NOW READ THIS
("Security Advisory")
Submitted by: Bill Hickey
NCVA Listmaster
NRT-0626 Majority of hotels fail to apply best practices to secure
their networks:
A newly released study shows that "a substantial majority
of hotels are not using all the possible tools to maintain their network's
security," according to an online trade journal. The study was the result
of a direct analysis of the networks available to guests in 46 hotels and was
supplemented by a survey of 147 US hotels. The study notes that because
"many business travelers connect remotely to continue working while on the
road, the potential for theft of corporate information exists." According
to the study, some hotels still rely on relatively rudimentary hub technology
for their networks, which are particularly subject to hacking. "Others have
upgraded to more secure switches or routers and encrypted Wi‑Fi
connections, but that still does not prevent malicious users from intercepting
guests' transmissions," the study found.
The study cites a "best practice" example of a hotel
in Dallas where the property "set up each node on its network as a virtual
local area network, or VLAN. By using these VLANs, the hotel had separated each
guest's computer in a way that should protect against stolen data. It also
gives the hotel greater control over the guest side of the network."
Other Internet security measures hotel operators can take with
relative ease and low costs include urging guests to ask the correct name of the
hotspot connection to help ensure a false connection is not logged into; and
recommending that guests disable a laptop's automatic feature that connects
to the "nearest" hotspot.
[www.hoteliers.com 21Sep08]