Risks of unattended computers.

CubanConnectionZ · 12-October-05, 05:25 PM

Found this while doing some reading in a article about securing pc's and networks.

Hope this helps someone out.

Risks of unattended computers.

In companies, users often leave their desks for many reasons, leaving
the session active. This behavior can pose a serious security risk for
both the company and the user.

The recommendations for avoiding this problem include implementing
timeouts in all PCs to ensure that users are automatically logged out after
a certain period of inactivity, minimizing the risk of attack.

A significant number of unauthorized access
occurs when someone sits down at the computer of another user with an active session.
Unattended PCs facilitate access to sensitive data and sending
of false emails, among other actions.

Risks to companies:

1. Unauthorized access to personal data (for example, salary
information).

2. Unauthorized access to business information to which they can make
changes (to cover up fraud, increase commission, etc.).

3. Avoid or bypass approvals processes (such as allowing purchase
orders).

Risks to users:

1. Unauthorized reading of personal mail.

2. Sending emails in the name of another user, which can cause serious
professional damage.

3. Unauthorized use of a computer to cause damage or attack other
network computers.

MasterP · 12-October-05, 05:39 PM

haven't seen any posts from you in a while! Where ya been??

Where I work, NOBODY leaves their desks without at least locking their PC - there are auto timeouts in place too. Heck, even throwing away paper in the regular trash is a no-no (gotta be shredded)

What we usually do for the first couple of times someone leaves their PC unattended is to send an email to the rest of the team from their email account - something like professsing their undying love for their manager (also on the mailing list) or whether anyone has any calamime lotion that they can use for a skin rash... you get the picture

Usually does the trick

12-October-05, 05:25 PM		#1 (permalink)
CubanConnectionZ Apex Tech God	Risks of unattended computers. Found this while doing some reading in a article about securing pc's and networks. Hope this helps someone out. Risks of unattended computers. In companies, users often leave their desks for many reasons, leaving the session active. This behavior can pose a serious security risk for both the company and the user. The recommendations for avoiding this problem include implementing timeouts in all PCs to ensure that users are automatically logged out after a certain period of inactivity, minimizing the risk of attack. A significant number of unauthorized access occurs when someone sits down at the computer of another user with an active session. Unattended PCs facilitate access to sensitive data and sending of false emails, among other actions. Risks to companies: 1. Unauthorized access to personal data (for example, salary information). 2. Unauthorized access to business information to which they can make changes (to cover up fraud, increase commission, etc.). 3. Avoid or bypass approvals processes (such as allowing purchase orders). Risks to users: 1. Unauthorized reading of personal mail. 2. Sending emails in the name of another user, which can cause serious professional damage. 3. Unauthorized use of a computer to cause damage or attack other network computers. Last edited by CubanConnectionZ; 12-October-05 at 05:30 PM.. Reason: Editing

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
The Register // O2: risks are for losers	Gizmo	The Register RSS	0	16-November-06 03:47 PM
The Register // Warning over unattended PC peril	Gizmo	The Register RSS	0	29-September-05 03:53 PM
Slashdot // GPL 3 Forking Risks Discussed	Gizmo	Slashdot RSS	0	25-March-05 01:22 PM
Web News: Nanotech risks need study	Red02	PC Apex Web News	1	29-July-04 04:48 PM
So-Called Health Risks!	Darksamurai	Daily Disturbance	4	07-September-03 10:25 PM

12-October-05, 05:39 PM		#2 (permalink)
MasterP Da' Thunda' From Down Unda'	haven't seen any posts from you in a while! Where ya been?? Where I work, NOBODY leaves their desks without at least locking their PC - there are auto timeouts in place too. Heck, even throwing away paper in the regular trash is a no-no (gotta be shredded) What we usually do for the first couple of times someone leaves their PC unattended is to send an email to the rest of the team from their email account - something like professsing their undying love for their manager (also on the mailing list) or whether anyone has any calamime lotion that they can use for a skin rash... you get the picture Usually does the trick