Is Remote Access Over the Internet Safe?
If you telework, telecommute, or just travel a lot as part of your job, you may wish that you could access the files on your office or work computer remotely. But is it safe?
The safety of your remote access connection depends on many connected attributes. If done well, it can be perfectly safe, and tremendously helpful. If implemented poorly, your remote access systems can be a huge security hole. The two critical areas to manage to ensure secure remote access are authentication and encryption.
Authentication is key because it allows the software system to validate your identity. If another person can convince those systems that they are, in fact, you, then all other security elements are defeated because they will simply grant the imposter the same privileges the "real" you would have. Passwords alone are generally considered too weak for this purpose, particularly if you handle any sort of sensitive data - financial records, HR information, medical records, product information, etc. A "multifactor" authentication system (one where a password is combined with something you have, like a physical USB key, or something you are, like a fingerprint or retina scan) is necessary to truly protect your identity.
Assuming your authentication is strong, encryption is used to protect your data as it traverses the Internet between your remote device and your office PCs and networks. If the data isn't encrypted, anyone can intercept and read the information. With encryption, even if an attacker intercepts the data stream, they won't be able to read the information because it's scrambled. 256-bit AES encryption is the gold standard at the moment, because it requires an absurdly high amount of computing power and time to crack (by some estimates, 149 trillion years), and therefore protects your information against malicious use.
So, when the technology is implemented properly, you can indeed work from home safely.
Labels: safe remote access, safetelework, telecommute, telework
