Author: Andrew Hay
What The A-Team Can Teach Us About Information Security
I’m not sure why I haven’t thought of this before…we need to be learning about security from the men that know it best – The A-Team!
In 1972, a crack commando unit was sent to prison by a military court for a crime they didn’t commit. These men promptly escaped from a maximum security stockade to the Los Angeles underground. Today, still wanted by the government, they survive as soldiers of fortune. If you have a problem, if no one else can help, and if you can find them, maybe you can hire… The A-Team.
So much about the A-Team can be applied to the security profession. Take the following wise quotes from the members of this illustrious team:
Colonel John “Hannibal” Smith
I love it when a plan comes together.
Who doesn’t? If you don’t properly document your security policies and procedures how can you hope to be able to operate your security program effectively? If the plan doesn’t “come together” then you’re just asking for trouble. Take it from Hannibal, make sure your security policies and procedures are easy to follow, comprehensive, and constantly updated. By the way this is possibly the wisest thing ever said while holding a submachine gun and smoking a cigar.
Classic Hannibal quote – “Hickory dickory dock / The mouse ran up the clock / The clock struck one / Down he run / You smell worse than my socks.”
Captain H.M. “Howlin’ Mad” Murdock
I don’t wanna be a secret weapon! I want to be an exposed weapon!
This is exactly how I want security professionals to be viewed. I would prefer that people knew who/what the security professionals are/do. The security department shouldn’t be used as a secret weapon but rather as the tip of the spear. Users need to be educated on the role of the security professionals within the organization so that they know by whom the consequences outlined in the organizational polices are enforced. Murdock might be crazy, but people tend not to screw with the crazy people 😉
Classic Murdock quote – “I’m a bird, I’m a plane, I’m a choo-choo train *shouts* Uh, touchdown!”
Sergeant Bosco “B.A.” Baracus
When punks start hasslin’ decent people, I make it my bidness.
“Punks” being malicious entities (i.e. hackers, malware, and so on) and “hasslin” referring to disrupting the regular flow of operations makes this the coolest way to explain a security professional’s job to the layperson. Our goal is to ensure the safety of those who do not have the required skills or ability to protect themselves from a technological attack. Who knew that Mr. T would be such a forward thinking individual 🙂
Classic B.A. quote – “Me rhyming my words… that’s the craziest thing I ever heard…. my ears don’t ring.. I don’t hear a thing! Hey wait a minute sucka!”
Lieutenant Templeton “Face” Peck
The key to any con is to place the mark in a position where he or she thinks reward will come or harm will be avoided if he or she does exactly as told by the conman.
I struggled to find a good positive one for Face since his role was always that of the conman. The above quote, however, is a good reminder of the purpose behind social engineering attacks. The attacker is out to gain your confidence (did you know that the ‘con’ in ‘conman’ meant confidence?) and trick you, the mark, into revealing information that they can use against you and your organization. If it doesn’t feel right…then don’t fall for it!
Classic Face quote – “What am I gonna do, flush myself down the toilet?”
Check Point / Nokia Customer and Partner Email Released
As a followup to my previous post about the Check Point purchase of Nokia’s security unit, here is the customer and partner email that was sent out by Amnon Bar-Lev, VP WW Field Operations and Technical Services, at Check Point:
It’s my pleasure to share with you that Check Point signed an agreement to acquire the Nokia security appliance business.
As many of you already know, Check Point and the Nokia security appliance business have collaborated over the past decade to deliver industry-leading enterprise security solutions. We believe that through this acquisition we will build upon our successful partnership to provide you with a deeper security appliance portfolio.
Nokia has been a leader in the security appliance market and a strategic partner to us for the last 12 years. We feel adding Nokia’s security appliance experience into Check Point’s broad range of security solutions is the natural progression of our long alliance and will assure a smooth path forward for our mutual customers.
With this acquisition, we are taking our partnership to the next level. We will continue to sell and support both Check Point and Nokia’s existing product lines and will work to enhance and create an even better line of security appliances – building upon the expertise and innovation of Check Point and Nokia.
Furthermore, our shared channel partners, another party in our long-standing collaboration, will be able to deliver our joint solutions quickly and with increased ease. As a result, you’ll interact with the same channel you have dealt with all along but in a much simpler way.
The agreement between Check Point and Nokia is expected to close in the first quarter of 2009 subject to regulatory approvals and customary closing conditions. Until the transaction is closed both companies will conduct business as usual, operating as two separate entities.
As the deal advances towards closure we will be sure to update you with more details of our integration plans.
A Frequently Asked Questions page has also been created here.
Here is the Nokia email from Greg Podshadley, Vice President and General Manager, Nokia Security Appliance Business Unit:
I am pleased to share with you a significant milestone for our business. Nokia announced today that it has signed an agreement for Check Point Software Technologies to acquire Nokia’s security appliance business unit.
As you know, the two businesses have collaborated for over a decade to deliver industry-leading enterprise security solutions. This agreement is the natural culmination of that long-standing collaboration. We also believe that this transaction will provide the best path forward for you – our valued customers and partners.
I want to assure you that a primary focus is to ensure a smooth transition for our customers and partners. We strongly believe the many synergies between the two companies will bring strengthened products and services to our customers and partners for years to come.
Thank you for your patience during our evolution. We look forward to our exciting path forward!