Datacom > Modems & CSUs

What you don’t know can—and will—hurt you. Know your security risks and keep your site safe from harm.

Security risks affect every computer, whether the machine is connected to a network or not. There are basically four types of risk, and some often overlap the other.
• Bugs or misconfiguration problems in the Web server that enable unauthorized remote users (hackers or crackers) to access the system to steal data and/or cause greater harm.
• Active content (say a virus) on the browser side that crashes the browser, damages the user’s system, or breaches the user’s privacy.
• Interception of network data sent from browser to server or vice versa via network eavesdropping. Eavesdropping can occur at any point along the pathway between the browser and server. These points include the network on the browser’s side of the connection, the network on the server’s side of the connection (including intranets), the end-user’s ISP, the server’s ISP, and either ISP’s regional access provider—quite a lot of points. So-called “secure“ browsers and servers are only designed to protect confidential information against network eavesdropping. If system security isn’t available on both the browser and server sides, confidential documents could be compromised.
• Viruses installed via software onto network or standalone computers.

So which operating systems are more susceptible to attack? In general, the ones which are touted as more powerful and flexible. UNIX® systems are a prime example. They come with a large number of built-in servers, services, and scripting languages which provide hackers multiple portals of entry to exploit. By contrast, less capable operating systems (apologies in advance) like Windows® and Macintosh® are tougher to exploit. In short, what you trade away in security you make up for in capability and vice versa.

The same logic extends to Web servers. The more features that are offered, the more likely hackers can find inroads. One classic case involved a UNIX® server that featured a security hole. The hole that enabled outsiders to execute arbitrary commands on the server host—and that was a proverbial barrel of monkeys for Web administrators.

Common Gateway Interface (CGI) scripts are also a major source of security risks. Although the CGI protocol isn’t inherently insecure, the scripts must be written with the same kind of care accorded to the server itself. However, some scripts aren’t created with finesse, and trusting Web administrators often install them without knowing any better.

Server-side includes, which are snippets of server directives embedded in HTML documents, are another potential source of problems. A subset of their directives instruct the server to execute arbitrary system commands and CGI scripts, and unintentional side effects can be introduced.

So what can you do to keep on top of the latest security holes? Call Black Box Tech Support at 724-746-5500.

You can also implement some common sense procedures that go a long way to keeping data-communication assets safe from harm.
• Encourage employees to choose passwords that aren’t obvious.
• Require employees to change passwords every 90 days.
• Keep your virus-protection subscriptions current.
• Educate employees about the risks of e-mail attachments.
• Implement a comprehensive network security plan.
• Assess your security plan and levels of security.
• Remove network access immediately for all former employees.
• Provide a secure, centrally managed server for telecommuters.
• Update your Web server software.
• Don’t run any unnecessary network services.

Not all modems shuttle data in air-conditioned, climate-controlled comfort. And modems that operate in cozy environments have absolutely no business being exposed to harsh industrial conditions or to the elements.

But just because you work in a rough-and-tumble place doesn’t mean you have to sacrifice the convenience of a good modem. Instead, you should opt for an industrial modem. There are many industrial modems built for various degrees of extremity.

Survivability depends on reliability.
Sure, standard modems give you access to data in remote sites or enable you to service equipment on the plant floor—and you can do all this from the convenience of your office. However, these benefits are only possible if your modem can continue to function in its environment. And since standard modems aren’t built for adverse conditions, they’re not going to be reliable.

No penalties for interference.
Electrical control equipment—such as motors, relays, compressors, and generators—emit electromagnetic interference (EMI) that can affect the performance and reliability of a standard telephone modem.

EMI is emitted through power lines, the RS-232 communications cable, or through the telephone line itself. The very means of data communication, cable, is often the worst enemy of the standard modems that use it.

An industrial modem, on the other hand, has filters and superior EMI immunity to protect itself and your data. If you build your electrical cabinets to UL® or CSA standards, remember that your modem must also conform to UL® standard 508.

They go to extremes.
Temperature is the biggest killer of electronic equipment in industrial environments. The heat generated by industrial equipment in sealed enclosures or where space is a premium can make the temperature as much as 50 °F higher than the surrounding environment.

So standard modems can’t take the heat. But what about being outdoors in the other extreme, cold weather? Well, standard modems can’t take the cold either.

If you install your equipment in remote outdoor locations, it must work on the coldest days— especially those cold days when you least want to get in the car and go to the site to repair a standard modem that froze up.

Whether they’re placed in manufacturing environments or the great outdoors, industrial modems get the data through when you need it. They go to extremes for you.

Heavy metal for all kinds of banging around.
Industrial modems are built with durable metal enclosures that protect circuitry in rough conditions and ward off signal-disrupting EMI. Plus, they feature steel-bolt flanges to anchor them. In short, industrial modems can take the physical, heavy-duty punishment thrown their way.

So where exactly can you use an industrial modem?
• Heavy industry and manufacturing
• Oil and gas fields
• Refineries
• Storage sites
• Utility substations
• Agricultural projects
• Military facilities
• Research installations
• Water/wastewater systems

…and another thing!
If dedicated copper lines can’t be run through industrial environments, or if the fiber optic option is cost-prohibitive, there are also wireless industrial modems that make line-of-sight connections. If there’s a way to get the data through, industrial modems will get the job done.

Industrial-strength assurance.
Industrial modems remain in service for a very long time. But if you ever need a replacement that is hardware or software compatible, be assured that Black Box continues to support its products year after year—so you don’t spend your time re-engineering systems if you have to make a replacement.

Security modems typically offer four options for levels of security:
• No security
• Password
• Password with callback
• Password with callback and second-level password

Auto callback enables an answering modem to dial a prestored callback number after answering a call.

When configured for auto callback security, modems like the Series II Modems provide secure and cost-effective corporate LAN access for both travelers and telecommuters. Unauthorized connections are prevented by invalid passwords.

Callback numbers minimize toll charges via the following procedure: When called, the security modem will answer and, after a slight delay, respond with a prompt that requests entry of your modem’s login password. Once you’ve typed it in correctly and hit the return key, the security modem can either allow the user through or disconnect and dial back the prestored number.

The security modem gives you several attempts at each prompt to provide correct information—incorrect entries result in a password retry. If the requested information isn’t provided within a set amount of time, your call is disconnected.

Depending on what security level your particular modem is configured for, you may or may not be asked to provide more password information upon callback.

If the second-level password clearance is required, then the security modem responds with another request for your modem’s login password when your modem answers the callback. After you enter the password, the security modem should respond with an acknowledgement of connection.

This acknowledgement tells you that the modems are now in Data Mode, your reversal of phone charges is complete, and you are ready to communicate with the host computer.

Is your company refraining from connecting to the Internet? If so, you’re not alone. It’s the fear of being successfully hacked that’s keeping many companies and their employees off the Internet. In fact, according to Infosecurity News, over 25% of all companies polled responded that hackers have tried to gain unauthorized access from outside the corporate network.

What else keeps companies disconnected? There’s a mystique to being hacked. It’s the new crime, it’s the hottest news. And all this hype, say the media watchers and technical experts, is keeping companies off the Internet.

Why the mystique? Many people, including company executives, lack a fundamental understanding of technology. Mix this with the complexities of network security issues and you can see why many companies haven’t ventured onto the Information Superhighway. What you don’t know, reason many companies, can hurt you.

On the other hand, there are many companies with executives who have “Teflon® sensibilities.“ Media hype doesn’t stick to them. Unfortunately, neither does the advice of company network administrators who want network security problems addressed. These companies go about their connected-to-the-Net business until the inevitable compromise in security happens. And when something valuable is swiped, the executives worry.

“We’ve taken steps to make sure something like this never happens again!“ is the boilerplate reaction. Otherwise, they say, heads will roll. For companies that have been hacked, the cost of information security now equals the cost of the incident plus the cost of countermeasures.

A network, as it turns out, is only as secure as the people who run it, use it, and fund its protection. Industry insiders believe overall spending on information security will increase dramatically.

So protect yourself from hackers while getting the Internet access you need. For answers to your network security questions, call Black Box Technical Support today.