Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Combining work and play threatens business security

Security: Risk and Reward By Andreas M. Antonopoulos , Network World , 10/10/2007
Andreas Antonopoulos

Nine-to-five is quickly becoming a quaint memory in many workplaces. Flex time, teleworkers, road warriors and home offices are increasingly blurring the distinction between "my time" and "work time." That means more work is done during off-hours but also that more "play" is done during work.

If my employees do a quick e-mail check after dinner to get ready for tomorrow's tasks, is it not also reasonable for them to check their eBay listing during the day? In a business driven by results and productivity, flexibility in the work hours usually benefits the employer just as much as the employee. But while employers might not worry about blurring the working hours, should they mind about employees using the same laptop for both work and play?

There are inherent risks in using the same computing environment for work and home. Does my home use of company equipment endanger the company? Or does my work computer endanger my online checking account? Either way, it is difficult to reconcile the security policies of one type of use with those of the other. In most cases home use may not have much of a security policy. In my case I face the opposite problem: I have to use my work computer to browse security sites for research. That puts my home use at risk more so than the other way around.

For the next generation of users, today's teenagers who become tomorrow's employees, the problem is even more complex — they comfortably switch not just between work and play but also between a dozen different online personas. Is it realistic to expect employees to keep home use on the home computer and work use on the work computer?

While most companies apply acceptable-use policies attempting to cleanly separate work from play, I expect that over time we will have to look at this problem from a new angle. Instead of trying to physically separate different use contexts, we should instead use virtualization on the desktop to logically separate contexts.

My work laptop contains an additional virtual machine that runs a full operating system for home use only. If I want to do online banking or order groceries online I do so from my home virtual machine. I use a VPN to direct all home-machine traffic to a server at home so that it all originates from my own broadband connection and not my employers network.

The next step is more interesting: Rather than having my home use in a virtual partition, I would prefer to have all my employees use a virtual machine for work. If I can put it on a secure USB stick, the work desktop becomes truly portable and can be used on any machine, whether provided by the employer or not. "Honey, are you at work at the moment?” – “Yes, virtually.”

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.

Whitepapers

Advancing the Economics of Networking

Aging network systems and old habits have dictated how businesses spend their IT budgets. As a...

Implementing HA at the Enterprise Data Center Edge to Connect to a Large Number of Branch Offices

This paper reviews the problem of creating a network where the dynamic availability of services is...

Enterprise Data Center Network Reference Architecture

Using a High Performance Network Backbone to Meet the Requirements of the Modern Enterprise Data...

Webcasts

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Stay out of the headlines: Detecting and preventing network intrusions

How do YOU stay out of the headlines? There is no denying that risk exists in our computer-driven...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

IP address management in 2008 - six things to know

Read this Network World Special Brief to learn how Enterprise IT managers must update their...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...