched the Altiris Console on her own desktop. She'd wanted to add the filters in the right places on the drive of the server, but it wasn't necessary. The console came up, and she browsed through Manage, clicked on Jobs, browsed through Tasks and Jobs, Server Tasks, Real-Time System Manager, and clicked on Network Filtering Task.

 

 

Jessica right-clicked on the Task and choose "Clone". She named it "Accounting Network Filtering Task" and clicked OK. The new filtering task appeared, the task configuration loading in the right pane. She clicked the Edit button on the icon bar with the small pencil symbol. Under the section ‘Filter network traffic other than to and from the Notification Server' she changed the radial selection to ‘Import network filtering settings from the custom XML file'. Under the section ‘Location of the file to import from:' she clicked the Browse button. In the subsequent window she browsed to the share she'd copied the custom files Bobby had created and selected the Accounting one. She clicked Open which returned her to the Settings page.

 

 

At the bottom of the right-pane she clicked the Apply button. Next, she clicked on the ‘Run Now' button on the icon bar. Within the pop-up window that appeared she set the ‘Run name' field as ‘Accounting Lockdown SOS'. Under the ‘Connection credentials settings' section she clicked on the hyperlink labeled: Runtime Profile. From the list she selected the list of credentials containing her Domain credentials that had full rights to all AMT systems. When she'd committed the changes she then clicked the hyperlink under the Resources heading labeled ‘Select computers'. The Task Server resource selection window appeared.

 

 

In the left most pane she expanded the Computer Collections folder and the My Collections folder. Under this section she highlighted the collection labeled: All Accounting Computers. By double-clicking on this collection the picker added it to the right most pane, labeled Selected Items. She clicked OK to add the collection to the Task. On the main Run Task screen she hovered the mouse-pointer over the ‘Run Now' button. She wondered if both words were capitalized to emphasis the finality of the button! She believed the filter would work since she had faith in Bobby's skills, but if something went wrong...

 

 

For just a moment she paused, taking her hand off the mouse. Over reacting might save the day if these two interlopers really came with Mighty Modern Marketing's determent in mind, but if she'd jumped to the wrong conclusions she might just create a huge mess for no reason at all.

 

 

Another thought, one she'd had previously, surfaced in her mind. If Bobby hadn't verified the filter worked, and it somehow invoked a filter that did NOT give access to the systems via Notification Server, she might just decapitate every single one of the Accounting department's computers with a single click. She shuddered as she imagined Tevita and her running from computer to computer in a desperate effort to manually disengage the network filter using their credentials. There was a reason Bobby tested all the filters he created, and that same reason applied as to why she and Tevita each independently tested them again.

 

 

So far Bobby always got it right, at least from the Notification Server aspect. Sometimes the other filter items didn't work properly, but she'd still be able to quickly remove the filter from all the systems. She sat up straighter in her chair, her lips pressed into a firm line, and took hold of the mouse again. With only the briefest of hesitations she slicked the ‘Run Now' button.

 

 

She waited a minute, then refreshed the status display. So far so good. She quickly ran through the same procedure, but this time setting the Task to quarantine, this time for the system's own protection, the Executive systems. She paused before running it, then quickly picked up the phone and dialed Mr. Johnson's number.

 

 

"Mr. Johnson's office," a young voice greeted.

 

 

She paused. She didn't recognize the voice, but didn't attribute it to the two she'd seen. "Uh, yes, this is Jessica Langley down in the IT department. Is Mr. Johnson available?"

 

 

"No, ma'am. He's currently in a meeting. Can I take a message?"

 

 

"When did he get a secretary?"

 

 

She heard a chuckle. "I'm not a secretary, I'm his son, Roger. It's ‘Go to Work With Mom or Dad' day at school. I'd rather be here than school, so... here I am."

 

 

"Okay... Can you tell him this is urgent?"

 

 

"I would, except he left for the meeting and I don't know where."

 

 

She sighed. "Thanks Roger." As she hung up the phone she clicked the ‘Run Now' button.

 

 

Leaning back in her seat, she folded her arms, eyes on the Altiris Console. Having applied the filters she did feel a little better, but she still couldn't sit still. She stood and walked to the drinking fountain, trying to think what next she needed to do to ensure whatever their competitors planned didn't cripple the business. Her eyes roved over the immediate area. It seemed everyone moved calmly, with occasional conversations heard above the hum of computers. She fished in her pocket and removed her cell phone, staring at the display as it lighted up. If Tevita was hiding somewhere, calling him might give him away. But surely he'd have placed in phone on vibrate...? She hated not knowing where and what Tevita did, and what the interlopers meant to do.

 

 

She found herself facing the stairs. Part of her wanted to run up there and blow the whole thing wide open so that the sheer number of Might Modern Marketing's employees would stop whatever they planned. Of course if it ended up being an innocent visit... she threw that thought aside. They'd shown up looking like delivery guys, and the furtive glances from the "ninja" seemed to proclaim their guilt. She reached up and rubbed at her eyes, trying to decide what to do next.

 

 

They'd locked down the servers, taking down nonessential applications, and employed filters against critical systems. She squared her shoulders and entered the stairwell, hurrying up the two flights to the third floor. When she reached the door at the top she stopped, taking out her cell phone again. She dialed Tevita's number and pressed the send button. The phone rang several times before his voicemail started playing. She hung up the phone, fidgeting with it for a few moments before slipping it back into her pocket.

 

 

She tried to square her shoulders again, but somehow the thought of heading through the door started her stomach doing flips. She pressed a hand against her middle, trying to physical calm her nerves. It wasn't like these guys were armed... were they? So far the incidents had all been non-violent, but had desperation driven them to take extreme measures? Thinking about her job description, the security and protection for the intellectual property of Might Modern Marketing fell under her job description. These rubes from New Nifty Networks certainly qualified as a threat, but where should she draw the line?

 

 

She smiled wryly, decided she didn't like the spineless turn of her thoughts. True, there could be real danger on the floor, but most of the people up here she knew well and trusted. She opened the door and stepped through.

 

 

To the left sat the accounting team, most in closed-door offices to help with keeping sensitive data from wandering eyes. She saw one of them exit his office, a frown on his face. She walked towards him, intending to head through towards the executive staff area, when he looked up.

 

 

"Hi Jessica," he said, the tight expression on his face easing. "Can you help? I'm having internet problems right now."

 

 

"I know," she responded with what she hoped was a firm but friendly smile. "We have a security issue I'm dealing with and we've locked most systems. You should still be able to run the Accounting software... Balance Act. Have you had any problems with it?"

 

 

"No... I just... well... do you know when we'll get it back?"

 

 

"Hopefully soon. I'll send out a notice when it's back up."

 

 

"Okay. Thanks..."

 

 

She nodded and continued on her way. She heard him behind her start talking to another of the accountants, and he sounded a little annoyed, but she thought that better than any wrath had the critical application Balance Act gone down. She smiled, hoping someone would try to strip the data from the application and try to send it out, only to find that they couldn't make a connection to anything. She hoped they stewed over it, trying to figure out why the computer wouldn't connect to anywhere despite showing a network connection.

 

 

She tried to look casual as she raced towards the executive area. What would she find? By the look of people on the floor, no one had any inkling that two unwanted people prowled the hallways. As she turned the corner, her eyes followed the line of doors, most of them open. The sound of conversations floated out of a few, all sounding normal and unhurried. She noticed that Mr. Johnson's door remained closed. She walked on her tiptoes for a few steps, trying to look down into the cubes opposite the CEO's office. The first two stood empty, while the next two held their normal occupants, none looking more harried than normal.

 

 

She reached his door and glanced through the side window set to the left of the door. She noticed a young man sitting at the computer. He slouched back in the office chair, right hand moving around the mouse, his hair spiky and bleached blond. She assumed this was Roger, and moved on. She fished her phone out of her pocket and dialed Tevita gain. For the second time he didn't answer and she reached his voicemail. This time she left a short, terse message asking him to call her, and hung up.

 

 

She looked either way down the hall, her stomach slowly turning over. So far everything looked fine, except that Mr. Johnson wasn't at his office and Tevita wouldn't answer his phone. Many possibilities as to why held nothing malicious, and probably nothing amiss had happened. Somehow she couldn't convince her body of that, and found herself walking stiffly down the hall towards the set of conference rooms at the end. She couldn't unlock her knees, as if her joints had seized up. She wrung her hands in a gesture she'd long ago overcome, and forced her arms to swing normally at her side. Even that gesture felt forced, and she shook herself, trying to loosen up her tense muscles.

 

 

One of the conference room doors held shut, the other room's doors open and the lights out. Light streamed under the door and through the indoor window of the occupied conference room. She sidled up to it, trying to peer in without showing her face. She caught of glimpse of Tevita, standing against the wall. His normal smiley features pulled down in a frown, his arms folded tightly across his chest. She knew he only folded his arms like that when angry. Not just a little angry, but very angry. She quickly backtracked to approach the door from the other side.

 

 

The first person she saw held a sly smile on his face, his slick features seeming to hold confidence to overflowing. He spoke, his mouth quirking at the corner as if he had trouble keeping a secret. He pointed at a laptop plugged into one of the network cables snaking out of the middle of the large oval conference table. It looked like one of their field laptops meant for Sales Engineers or Consultants. She even saw the telltale barcode they stuck on all laptops before shipping them out, but also noted it was vPro capable. She glanced around, but in the dead-end hallway no one paid her any mind. She ducked down and put her ear against the door, trying to hear inside.

 

 

"...really think you're as spineless as that, old man." The voice reminded Jessica of a new car salesman who knew he could really sell cars.

 

 

Mr. Johnson's voice sounded as measured and confident as always. "You know that's not true, Jake."

 

 

"I do have to give you credit, Mr. Unflappable. You act like you aren't phased, but I've seen your employees run around like chickens with their heads cut off from time to time. I was hoping to reach an agreement today, to avoid future... incidents."

 

 

"We're not afraid of you," Tevita said hotly, the words loud enough to cause her to flinch.

 

 

She could just imagine Mr. Johnson holding up a placating hand to Tevita. "Why do we need an agreement? You've seen the projected numbers, I assume. You've done no real harm."

 

 

"Oh? You seem to forget I have access to your network, as this laptop proves. I know everything, including pending projects, budget allotment, fiscal year targets, and actual revenue both real and pending."

 

 

"You love the threat," Mr. Johnson said, a hint of mocking in his tone. "Did you think I'd be impressed that you'd have the gall to walk in here and make ludicrous demands?"

 

 

"You'll notice that security hasn't stopped me yet. If you need proof, let me show you..."

 

 

Jessica glanced through the window, her eyes trying to focus on the number printed below the barcode. If she knew which machine this was, she might be able to control it. She quickly pulled out her cell phone and punched in the number. She then quickly retreated, heading back quickly towards the stairs. She scampered down them, only to almost fall as the heel on her left shoe broke off. She skidded down the last few steps, barely catching the rail to stop a certain face plant. She quickly slipped both shoes off, hurrying down to the first floor.

 

 

She reached her cube, glad she'd left the Altiris Console up. She used the barcode in Asset Management to find the name of the system. She browsed in the console under View, Solutions, Real-Time Console Infrastructure, Tools, and clicked on the Manage node. She quickly typed in the name and clicked OK. A window appeared, giving her the RTSM interface. A grim smile slipped on her lips as the tree loaded, giving her all of the Real-Time System Manager functionality. In the left-hand pane she browsed down into Real-Time Consoles, Real-Time System Manager, Administrative Tasks, and selected Hardware management.

 

 

With her hand hovering over the mouse, her mind whirled through the possibilities. With vPro, she had a lot more power. Taking control of the system wouldn't do much since she could only access a non-graphical interface with Serial Over LAN. Anything else she might do would only alert them to what was occurring. She needed to do something fast. She selected to reboot the system, checking the option under Redirection options labeled, Perform boot from: and Display task progress and remotely control computer. She selected to provide a CD image, browsing to a utility for disk formatting. The utility had the ability to quickly write zeroes to the drive. This essentially cleared the hard drive of all data.

 

 

It was a good first step, and she initiated the reboot, redirection. She wished she could see the snide smile vanish as the computer abruptly turned off without any warning. She knew the laptops had reasonable boot times, but it seemed to take an eternity to load the utility. She half expected the laptop to be removed from the network, the SOL session dropping, but eventually the utility's interface appeared. She glanced at her watch. It took forty seconds, though she swore it had to be at least five fretful minutes.

 

 

She quickly selected the option to wipe the drive, quickly pressing through the double-warning that all data would be lost as quickly as she could. With luck the two dimwits wouldn't realize what was happening until it was too late.

 

 

Now what had he said about security? Bobby said he'd called them, so why hadn't anyone responded? She pushed to her feet as she locked her computer, hurrying towards the front desk area. When she reached the front desk she found it unoccupied. A visitor stood at the front of the desk, looking around with a frown and lines creasing his forehead.

 

 

"It's about time," the man said, visibly trying to smooth his expression. "I have an interview and need a temp badge."

 

 

Jessica shook her head. "Sorry, I'm not with security," she said hurriedly as she picked up the phone.

 

 

"If you're an employee, you can escort me," he said with the words forceful. She paused, looking him over quickly. He carried a thin folder under his left arm, with his arms held closely to his sides, his legs shoulder-length apart. His dark eyes watched her far too intently, hardly a blink to disrupt his scrutiny. Despite his oversized short, she could see the honed muscles tensed underneath.

 

 

She swallowed the lump that formed in her throat. If she hadn't failed Drama in high school she wouldn't be as worried as she tried to smooth her expression.

 

 

"It's against policy," she said, grateful the words came out firmly. "Without a badge... I'm sure security will return shortly."

 

 

The man's lips thinned. "You don't understand..."

 

 

She dialed the phone as if she wasn't two millimeters away from bolting back into the secured section of the building. The wide desk might give her enough lead time to get through before this suspicious man grabbed her. If he chased her, would she try to force the door closed behind her, or simply start screaming? Her face felt cold, but she still found the whole situation absurdly funny.

 

 

Bobby answered his phone. "What, IM broken again?"

 

 

"Hi, this is Jess. I came up to talk to the front desk folk, but nobody's here. Can you page them?"

 

 

The man standing in front of the desk scowled. "Look, I can't wait any longer..."

 

 

"Really? I called and told them the situation."

 

 

"I know. I need to take care of the power problem to the servers we discussed earlier, and need someone from facilities here, now. Can you try again?"

 

 

"Power...? Oh. I see. I'll get right on it."

 

 

"Thanks."

 

 

She hung up the phone. She contemplated calling the police, but she wondered if the two stooges upstairs had actually broken any laws. If they hadn't, what would the police think? She knew something had to be illegal, but did police get involved in this kind of thing? She continued to watch the man carefully. He stood stiff, visibly trying to keep his face smooth.

 

 

"Sorry," she said. "I can't help you, but someone should be here soon."

 

 

"That might be too late," the man said, throwing his free hand up into the air, almost dropping the folder with the other. "I'm supposed to do sneaky about this, but it's been too long. I'm Detective Cassidy from the Boston Police Department and believe some criminal activity is being conducted in this facility."

 

 

He reached back into his pocket and produced a wallet. He flipped it open, revealing a gleaming badge.

 

 

She stared at him, mouth open for a moment. "You're with the police?" she managed to say.

 

 

"Yes, now get me into that building unless you want to be held culpable as well!"

 

 

"Culpable? No, by all means! Please, come in."

 

 

She walked over to the main door, pulling her badge up to the magnetic reader. Her heart hammered in her chest, relief flowing through her limbs until she felt almost weak. She held the door open for the detective. He walked in, eyeing her suspiciously.

 

 

"I'm Jessica Langley," she offered. "I'm on the IT staff."

 

 

"Jessica... I'm surprised you'd offer your name so freely," he said, eyes moving over the collection of cubes.

 

 

"Why? Whatever you've heard, you'll see the truth soon enough."

 

 

"The truth, eh?" he said with a hint of a dry smile. "Okay. Lead on."

 

 

They quickly headed up the stairs, through the marketing section, past the executive offices, to finally reach the one closed door in the conference area.

 

 

"That guy there, Jake Wells I believe is his name, is the CEO of New Nifty Networks."

 

 

Cassidy peered in.

 

 

"Fix it!" Jake demanded with his face an unhealthy shade of red. The "ninja", still sporting his delivery guy outfit, fussed with the computer.

 

 

"It's dead..." he said. "Somehow I can't boot to the hard drive."

 

 

Mr. Johnson sighed. "Are we done here? I have a business to run."

 

 

"No!" Jake exclaimed. "I don't know how you did it, but this isn't the only laptop of yours I have, of course. I can access everything, even your accounting software..."

 

 

Cassidy stepped back, fingering his chin. "Well. This is certainly odd. But a few unanswered facts are now coming into focus."

 

 

Jessica gestured towards the door. "So you came here thinking we're doing something illegal?"

 

 

"No, according to the evidence presented to us, you were doing illegal stuff. This all but confirms the counter-theory that Jake Wells, a well-known business criminal, was in fact setting you guys up. Alright, don't tell him I came here as I need to get the right evidence in place before arresting him..."

 

 

"What if he gets violent?" Jessica asked as Detective Cassidy began hurrying away.

 

 

"Violent? Not likely, but if so, I'll have an officer waiting outside the building. Now if you'll excuse me..."

 

 

The man practically ran away, hurrying down the stairs. Jessica watched him disappear, and then heard the door behind her open. She turned around to face Jake Wells.

 

 

"Hello," Jake said with his broad smile just a little strained.

 

 

"Uh, hi," she responded, stepping to the side. She half-expected him to see right through her wary expression, but he simply walked on past, his cohort the ninja following behind, carrying the now defective laptop behind him.

 

 

Later Tevita, Jessica, Bobby, Edgar, and Daniel the CSO sat in Mr. Johnson's office. The CEO smiled, a look of relief cracking his normally stoic demeanor.

 

 

"Perfect," he said, standing up to offer his hand to Jessica. She blushed furiously as she rose and accepted the hand shake.

 

 

"Was nothing," she mumbled.

 

 

"Nonsense. You not only stole his thunder, that which he enjoys the most, but you unmasked his entire operation to the police. His sly and underhanded method to use the police to clear out our own security in his plans was ingenious, I must admit, but it certainly backfired. Bobby. Thank you for digging through the servers to find which stolen laptops made the illicit connections to our network to fudge our accounting procedures. Tevita. Well done identifying and cutting off access for those computers and those accounts on them. By removing that potential threat we've finished securing ourselves against any current threat, and with Jake Wells back under the watchful eye of the police, we will likely have a good respite."

 

 

"You're welcome," several said at the same time.

 

 

He smiled again. "Take the rest of the day off. Expect a bonus soon for all your troubles, but most of all, I'm letting half of you take next week off, and the other half the following week, and you won't have to use your accrued vacation days."

 

 

Jessica smiled. Vacation. She hadn't been able to think about it for months now with the ongoing threat, and the idea almost put her to sleep on the spot. She yawned, then offered a nod of thanks.

 

 

She didn't really believe things would suddenly become easy as sliding across a newly iced hockey rink, but surely things couldn't be as bad as they'd been?

 

 

As she traveled home on the early metro commuter train, a thought struck her hard. She'd said to Tevita that things should be easier. Knowing fate, and her own unlucky streak, she'd just opened herself up to an even harder, scarier situation; one that would probably arise on the first day of her vacation. She considered throwing her mobile phone out the window, but as she raised her arm she stopped. That would be drastic; besides, fate wasn't really against her, was it? And if it was, wouldn't the arsenal provided by Intel's vPro, Altiris Manageability Platform, and tighter security policies stop it?

 

 

She didn't throw the phone out the window, but she did turn it off, vowing to turn it back on only when Sunday arrived before she was to return.

 

 

 

The End of Part 6

 

 

 

This concludes this story arc. I hope you enjoyed reading as much as I enjoyed writing this. I hope also that some of the value of vPro has been properly communicated through this story, highlighting some of the features that could be used in a security situation.

 

 

0 Comments Permalink
0

 

Since the previous blog was [Proactive Security|p-11339] I feel it is only suiting to discuss the trusted environment. What the trusted environment comes down to is the hardware. Even though trusted environments are virtual, the hardware is needed to feed out any of the potential problems that can occur. Items such as viruses and hackers that can take over the PC and destroy any information we have on there, vPro will be able to, as I said in previous blog, weed out any problems. This is so cool, just think about it, it would be like a six foot, hammering crazy man, finding problems and taking care of them with his deadly hammers. (If I was a bug, I would be scared!)

 

 

 

 

 

 

 

 

This trusted environment is very much an issue in today's world. With vPro technology, it will help reduce this vulnerability. The trusted execution technology (TXT) is a new technology that helps within the virtualized computing environments. It will help on getting less software issues to come up. How this works is the TXT work with the virtualization technology for Directed I/O, the hardware will protect or isolate assigned memory to make the virtual machine less prone to attacks.

 

 

 

 

I came across a case study in my research: a huge hospital by the name of Nottingham University Hospitals (NHS) that has two different primary sites that are 30 min apart. With 6,000 desktops that are there imagine how much they would spend in IT alone. Once this was implemented in the two primary sites, it takes them only 10 minutes to deal with support calls, which would even mean when the client is powered down, instead of two hours. If you would like to read more about this case study go to [The Future of IT Support.|d-1131]

 

 

 

 

Where else would you want a trusted environment to happen? Make sure nobody can get your personal information that you do not want to, but when other physicians and/or staff that need to get to your records, they are able to. If that computer that has all your information is not working properly then other problems can occur and it would be a domino effect. vPro will be able to let the server have access this information and plug it into another client.

 

 

 

 

Let us look beyond this; how about Financial institutes'? They have a lot of personal information there. If the clients went down at a branch, a main server can come in and fix most software problems from a main site. Less desk side service would mean more money that would be distributed. I like more money also I like having reliability in an area that is holding my money. For some reason I like to retrieve what I put in. Stock markets have many people with computers, which would mean that there could be potential problems. If that happens instead of trying to figure out where that person is, they can fix the problem remotely. The main server that IT works on would make sure that all of the clients are protected from harmful outside sources.

 

 

 

 

See now don't you wish you always had a big guy with hammers to destroy anything bad!!

 

 

 

Understanding vPro: Chapter 1- What is it?

 

 

Understanding vPro: Chapter 2-What is it used for/ why should I use it

 

 

Understanding vPro: Chapter 3- Proactive Security- Does it have a tiny guard dog???

 

 

0 Comments Permalink
1 2 Previous Next