To print: Click here or Select File and then Print from your browser's menu

This story was printed from silicon.com, located at http://www.silicon.com/

Story URL: http://software.silicon.com/security/0,39024655,39156608,00.htm

BP takes 18,000 laptops off LAN
And plugs them securely into the net...

By Graeme Wearden

Published: Tuesday 21 February 2006

Energy group BP has shifted thousands of its employees off its LAN in an attempt to repel organised cyber criminals.

Rather than rely on a strong network perimeter to secure its systems, BP has decided that these laptops have to be capable of coping with the worst that malicious hackers can throw at it, without relying on a network firewall.

Ken Douglas, technology director of BP, told the UK Technology Innovation & Growth Forum in London on Monday that 18,000 of BP's 85,000 laptops now connect straight to the internet even when they're in the office.

Douglas said: "Hackers and virus writers have been a problem for years. But today there are very well-organised gangs in Russia, China and Brazil, with large teams and large server-farms, that are determined to get their hands on our internal data and our users' identities.

"Typically, companies use a firewall and assume that the local area network is secure. But we've come to the conclusion that the LAN has to go."

In the case of a laptop, it could be protected by a top-of-the-range firewall when plugged into the office network. But this is of no use if an employee connects at an unsecured wi-fi hot spot.

BP is a founder member of The Jericho Forum, which is pushing for the 'de-perimeterisation' of security. This means encouraging the security industry to help companies secure every part of their networks rather than just the points where they face the outside world.

Douglas explained that BP is putting this approach into action. "We've moved 18,000 of our 85,000 laptops to an environment where they link to the internet by default," he said, adding that BP believes it can "harden them" to the dangers of the web.

Graeme Wearden writes for ZDNet UK