ProjectNews - April Edition: Heartbleed is About to Get Worse
- How do companies handle the Internet disruptions?
We would like to invite our ProjectNews members to connect, collaborate and knowledge share in the real-time. If you are interested, please join in the conversation via our
LinkedIn group here.
We would like to invite our ProjectNews members to connect, collaborate and knowledge share in the real-time. If you are interested, please join in the conversation via our
LinkedIn group here.
Challenge:
How do we tackle the major Internet disruptions as companies scramble to repair encryption systems on hundreds of thousands of websites?
Stakeholders:
500,000 affected sites - from mom-and-pop retailers to big conglomerates
Overview:
Efforts to fix the evil Heartbleed bug threaten to cause major disruptions to the Internet over the next several weeks as companies scramble to repair encryption systems on hundreds of thousands of websites at the same time.
In fact, estimates of the severity of the bug's damage have drastically increased almost daily since researchers unveiled the discovery of Heartbleed. What first seemed like an inconvenient matter of changing passwords for protection now appears more serious. New findings suggest that hackers can use the bug to create fake websites that mimic legitimate ones to trick consumers into handing over valuable information. The scale of the work required to fix this aspect of the bug, which makes it possible to steal the "security certificates" that verify that a website is authentic could overwhelm the systems designed to keep the Internet trustworthy.
Heartbleed has put many consumers' user names and passwords at risk as it was undetected for two years. The bug quietly undermined the basic security of the Internet by leaving a gap in OpenSSL, an encryption technology used widely by businesses to protect sensitive data. Reportedly, it has affected as much as two-thirds of the Internet; the flaw prompted Web users to change their passwords on Google, Yahoo, Facebook and other major services.
Finding an effective way to manage cybersecurity chaos is daunting; however, the effects of not properly managing this can be more so.
Join the Conversation!
Share your thoughts on how companies can manage the disruptions Heartbleed is causing.
What do you think companies can do to retroactively handle
this disruption?
How can companies implement a solid plan of protection for
future attacks?
Have you been affected by Heartbleed? What have you done to
protect yourself or plan for future cybersecurity attacks?
Conclusions based on the April 14 article, "Heartbleed
is about to get worse, and it will slow the Internet to a crawl" on
Washingtonpost.com.
Want to have
discussions about topics like this that affect the project management and
business analysis industries today? Join us at ProjectWorld & World
Congress for Business Analysts 2014 in Seattle this fall! Learn more about the
event here: http://bit.ly/1nVF08l
No comments:
Post a Comment