Cybersecurity and International Travel

Introduction

While I was checking out train routes from London to Hong Kong/Shanghai and Japan the topic of cybersecurity measures I would or might need also crossed my mind. When thinking it over and looking up advice there are few key things that a traveller should keep in mind when it comes to their own cybersecurity when travelling abroad. When large when travelling through areas in the EU the level of risk is low while to travel outside the EU depending whether they are friendly or non-friendly countries the risk can be much higher. Higher risk countries include obvious ones like Russia and China but also depending on your profession can possibly now include the USA. (Journalists being harassed at US airport as they go through customs and passport control seems to be becoming more common) If you already follow cybersecurity best practises the vast majority of the time you don't need to do much else and further measures you might take will depend on where your travelling to and what the purpose of your trip is.

Risk

The level and type of risk will vary depending on why you are travelling. For example, travelling while on holiday a person as long they are not workaholics will not be carrying sensitive data related to their work but their personal security such as protecting themselves from credit/debit fraud is going of greater importance. While someone travelling for work/business meetings/conference will most likely be carrying sensitive and/or important data which should be protected and kept secure at all times.

Some Steps that Be can Taken



    • Strictly limit the data you store and take with you while traveling. If you won’t need it for the trip, don’t take it. Also, applies to devices as well.
    • Never leave devices or sensitive materials unattended or unsecured in your hotel room. It's always best to keep these items with you; even in-room safes have known security flaws.
    • In some countries, hotel business centres and phone networks are monitored and in some locations, rooms may even be searched. As a general guideline, assume that there is no expectation of privacy in offices, hotels, Internet cafes, or other public areas.
    • It may be worth using a cheap burner laptop and/or phone when travelling to certain countries and only have the bare minimal amount of information you need to carry out work or keep in touch friends and family back home. 
    • Make use of a VPN since Many free WiFi networks are unsecured, so anyone who connects to the same network can intercept the data being sent between your smartphone, tablet or laptop and the internet.  If you use a VPN, it's encrypted on your device and they can't.  Even using 'secure' hotel WiFi, you're never quite sure who has access to that network. Also, countries such as China block Twitter, Facebook, Google and other sites you might want to use so using a  VPN, select VPN servers in your home country.  Note that using mobile data through a SIM card also gets around these restrictions, but mobile data costs money so it's cheaper to use WiFi when available, which means you'll need a VPN.  
    • If you have contactless debit/credit cards it is worthwhile investing in RFID blocker to give peace of mind and to prevent yourself becoming a victim of fraud and/or identity theft. Also, useful for everyday use as well not just when travelling. 

    Conclusion

    By and large, when travelling abroad if you already follow cybersecurity best practises you're going to be fine. Though if, travelling on business certain countries will require additional measures. In the end it is about what type of behaviour you are prepared to follow to remain secure and the level of risk you are prepared to accept before you begin taking measures to stay safe and secure. 


    Comments

    Post a Comment

    Popular posts

    Balancing functionality, usability and security in design

    Image
    Introduction When designing new devices or applications there is a requirement nowadays to consider there functionality, usability and security. While there has been a push through secure-by-design guidelines for security to be built-in from the beginning there are still gaps in implementation and part of these gaps are design considerations of functionality and usability. Part of this that doing security well is hard work, but it should never block useful functionality for the user. Ideally, when security interferes with key software capabilities, the security must be tweaked. The answer should never be to abandon the functionality and certainly not to abandon the security. Though achieving this balance is admittedly not straightforward. This blog post will aim to look at this triad and how they can be balanced and not compromise each other. Defining the Triad in design A triangle can be used to help explain the relationship between the concepts of security, functionality and ea...
    Read more

    Personal Interest - Unbuilt fleets of the Royal Navy

    Image
    Introduction Throughout the 20th Century the Royal Navy designed and examined different types of fleets that were never realised either due to budget constraints, arms treaties or the changing nature of war. These are only a few examples of the different types of unbuilt fleets. Some of these had prototypes built and tasted for the Royal Navy which would serve as technological testbeds. Images and info from secret projects forum, shipbucket, popular mechanics/science and naval-matters. Washington Naval Treaty (WNT) The  Washington Naval Treaty  was a treaty signed during 1922 among the major nations that had won  World War I , which agreed to prevent an  arms race  by limiting naval construction. It was negotiated at the  Washington Naval Conference , held in  Washington, D.C. , from November 1921 to February 1922, and it was signed by the governments of the United Kingdom, the United States, France, Italy, and Japan. It limited the construction ...
    Read more

    Personal Interest - RAF Unbuilt Projects

    Image
      Introduction This blog post looks at the different groups of cancelled RAF projects. It will focus on the 50s, 60s, 90s/00s and a brief look at hypersonic research projects. While these projects were often cut or cancelled for budget or austerity reasons, they were also pushed by the changing nature of warfare firstly from conventional style WW2 warfare to the predicated quick, short scale nuclear war which was expected from 1947 to 1989. Later from the 90s and into the 21st Century a change from state on state conflict to facing insurgencies, counter-terrorism and peacekeeping missions again led to a change in how wars are fought. Though the work and research done on these projects would rarely go to waste with it being used and applied in other projects and works even if sometimes it could take another ten or twenty years before anything operational came of that work. There won't be large amounts of text explaining or exploring the designs there are far better sources f...
    Read more