Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register


SITE SEARCH 


Search Products 
- or -
Browse for products

» Submit a product to InfoWorld to review



Search News 
- or -
» FIND BY DATE



Search Companies 
- or -
Browse for companies

» Submit a company to InfoWorld's directory



Find It

Enter a Find-It number from your InfoWorld magazine to go directly to the article you are looking for.





» Send a letter to the editor

BACK TO: TechIndex
INCIDENT RESPONSE 


ADVERTISEMENT





IT trainer offers master's degree for hackers
In an effort to produce the next generation of chief security officers and IT systems defense experts, an online training company is offering a new master's degree program in security science.

Security experts pitch 'culture of data'
The companies that are having the most success in advancing their data security efforts today are those that are finding a way to protect sensitive information without getting in the way of business users, industry experts maintain.
September 25, 2:53 p.m. PDT

Security outsourcing on the rise
As one of the world's largest outsourcing providers, Wipro Technologies is ramping up its security services business in a big way.
September 20, 2:30 p.m. PDT

Is the US at risk from cyberwarfare?
May was not a good month for geeks in Estonia. The tiny Baltic republic weathered a month-long cyberattack that shuttered Internet servers nationwide. At the height of the crisis, people who wanted to use payment cards to buy bread or gas had to wait, as the onslaught crippled Estonia's banks.
September 20, 8:54 a.m. PDT

AT&T: Network perimeter security should be virtual
Enterprise companies will soon begin offloading many of their network security responsibilities to telecommunications and Internet service providers and save vast amounts of time and money doing so, if AT&T has its way.
September 20, 4:05 a.m. PDT

Fear of insider threats hits home
The more money that companies spend on securing their IT operations from external attack, the more it seems they become aware that the potential threat posed by their own employees remains their most significant risk.
September 18, 10:42 a.m. PDT

Infrastructure threats: Botnets show DoS who's boss
Malware-infected botnet PCs have overtaken DoS attacks as the top security issue facing Internet service providers and other Web infrastructure hosting players, according to a new survey of the organizations.
September 18, 3:54 a.m. PDT

Expert do's and don'ts for dealing with data breaches
Organizations that experience data breaches must move quickly to assuage the fears of their constituents and go beyond expectations to address the situations effectively, according to those most familiar with the incidents.
September 11, 3:45 a.m. PDT

Cisco says acquisitions don't impede best-of-breed
Cisco executives speaking at the ongoing Security Standard Conference claim that the networking giant hasn't sapped innovation in the security companies it has acquired in its efforts to add to its own expanse of IT systems-defense products, while some customers clearly feel otherwise.
September 10, 4:38 p.m. PDT

Forrester security show stresses risk management
Enterprise security decision makers have long been more likely to be swayed by flashy new technologies than by the notion of comprehensive IT restructuring to protect data and other corporate assets, but the situation is evolving rapidly, according to experts participating in Forrester Research's ongoing Security Forum.
September 5, 11:33 a.m. PDT

FBI: Enterprises need counterintelligence
The Chinese government has denied involvement in a series of hacks carried out against IT systems at the Pentagon in June this week, but the threat of technology-driven espionage has forced the FBI to push businesses and academic institutions to better prepare for such attacks.
September 4, 3:45 p.m. PDT

Malicious Web: Not just porn sites
The New Zealand Honeynet Project, which produced Capture-HPC (mentioned here last week), also produced an excellent white paper about using Capture-HPC to identify malicious Web servers. On the group's Web site, you'll find that paper, the captured data, and the tools for anyone to inspect and replicate.
August 31, 3:00 a.m. PDT

Intel's vPro chips in more security for businesses
With the introduction of its latest vPro microprocessors on Monday, Intel contends it is injecting a heavy dose of new security capabilities for the benefit of business customers and third-party technology providers alike.
August 27, 8:00 a.m. PDT

Get paranoid: Information brokers are bungling your data
Anybody who requests a background or credit check on you -- or provides them to others -- has a ton of sensitive information about you that (a) may not be accurate and (b) is highly vulnerable to spills. That includes data brokers, credit bureaus, banks, insurance companies, cell carriers, and your employer.
August 27, 3:00 a.m. PDT

Get paranoid: The Feds are on your tail
If the National Security Agency is spying on you, you're probably connected in some way to a terrorist investigation -- even if it's just because you invited your neighbor Ahmed over for a barbecue.
August 27, 3:00 a.m. PDT

Mobile workers still struggling with security
A fair amount of business users remain oblivious or unconcerned about many of the security issues involved with mobile devices, according to a new study published by Cisco and the National Cyber Security Alliance.
August 21, 3:08 p.m. PDT

Sourcefire acquires ClamAV open-source anti-malware project
Network security specialist Sourcefire announced Friday that it has acquired ClamAV, an open-source gateway anti-malware project whose technologies are used in the products of a number of other vendors.
August 17, 8:58 a.m. PDT

Apps security to dominate Black Hat
Black Hat kicks off this week in Las Vegas with a big shift in focus from Internet viruses to application security.
July 31, 3:00 a.m. PDT

Take a byte out of ID crime
More than a year after President Bush commissioned a task force on the topic, the Department of Justice has finally drawn up legislation to combat identity theft. And if the DoJ's efforts remain consistent with the objectives stated in the task force's strategic plan (PDF), the new bill could in fact mark significant progress in protecting personal identity data.
July 27, 3:00 a.m. PDT

Identity theft? What identity theft?
Whew! We can relax.
July 20, 3:00 a.m. PDT

Microsoft.co.uk succumbs to SQL injection attack
A hacker successfully attacked a Web page within Microsoft's U.K. domain on Wednesday, resulting in the display of a photograph of a child waving the flag of Saudi Arabia.
June 29, 5:24 a.m. PDT

Cisco pushes IronPort smarts to firewalls
Cisco Systems will begin offering IronPort's security filtering tools to its firewall customers after the networking giant's acquisition of the company closes on June 25.
June 22, 10:05 a.m. PDT

Homeland Security to detail IT attacks
Officials from the U.S. Department of Homeland Security will hold a hearing on Capitol Hill on June 20 to discuss the findings of an investigation into the agency's own problems in battling electronic attacks and IT systems intrusions.
June 15, 11:26 a.m. PDT

Helping retailers wipe ID data issue
When data breach investigator Bryan Sartin gets a call to check into an incident involving customer records loss at a retailer, he knows that the situation most likely involves information that has been lifted from a company's point-of-sale systems.
June 13, 8:44 a.m. PDT

2007 InfoWorld CTO 25: Aristotle Balogh
Here in San Francisco, where the San Andreas fault shifts the ground beneath our feet, most of us try to ignore the fact that the Big One is coming. At VeriSign offices down the road in Mountain View, they worry about a different kind of Big One -- namely, a cataclysm that wipes out the Internet. Not only that, they pin all the responsibility for survival on a single guy: CTO Ari Balogh.
June 8, 3:00 a.m. PDT

2007 InfoWorld CTO 25: Chris Uriarte
When Chris Uriarte needs a forensics fix, he doesn't turn on "CSI." As CTO of Retail Decisions (ReD), he has a slew of online fraud and threat studies at his fingertips.
June 8, 3:00 a.m. PDT

App developers finally securing code
On Aug. 14, IT security training and research authority SANS Institute will convene its inaugural set of exams for software developers seeking to attain its new secure coding certifications. The rise of such initiatives -- and increasing adoption of source code vulnerability scanning tools among internal software development teams -- are finally making a difference in overall applications security, some end users and industry experts contend.
June 6, 4:14 a.m. PDT

Microsoft unveils integrated security
Microsoft shared details of its long-term security product strategy as part of its ongoing TechEd 2007 training conference on June 4, lifting the lid on plans to deliver an integrated suite of its software by mid-2009.
June 4, 7:24 a.m. PDT

Russian gov't not behind Estonia DDOS attacks
From alleged poisonings to organized crime, Russia has been getting a lot of bad press lately. But this time the country -- or at least, the government -- may be in the clear.
June 1, 7:05 a.m. PDT

Companies open wallets for secure data
An annual VanDyke Software-sponsored survey of IT network and systems administrators finds that businesses have increased their spending on secure data communications technologies and also have undertaken significant work to improve their internal processes to benefit security.
May 22, 11:42 a.m. PDT

IBM pitches risk management strategy
IBM unveiled a new IT governance and risk management strategy on May 15 that it will market to enterprise customers as a means to weave together security and compliance projects to ease planning and help drive down related expenses.
May 15, 12:42 p.m. PDT

Microsoft invites hackers back for Blue Hat
Microsoft is once again inviting members of the hacking community into its Redmond, Washington, campus to show the software giant where it's gone wrong.
May 10, 4:19 a.m. PDT

Infrastructure security powers up
He may not have known it at the time, but Lonnie Charles Denison helped prove the need for tighter security at many infrastructure businesses when he launched a multifaceted attack against California Independent System Operator, a quasi-governmental agency responsible for management of the state's power grid.
May 9, 4:17 a.m. PDT

Document shell code attacks loom large
Targeted attacks that utilize vulnerabilities in popular document file formats and execute via hard-to-find shell code are becoming an increasingly popular menace, according to researchers at IBM's Internet Security Systems division.
May 2, 12:37 p.m. PDT

Making sense of Websense's SurfControl buyout
Websense's $400 million buyout offer for rival network filtering specialist SurfControl should help position the two companies for short-term growth and possible acquisition in the future, according to market watchers.
May 1, 11:27 a.m. PDT

Rootkits: The next big enterprise threat?
Late at night, a system administrator performed a routine check of a crashed server, one of 48 systems comprising a major online infrastructure that generated about $4 million per month in revenue. He was a bit surprised that the system had gone down, as it had been humming for months without any indication of being prone to crashing. The check uncovered three encrypted files. The administrator called on MANDIANT to analyze them.
April 30, 3:00 a.m. PDT

Olympics to bring London IT security challenges
Britain's IT industry is likely to see business surge as London prepares to spend at least £1 billion ($2 billion) on security when it hosts the 2012 Olympics.
April 24, 9:58 a.m. PDT

Large enterprises still serving up spam
Well-known enterprise companies are still having their IT systems hijacked by spammers despite investing in many different types of technologies aimed at stopping the problem.
April 17, 3:04 p.m. PDT

Bottom line impact of data breaches unclear
Despite the fact that unwanted exposure of consumer data has become a hot-button issue in the media and among legislators nationwide, experts admit that it remains unclear just how much damage the events will cause to the finances and reputations of companies that experience major incidents.
April 13, 3:01 p.m. PDT

More security OEM deals to come
With enterprises demanding more tightly integrated security products than ever before and pressure increasing on vendors in the space to offer as many tools as possible to win deals, experts say that an increasing number of technology providers will turn to licensing agreements to help increase their marketability.
April 12, 3:57 p.m. PDT

McAfee: Cyber-crime will continue to pay
The latest research report from McAfee's Avert Labs paints a frightening picture for enterprise IT administrators and end-users, predicting continued maturation of cyber-crime and the technological means being used to carry out external attacks.
April 10, 9:00 p.m. PDT

TJX stolen data used in Florida crime spree
Law enforcement officials in Florida have arrested six individuals suspected of carrying out a fraud scheme built around the misuse of credit card data stolen from retailer TJX Companies.
March 21, 9:25 a.m. PST

Crisis management 101
I recently participated in some war-game-style what-if exercises with a small group of IT execs. The goal was to stimulate thinking about how corporations can best prepare for, and respond to, significant business disruptions, whether from terrorism, weather, biological threats, or other unexpected shocks.
March 8, 3:00 a.m. PST

Security crisis? Keep your cool, expert says
Security managers have to keep their cool and clearly communicate with chief information officers (CIOs) during a crisis affecting company networks, a top security official with Microsoft said Wednesday.
March 1, 5:06 a.m. PST

Lawmakers introduce breach notification bills
Members of the U.S. Congress introduced a flurry of new technology-related bills this week, including two bills that would require companies with data breaches to notify affected customers.
February 9, 9:56 a.m. PST

Watching out for our own security
Security pros know that there’s no perfect defense against a determined attacker. So when an identity thief strikes, it’s vital to detect the theft. But who’s going to be the detective?
September 20, 3:00 a.m. PDT

AT&T online store hacked, data compromised
AT&T confirmed Tuesday that its online store had been hacked and the credit card information and personal data of up to 19,000 customers possibly compromised.
August 30, 5:56 a.m. PDT

Proactive incident response: Do it by the book
I was an EMS paramedic in a prior career. At age 19, I was starting IVs, delivering babies, shocking cardiac arrest victims, and using the "jaws of life." I saw and learned a lot. Strangely, I find upgrading Microsoft Exchange on a huge network much more stressful.
August 18, 3:00 a.m. PDT

UBS employee stands trial for detonating 'computer bomb'
A former systems administrator for financial services firm UBS went on trial this week for allegedly infecting the company's network with malicious code that cost millions of dollars to recover from.
June 8, 8:34 a.m. PDT

Oracle mending fences with security researchers
Oracle Corp. once marketed its database as "unbreakable," but security researcher David Litchfield has a lesser opinion of the software.
May 26, 11:53 a.m. PDT

MIT simulation suggests avian flu outbreak can shred supply chain
At first, the reports from your supplier in China seem innocent enough: an assembly line worker has become very ill and is hospitalized with flu-like symptoms. Before you know it, workers are dying, the government has quarantined your factory and its contents, your supply chain is in ruins, and reporters are camped out at your company headquarters with a fleet of satellite news trucks.
April 14, 2:00 p.m. PDT

Collapse of Check Point/Sourcefire deal raises questions
Faced with resistance from the U.S. government’s Committee on Foreign Investment in the United States (CFIUS), Israeli software company Check Point Software Technologies put its $225 million offer to purchase IPS (intrusion prevention software) vendor Sourcefire on hold March 23, raising the specter of heightened government oversight of mergers and acquisitions.
April 3, 3:00 a.m. PDT

Cisco acquires surveillance company
Cisco Systems on Tuesday announced it will acquire SyPixx Networks  for $51 million in cash and options.
March 7, 4:20 a.m. PST

Plug-and-play appliances reshape IT landscape
Looking for a can’t-miss enterprise trend? I have just one word for you: appliances. During the past year, our Test Center has been inundated with the things. And not just the old standbys like firewalls, switches, and routers. I’m talking appliances that can handle virtually every IT operation: intrusion prevention, intrusion detection, CRM, anti-spam, e-mail security, Web services integration. We’ve even seen a smattering of appliances for Microsoft Exchange that come bundled with managed services (look for our Test Center review in April).
March 6, 3:00 a.m. PST

It takes an extraprise to secure your business
Back in May, I wrote a column about our country's lack of an overall plan to protect critical infrastructure in case of attack -- telecommunications and fiber in particular. Consider this Part 2.
February 21, 3:00 a.m. PST

RSA - FBI director: Cyber threats 'fluid and far-reaching'
Hacker hunters need to develop new techniques to take on the latest generation of sophisticated and better-organized cyber criminals. That's what U.S. Federal Bureau of Investigation Director Robert Mueller told attendees of the RSA Conference 2006 in San Jose, California, Wednesday.
February 15, 3:45 p.m. PST

RSA survey shows security confidence low, but people buy anyway
U.S. and Western European businesses are seeing their online sales grow, but many of them have questions about the security of their networks, according to a survey released Tuesday by RSA Security Inc.
February 14, 1:19 p.m. PST

U.S. DHS completes large-scale cyber exercise
The U.S. Department of Homeland Security (DHS) has completed the first full-scale government-led cyber attack simulation, and officials there called the exercise a "significant milestone."
February 10, 1:05 p.m. PST

Innovative IPSes resist our attacks
See correction at end of article
February 10, 3:00 a.m. PST

Honeywell blames ex-employee in data leak
Honeywell International Inc. says a former employee has disclosed sensitive information relating to 19,000 of the company's U.S. employees.
February 6, 4:22 p.m. PST

AOL patches serious Winamp bug
Users of America Online Inc.'s Winamp 5.12 media player are being told to upgrade their software following the release of malicious code that could be used to take over a Winamp user's system.
January 30, 3:07 p.m. PST

Startup Mu Security looks to lock down code
A Sunnyvale, California, startup backed by US$4 million in venture funding and a team of former Juniper Networks Inc. executives says that it has developed a way to make networking products and applications more secure. Mu Security Inc. says it will soon begin selling a new vulnerability assessment product that lets technology vendors and enterprise developers test their products with known hacker techniques, allowing them to fix bugs before products are put into use.
January 27, 11:03 a.m. PST

State CIOs need more IT security support from DHS
The U.S. Department of Homeland Security (DHS) must improve its support for U.S. state and local governments so they can better protect their IT infrastructures from attackers, two organizations of top IT officials said Wednesday.
January 25, 2:57 p.m. PST

Cisco patches a number of products
Cisco Systems Inc. has patched a number of security vulnerabilities affecting its routers and Call Manager software, some of which could be used to launch a DOS (denial of service) attack against the products.
January 19, 11:52 a.m. PST

Attacks mounting on 'Million Dollar Homepage'
The wildly successful pixel-powered Web page of a British university student is coming under increasingly intense DDOS (distributed denial of service) attacks trying to knock down the profitable brainstorm.
January 13, 9:28 a.m. PST

To Congress: Better Internet threat response needed now
Thanks to all the readers responding to last week’s column who submitted recommendations as to where I could send an early warning threat notification. Unfortunately, none of them would really meet more than 1 percent of the audience I was hoping to warn.
January 13, 3:00 a.m. PST

Bank tape lost with data on 90,000 customers
A computer tape from a Connecticut bank containing personal data on 90,000 customers was lost in transit recently, the bank reported Wednesday.
January 11, 4:17 p.m. PST

Two new WMF bugs found
Just days after Microsoft Corp. patched a critical vulnerability in the way the Windows operating system renders certain types of graphics files, a hacker has published details of two new flaws that affect the same part of the operating system.
January 9, 1:10 p.m. PST

WMF warnings: I wasn't crying wolf
By coincidence, I was checking my e-mail at the exact moment (7:31 p.m. EST, Dec. 27, 2005) when a new Microsoft Windows zero-day exploit (the WMF buffer overflow exploit) was announced in an anonymous e-mail to Bugtraq. Here’s the e-mail with the URL modified to prevent unknowledgeable readers from accidentally launching the malware:
January 6, 3:00 a.m. PST

Rethinking incident response
As businesses face increasing regulatory-compliance pressure from Sarbanes-Oxley, HIPAA, and Gramm-Leach-Bliley, many companies are finding themselves deploying intrusion detection systems, log analyzers, and other security tools to assist in finding when an incident has occurred. But when an alarm’s been triggered, every security analyst faces the problem of what to do next.
December 12, 3:00 a.m. PST

Controlling the uncontrollable user
A large percentage of computer security problems have origins in a common issue: end-users installing or running programs without administrative approval and control.
December 9, 3:00 a.m. PST

Data breach bills unlikely to pass before 2006
After a series of data breaches earlier this year, members of the U.S. Congress raged about the irresponsibility of breached companies and introduced a flurry of bills requiring companies to notify affected customers when data is lost.
November 11, 11:45 a.m. PST

Security company offers software insurance policy
Citadel Security Software has developed a novel way to assure customers that their products will perform as advertised. Backed by insurance giant American International Group, they are now offering customers a "software performance warranty," that will cover costs related to security breaches.
September 15, 5:24 a.m. PDT

German government launches national IT security plan
The German government aims to counter the alarming rise in computer viruses with a national IT security plan that includes the establishment of a computer emergency response center.
August 19, 4:32 a.m. PDT

Microsoft aims to host regular hacker meetings
Microsoft is working on plans to make a recent hacker meeting held on its Redmond, Washington, campus a twice-yearly event, according to a spokesman for the vendor's security group.
August 1, 4:56 p.m. PDT

Hacker Mitnick preaches social engineering awareness
SYDNEY -- Properly trained staff, not technology, is the best protection against social engineering attacks on sensitive information, according to security consultant and celebrity hacker Kevin Mitnick.
July 22, 5:13 a.m. PDT

Microsoft helps Japan's cybercops
TOKYO -- Microsoft is providing Japan's National Police Agency (NPA) with early warnings about security threats in order to help the agency battle online crime, Bill Gates, Microsoft's chairman and chief software architect, said at an Internet security conference in Tokyo Tuesday.
June 28, 5:25 a.m. PDT

AT&T plans CNN-syle security channel
Security experts at AT&T are about to take a page from CNN's playbook. Within the next year they will begin delivering a video streaming service that will carry Internet security news 24 hours a day, seven days a week, according to the executive in charge of AT&T Labs.
June 23, 4:49 a.m. PDT

Prying eyes
Google is a powerful search engine. You can find local restaurants, the flight patterns of rare birds, even look into your neighbor's bedroom. In the latest example of Google hacking, hackers have discovered a way to use Google to find Web interfaces for thousands of unprotected Web cameras.
May 17, 8:04 a.m. PDT

Security in the headlines
At a conference last year, I made a potentially disastrous mistake. I walked off with someone else’s laptop bag, leaving my own case -- a black, standard-issue, backpack-style bag -- propped against a chair leg. I noticed the substitution about five minutes later, and returned to the scene of the inadvertent crime on a dead run. (My laptop computer may not contain state secrets or customers’ Social Security numbers, but it holds plenty of confidential information, not to mention virtually everything I’m working on at any given time.)
May 16, 5:00 a.m. PDT

Investigators link Cisco hack to other activities
A theft of computer source code from Cisco Systems, reported a year ago, has led to a wide-ranging investigation of potential criminal activity involving multiple server break-ins in several countries, according to the U.S. Federal Bureau of Investigation (FBI).
May 10, 9:44 a.m. PDT

Business continuity in the face of terrorism
Before Richard Clarke published his book, Against All Enemies: Inside America’s War on Terror, and became associated with election year politics, he was a senior security advisor to the White House with expertise in counterterrorism and homeland security. Following Sept. 11, 2001, Clarke met twice with a CIO organization that called itself the Chicago Research Planning Group (CRPG) but has since renamed itself the Security Board.
May 10, 5:00 a.m. PDT

Microsoft discloses 5 critical security holes
Microsoft  on Tuesday released eight security bulletins on its products, including five concerning vulnerabilities rated "critical."
April 12, 1:40 p.m. PDT

Tufts warns 106,000 alums, donors of security breach
Alumni of Tufts University in Boston have been notified that personal information stored on a server used by the university for fund-raising could have been exposed to intruders.
April 12, 12:27 p.m. PDT

DNS warns of pharming attacks on .com domain
A new round of so-called "pharming" attacks is targeting the .com Internet domain, redirecting some Internet users who are looking for .com Web sites to Web pages controlled by the unknown attackers.
April 1, 9:21 a.m. PST

Safety in numbers
A basic tenet of computer security should be, "Be proactive." It's the computer equivalent of putting your wallet in a safe place before going out on the town.
April 1, 6:00 a.m. PST

ISPs join to 'fingerprint' Internet attacks
Leading global telecommunications companies, ISPs, and network operators will begin sharing information on Internet attacks as members of a new group called the "Fingerprint Sharing Alliance," according to a published statement from the new group.
March 28, 9:16 a.m. PST

The consultant's view
Steve Manzuik is an independent IT security consultant.
March 28, 6:00 a.m. PST

The CTO's perspective
Kevin Bernstein is CTO of platinum capital group.
March 28, 6:00 a.m. PST

Managing security in a compliance-crazy world
The laws seem to be shooting out of Congress like arrows aimed at the hearts and budgets of IT administrators across corporate America. Sarbanes-Oxley, HIPAA, Gramm-Leach-Bliley, Basel II, and a host of other regulations are pushing IT security management into extremely difficult and potentially expensive territory.
March 18, 3:00 p.m. PST

Secure architectures
Thanks to complex perimeters, sophisticated application-level threats, and regulations that hold CEOs and CIOs accountable for company data, security must now be regarded as more than a bunch of technologies tacked onto the network. “Companies are realizing they must approach security at the enterprise level,” says Rich Caralli, senior member of the technical staff at the CERT Coordination Center’s survivable enterprise management group. “Rather than chasing the latest threat, they’re working on identifying and securing directly the core business processes and information assets essential to the company mission.”
March 11, 3:00 p.m. PST

Secret Service cracks down on cybercrime
Last week, I spoke with Brian Nagel, assistant director of the Secret Service’s Office of Investigations. The Secret Service is famous as the agency that provides bodyguards to the president -- at one time Nagel served in the Presidential Protective Division -- but both he and the agency do far more than that nowadays.
March 4, 3:00 p.m. PST

Microsoft researchers target worms, buffer overruns
REDMOND, WASH. - Researchers at Microsoft showed off some forward-looking technologies on Wednesday, including new ways to protect systems against Internet worms, prevent hacker attacks and measure available bandwidth on home networks.
March 3, 4:50 p.m. PST

Security moving closer to OS, networks
Last week's RSA Conference 2005 demonstrated that security components are moving rapidly to the OS and the network as enterprises reinforce their IT systems against a growing security threat.
February 21, 6:00 a.m. PST

9-11 commissioner calls for end to ISACs
SAN FRANCISCO - The U.S. government’s policy of relying on voluntary, industry-led information sharing and analysis centers, or ISACs, is not working and should be discontinued or reformed, according to Jamie Gorelick, a member of the 9-11 Commission.
February 18, 4:11 p.m. PST

Gates promotes government cooperation with security focus
PRAGUE -- Under a new, no-fee cooperation program, Microsoft is offering to work more closely with governments to help them detect and mitigate IT security threats, company Chairman Bill Gates announced Wednesday.
February 2, 7:03 a.m. PST

Reeling in the phishers
Phishers beware. IT is watching you watching them. The FBI is out to get you jailed, too.
January 21, 3:00 p.m. PST

Phishing ploys reflect savvy technical skills
This article has been modified from its original version. Certain quoted material has been removed because its veracity could not be confirmed.
January 21, 3:00 p.m. PST

Australian company takes blame for Panix domain hijack
An Australian company that manages Internet domain name registrations acknowledged that it was partially responsible for a Web domain hijacking that left Public Access Networks (Panix), a New York Internet hosting company, without an Internet address over the weekend.
January 18, 1:15 p.m. PST

DOD cyber sleuths swap secrets in Florida
The U.S. Department of Defense (DOD) is making changes to streamline its response to online threats across the various branches of the military, and deal with a steady stream of new online woes, from hacking attempts to child pornography and threats posed by powerful portable storage devices such as iPods, according to senior DOD officials.
January 12, 2:10 p.m. PST


 > Security

INFOWORLD DAILY 


Tom Sullivan's InfoWorld Daily The dirty little storage secret
Storage: Storage requirements, more often than not, are grossly overestimated. There you have ...

INFOWORLD DAILY PODCASTS  

InfoWorld Daily | Tom Sullivan

Microsoft will release four security patches next week, Japan may add a copyright fee to the iPod, Microsoft to increase its focus on mobile phones, MySpace launches a data portability initiative, and more listen 
LISTEN!

MORE INFOWORLD BLOGS


Open Sources 
Product Management
When I joined MySQL four years ago, there was quite a lot of debate about product management. We didn't actually have ...

Zero Day 
Botnet herders tending smaller flocks
New research backs up the theory that botnet operators are keeping their networks smaller in a continued effort to keep ...



• Advice Line
• Database Underground
• The Deep End
• Enterprise Mac
• Geeks in Paradise
• Grid Meter
• The Gripe Line
• InfoWorld Daily
• Inside IT
• IT Troubleshooter
• ITXtreme
• Open Sources
• ProdBlog
• Real World SOA
• Reality Check
• Security Adviser
• SMB IT
• The Storage Network
• Tech Watch
• Virtualization Report
• Zero Day

COLUMNISTS

Unified under law
Ephraim Schwartz's Column and Blog (InfoWorld) - In the litigious world we live in, deploying a unified communications platform in your enterprise could...
Oracle's SAP attack, old media fights back
Robert X. Cringely's Column and Blog (InfoWorld) - As you surely have surmised by now, this is the last Notes From the Field that...
» MORE COLUMNISTS



SPONSORED RESOURCES  » Click here to view more sponsored resources


BRINGING PERFORMANCE VALIDATION "INTO THE LIFECYCLE"
Today's enterprise apps are complex and ever-changing, which makes delivering high performance difficult. By virtualizing the behavior of application services and data in a VSE, teams can answer this challenge with validation best practices and test tools to ensure solid performance throughout the lifecycle. Register now to attend this webcast! Sponsor: ITKO

»  Click here to view this Webcast
The Data Protection You've Been Looking For
Enterprise data is of supreme importance. If you can't find it quickly, it's worthless. If you lose it, it's a crisis. This IT Strategy Guide explores how to keep your data safe.

» Click here to download now


The Power of Two with SOA and BPM
Agility. Efficiency. Faster time to market. These are business requirements that spell the difference between winning and losing. See the combination of SOA working in close concert with business process management (BPM) to make these words a reality. Sponsored by Oracle

»  Click here to visit this microsite



Technology White Papers

 

Sponsored Technology Links

  • Mitigating Rock Phish Attacks - Read this white paper to understand why standard anti-phishing techniques will not defeat a complex attack- and what you can do to prevent and defeat these attacks. Sponsored by MarkMonitor
  • Riverbed RiOS 4.0: Raising the Bar in Wide-Area Data Services - Wide-area data services (WDS) is an essential, cost effective technology for optimizing WAN. In Taneja Group paper, learn how Riverbed's Steelhead appliances with the RiOS 4.0 operating system can ...
  • JavaScript Hijacking - Fortify Software's Security Research Group has announced a new class of vulnerability: JavaScript Hijacking. This report details the risk and how developers can make their code secure. Sponsored by ...

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert



Find out when the latest white paper is available:
 
 
  • EMC - Learn about the energy efficiency in EMC's Pund-IT report on power conservation.
  • AMD - 1-2-3-4 AMD leads the industry with native quad-core. Learn more
  • EMC - Manage information and lower TCO with new EMC consolidation choices.
  • Microsoft - Download the Windows Server(R) 2008 Beta: Join the global community.
  • EMC Software - Streamline your workflow with the EMC's BPM Resource Kit.
  • AT&T - For the Health-Care Industry, a Transition to Digital (Finally)
  • Nortel - Attend Nortel's Unified Communications Webinar Series
  • Microsoft - State of Illinois votes for Windows Server over Linux
  • EMC - Boost productivity and savings with EMC e-mail archiving.
  • AT&T - A Patient Data Network for the Future
  • Good Technology - How strong is your company's mobile messaging? Find out now.
  • Matrox - Experience productivity increases of 20-50% with DualHead2Go
  • InfoWorld Technology Marketplace

    » BUY A LINK NOW

    Sponsored Technology Links

     
     
     HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS  IT EXEC-CONNECT   About | Advertise | Awards | RSS | Contact Us 

    Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
    All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
    phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

    CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
    Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist