Cable modems -- not just a security problem

Daily Newsletters

Sign up to ZDNet UK's daily newsletter.

ANALYSIS
It's no mystery why cable modems are saturating the corporate communications environment. They're fast, readily available, increasingly reliable, and relatively easy to install. Yet the security of the shared infrastructure on which cable modems operate has long been a key point of debate between modem advocates and skeptics. In general, tech leaders don't relish the idea that vital corporate information is, at least theoretically, available to the hacker next door. The devices represent a big change for enterprises, however, and there are several issues CIOs must be aware of. Cable modems have long raised security concerns related to how addresses are distributed within the networks' shared infrastructure. In addition, the sudden spike in the volume and type of applications demanded by off-site workers can and will stress enterprise resources. Security issues
CIOs are well advised to assume that cable modem access is inherently insecure. In addition to physically sharing infrastructure with other modems, the devices usually have a fixed IP address which is vulnerable to attack. Although this does not expose the corporate network directly, it can give an attacker access to anything on the system at the user's home. Clearly, this means that extra security precautions are necessary. Traver believes that a combination of IP VPNs, software firewalls, and/or next-generation connectivity products from companies such as Neoteris or Flatrock are vital to protecting remote desktops. Andrew Deskur, director of systems and network administration for VC firm Atlas Venture said he chooses cable modems over DSL even where both are available due to security needs. In addition to good service from his cable provider, AT&T Broadband, Deskur said that cheaper DSL services don't support the point-to-point protocol over Ethernet (PPPoE) used by his Check Point Software Technologies firewall/VPN device. Others prefer DSL to cable, because the service is not a shared link, but a point-to-point link to the Internet -- although if a fixed IP address is provided, DSL connections are just as vulnerable, so both will require a firewall. Another downside of DHCP is that it reduces the ability to configure remotely. If multiple PCs are behind a modem connected to a corporate server--a relatively common satellite office scenario--the server might not be able to remotely configure individual PCs, Traver explained. New technologies tax resources
The general growth of broadband remote connectivity means that CIOs must prepare for new usage patterns, said Bruce Leichtman, the principal of Leichtman Research Group, a consultancy based in New Hampshire, US. The idea is that the entire infrastructure may be stressed, and usage patterns changed, as the number of remote workers increases and the types of applications in use require more bandwidth. For instance, if telecommuters suddenly begin streaming training and informational videos from the corporate server, CIOs have to be prepared to offer higher quality of service (QoS) levels, in addition to simply increasing the bandwidth. "If all of a sudden we have a much larger number of people using bandwidth, or [if] connectivity grows, it needs to be factored in," agreed Deskur, who suggests that companies keep close tabs on applications used to ensure infrastructure stability. Within this scenario are a number of commonsense issues that tech leaders must also consider. For instance, many teleworkers' machines are on home networks. This means that all the computers in the home must be secure, not just those used in connection with work. This poses a problem for the IT unit, as well as for the corporate user policies in place, as it tends to blur the lines between personal and business PC use. It could literally mean that home-office IT visits will be necessary and have to be factored into the staffing and budget mix. For this reason, experts recommend putting procedures in place to ensure that remote users' PC time is work-related, said Deskur: "You have to go in with predefined limits as to what you will and will not support so that the IT staff isn't in the position of helping to set up the son to print off the employee's wife's computer." Cable connectivity expected to grow
Tech leaders should also be aware that remote connectivity issues aren't going to go away any time soon, as the cable industry is focused on building up the small- and midsize business (SMB) market. The attraction is particularly high for several reasons: Revenue growth in cable companies' core entertainment markets is slowing, and debt from the decade-long mergers and acquisitions binge is high. Consequently, cable operators such as Comcast, Charter Communications, and Cox Communications have established corporate entities aimed exclusively at SMBs. The cable industry's advancements are something that CIOs at both small and large companies should be watching. A raft of technology vendors--Narad Networks, Advent Networks, Aurora Networks, Wave7 Optics, Jedai Broadband Networks, Extend Networks, and others--are offering various approaches to optimising the cable industry's business market goals. Narad, for instance, announced a deal with IBM in June to enable cable operators to offer telecom services to SMBs at rates as high as 100 Mbps. The key is accepting that the flow of information between home offices and corporate hub centers is only going to grow. "You can't be scared of the traffic," Leichtman said. "I hear so often that CIOs are scared of the traffic. Don't be scared."
Have your say instantly, in the Tech Update forum. For a weekly round-up of the enterprise IT news, sign up for the Tech Update newsletter. Find out what's where in the new Tech Update with our Guided Tour. Tell us what you think in the Mailroom.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

Moley

For Gnome 2 die-hards, it is possible to add icons to the bottom panel (or top top panel, if you prefer) which provide the exact Gnome 2...

41 minutes ago by Moley on A tale of two distros: Ubuntu and Linux Mint
ramwellian

Your comments would seem pretty naive and immature. Your 'solution' appears to be, "gee, let's all just give in to the hackers and give them...

54 minutes ago by ramwellian on Cloud computing security: no more oxymoron?
BugStalker

"Interesting thought ... If you installed Win7 as a dual boot on a machine that previously only had Linux, and it wrecked your Linux installation,...

1 hour ago by BugStalker on Windows 7 Declares War on GRUB
whs001

This is an excellent summary of Ubuntu and Mint and the interface differences between them. Most such articles take a very partisan position for...

1 hour ago by whs001 on A tale of two distros: Ubuntu and Linux Mint
Moley

@ewallace. Not so clear. Anyone can obtain the text, for example from here http://www.ustr.gov/webfm_send/2379. I support ACTA so long as it and...

2 hours ago by Moley on ACTA: Facts, misconceptions and questions
45283

I think WinRT is fantastic. I just wish it was an option for people that didn't want to go through Microsoft's App Store with its attendant...

5 hours ago by 45283 on Why Windows 8 needs architectural hygiene for WOA
Burn-IT

Nine people? £30m? Who's back pocket is that lot going in? And IF they say it is for new buildings, what about all the ones the government has...

6 hours ago by Burn-IT on Police set to launch three £30m e-crime hubs
ewallace

Just to be clear, nobody knows what is in the text of ACTA, here is a photograph of the text of ACTA http://twitpic.com/8h9iju as submitted to the...

6 hours ago by ewallace on ACTA: Facts, misconceptions and questions
fgvrg56

Unfortunately main issue is that ASUS is refusing to accept that they make some mistake on this version of asus Transformer prime. 1 - GPS sensor...

7 hours ago by fgvrg56 on Asus Eee Pad Transformer Prime Wi-Fi & GPS problems?
Ben Woods

@Marcus A fair question. Just talked with Archos which said it was working on an announcement for next week....

8 hours ago by Ben Woods on Archos confirms G9 Ice Cream Sandwich update schedule
Marcus Karlsson

Any update on this, considering the claimed "first week of February"?

9 hours ago by Marcus Karlsson via Facebook on Archos confirms G9 Ice Cream Sandwich update schedule
apexwm

Bill Goodrich : Just as al_langevin pointed out, with Windows Server 2008 there is no Services for Macintosh anymore. It's gone, not available....

18 hours ago by apexwm on Windows Server 2008 drops the ball for Mac compatibility
txtrainguy

Replying to an old topic that I'm currently facing with my CEO (who is on a Mac). Our servers are primarily Windows Servers, office is about...

1 day ago by txtrainguy on Windows Server 2008 drops the ball for Mac compatibility
k0tcs3

Sure, that makes perfect sense. Pay wrong-doers money and thank them for breaching your security and pointing out your flaws, that would surely...

1 day ago by k0tcs3 on US indicts Romanian over NASA climate change hack
Random_Error

I think he's referring specifically to Android apps, as Apple do regulate their App Store, but Google seem to let any old crap onto the Android store!

1 day ago by Random_Error on RIM: BlackBerry will keep 'garbage' apps out of store
Paul Fezziwig

Keep the crap apps out?! How will they compete with Android and Apple's claim to fame of having so many life changing apps? I wonder if the media...

1 day ago by Paul Fezziwig via Facebook on RIM: BlackBerry will keep 'garbage' apps out of store
Aigars Mahinovs

It has been shown time after time that if there is an author store that sells the songs at even 1$ per song and gives you a high-quality digital...

1 day ago by Aigars Mahinovs via Facebook on Copyright isn't working, says European Commission
awbMaven

""As a result of Butyka's alleged conduct, researchers were unable to use the computers for more than two months while NASA removed the malicious...

1 day ago by awbMaven on US indicts Romanian over NASA climate change hack
subhorup

It simultaneously worries me and uplifts me that a self-proclaimed group of internet activists name themselves after Indian mythical figures....

2 days ago by subhorup on Anonymous activists release PCAnywhere source code
naviathan

It's actually far easier to work anonymously on the internet than you think. With tools like Tor bouncing your traffic around the world before...

2 days ago by naviathan on Anonymous activists release PCAnywhere source code