espionage
The Federal Bureau of Investigation estimates that U.S.
Corporations lose $100 Billion annually due to industrial espionage.
While many people believe that the espionage is committed by well financed organizations that can only be stopped by national agencies, that is very incorrect.
Industrial espionage usually exploits simple and very preventable preventable vulnerabilities to produce tremendous results.
By focusing on comprehensive security, and not just technical security, information security professionals can significantly hamper adversary attempts to steal their espionage
organization's information assets.
The presentation that describes this paper presents a case study of an actual industrial espionage attack against a large U.S.
U.S.
corporation.
espionage
The theft of sensitive information from U.S.
corporations is the goal for many foreign nations and companies.
Adversaries do not care about what form the information takes.
Whether information is in electronic format or is thrown away in the trash, it is irrelevant as long as the information information is compromised.
Unfortunately for most corporate security programs, there is a preoccupation with technical security espionage that leaves information very vulnerable to basic espionage methods.
Information security professionals focus their efforts on what they know best.
When they allocate their limited budgets, the division of funds reflects their perceived needs, which which espionage are basically technical security mechanisms.
Firewalls and other Internet security mechanisms are the hottest selling products.
While firewalls go a long way in preventing the traditional computer hackers from intruding into a corporate computer network, they do nothing to stop the most significant source of computer crime: Insiders.
Two recent recent studies show espionage that insiders were responsible for more than 70% of information related thefts [1, 3].
The threat prevented by firewalls is minimal, because a focused attack will bypass the strongest protection mechanisms.
Information comes in many forms, and must be protected in all of its' forms.
Information security is
