新东方网>厦门新东方学校>资讯>出国留学>正文

【雅思练习】每天阅读练习:你的APP存在风险吗?

2016-10-14 09:57

来源:新东方

作者:新东方

 

    以下是新东方在线雅思网为大家整理的雅思阅读每日练:你的APP存在安全风险吗?。雅思阅读的制胜法宝从来都没变过,那就是:多读多练。小编为大家带来了内容优质的阅读素材,同学们在备考阶段一定要多多练习哦~

点击下方按钮,了解更多相关课程


 OK, so how many of you have downloaded Pokemon Go on to your work phone? Come on, admit it.

  If you were surprised the IT department let you do this, don't be - many companies have absolutely no idea what their staff are up to it seems.

  For example, when cybersecurity firm Imperva asked one of its banking clients how many apps it thought its staff were using, the firm estimated between 75 and 100 in total. The figure was actually closer to 800.

  Why does this matter?

  Cloud-based apps often gain access to the camera, location, data and contacts on your phone. So you never know how much sensitive company information they may be snaffling.

  snaffling:snaffle的现在分词

  n. 马嚼子;

  vt. 给…装以轻勒;偷窃;

  例句:

  Michael Stich then proceeded to snaffle the$ 2 million first prize.

  其他:

  第三人称单数:snaffles 复数:snaffles 现在分词:snaffling过去式:snaffled 过去分词:snaffled

  We could be giving hackers, fraudsters and spies the keys to our company's back door, particularly if we naively use the same log-in details for external apps as we do for internal work apps.

  "It's a mission-critical problem if you don't know which third-party apps have access to your data," says Ryan Kalember, senior vice president of cybersecurity strategy at Proofpoint.

  This year alone tech companies such as LinkedIn, MySpace and Dropbox have suffered major data breaches, with security research company Ponemon putting the average cost per breach at $4m (£3.2m), or $158 per stolen record.

  And our cavalier attitude to apps at work could be contributing to the problem, experts warn.

  "If the enterprise doesn't provide the users with the tools they expect to do the job, they'll find the tools themselves," says Jon Huberman, chief executive of file-sharing company Syncplicity.

  "But it's a huge issue for the company - data leakage is a big problem."

  'Skeleton in the closet'

  While apps such as Slack, Evernote, WhatsApp, and Dropbox, can help us do our jobs more efficiently - in the office and away from it - we often don't know if they've been approved by our IT departments or how much corporate data we may be sharing - wittingly or unwittingly - with the cloud.

  Terry Ray, Imperva's chief product strategist, says: "Staff often don't think about security or know what is or isn't sensitive data.

  "And the risks of a data breach are massively exacerbated by the cloud, even though cloud-based apps, such as Microsoft's Office 365, are proving increasingly popular because they dramatically reduce IT costs."

  massively

  adv. 大而重; 厚实; 粗大; 强有力

  例句:

  We invested massively in German machinery.

  我们对德国的机器制造业进行了大量的投资。

  The worry for IT departments is that these third-party apps may not have particularly robust security protocols in place because many were developed primarily with consumers in mind.

  And the data itself may be stored in foreign countries governed by less stringent data protection laws.

  "App security is the skeleton in the closet," says Cesare Garlati, chief security strategist at Prpl Foundation, a non-profit body promoting open source software standards.

  "Software is assembled these days, not written - developers use libraries, so you don't know what bits of defective code may be lurking in an app compromising its security," he says.

  "Bring Your Own Device [using your own smartphone, tablet or laptop for work purposes] was always a big threat to the security model - corporations lose control."

  While companies take great pains to protect personally identifiable information, such as social security and credit card numbers, it's often the seemingly innocuous information that can give fraudsters the ammunition to make a phishing email more believable, say, or an invoice payment request more plausible.

  Other threats

  Many apps are also laden with malware - another threat to corporate security.

  "Most [malware-laden] mobile apps are being monetised by selling users' information and phishing for banking credentials," says Mr Kalember.

  "Many organisations have lost money via these phishing apps - which often pretend to be something else, such as a Flash player or even a Bible app - when they've allowed people in their finance departments to access corporate bank accounts via mobile devices."

  And Syncplicity's Mr Huberman points out that if a company doesn't know what apps their staff are using or what data is being shared, it poses a problem when those staff leave for other companies.

  "All that data goes with them," he says, "possibly to your competitors."

  And web-based email programs can be just as risky.

  Before doctors were given a secure environment in which to share confidential patient details with each other, many would use open email programs such as Gmail, in clear breach of data privacy regulations, says Mr Huberman.

  privacy

  n. 隐私,秘密; 隐居; 私事; 不受公众干扰的状态;

  例句:

  He saw the publication of this book as an embarrassing invasion of his privacy.

  他觉得这本书的出版侵犯了他的私生活,让他十分难堪。

  其他:

  复数:privacies

  "They realised this but their argument was that they needed to consult with colleagues to save lives. We were able to give them the right tools to share data securely on any device without violating any regulations."

  Plugging the leaks

  So what should businesses be doing about this issue?

  The advice from security experts is pretty consistent and can be boiled down to a few bullet points:

  Instigate a mobile device management program capable of identifying the apps installed on users' devices and what their security and privacy policies are like

  Make sure all corporate devices are encrypted

  Make clear to staff what corporate data can and cannot be shared with third-party apps

  Monitor what apps and data are being accessed on company networks

  Educate staff to identify risky behaviour and how to spot phishing emails

  Give staff the productivity tools they need so they don't feel tempted to download non-approved apps

  Of course, none of this is easy, and for many companies the horse has already bolted. But when you're in a tug of war and feel the rope slipping between your hands, you don't immediately let go, do you?




weixin

新东方厦门学校微信公众号:新东方厦门学校微服务 (微信号:XDFXMWFW

最新线上优惠咨询、最新功能咨询,请扫一扫二维码,关注我们的官方微信!

版权及免责声明

凡本网注明"稿件来源:新东方"的所有文字、图片和音视频稿件,版权均属新东方教育科技集团(含本网和新东方网) 所有,任何媒体、网站或个人未经本网协议授权不得转载、链接、转贴或以其他任何方式复制、发表。已经本网协议授权的媒体、网站,在下载使用时必须注明"稿件来源:新东方",违者本网将依法追究法律责任。

本网未注明"稿件来源:新东方"的文/图等稿件均为转载稿,本网转载仅基于传递更多信息之目的,并不意味着赞同转载稿的观点或证实其内容的真实性。如其他媒体、网站或个人从本网下载使用,必须保留本网注明的"稿件来源",并自负版权等法律责任。如擅自篡改为"稿件来源:新东方",本网将依法追究法律责任。

如本网转载稿涉及版权等问题,请作者见稿后在两周内速来电与新东方网联系,电话:010-60908555。