|
Free Newsletters
|
|
|
IT trainer offers master's degree for hackers In an effort to produce the next generation of chief security officers and IT systems defense experts, an online training company is offering a new master's degree program in security science. Security vendors bring zombie fighters to life Data leakage prevention might currently be the hottest IT security submarket, but vendors are also tuning up their product offerings to help customers ward off the presence of botnet-infected zombie computers. ![]() October 4, 3:41 p.m. PDT Cool tools for hacker trackers If you want to keep up with the latest criminal exploits without having to collect malware yourself, take a look at SRI International's Cyber-Threat Analytics BotHunter Malware Analysis Web page. Reporting on information and statistics collected from a research honeynet, the BotHunter Malware Analysis page makes daily infection logs from high-interaction honeypots available for anyone to view. Although the scale of the project and information collected is fairly small, this is a useful site for gaining more insight into crimeware and the world of bots. ![]() September 28, 3:00 a.m. PDT Cisco to roll out branch office networking gear Enterprise branch offices increasingly need the same IT tools that the head office has, and Cisco Systems is set to unveil branch networking gear Wednesday to help fill that need. September 26, 5:47 a.m. PDT Security experts pitch 'culture of data' The companies that are having the most success in advancing their data security efforts today are those that are finding a way to protect sensitive information without getting in the way of business users, industry experts maintain. ![]() September 25, 2:53 p.m. PDT Security outsourcing on the rise As one of the world's largest outsourcing providers, Wipro Technologies is ramping up its security services business in a big way. ![]() September 20, 2:30 p.m. PDT PayPal claims gains against phishers PayPal security chief Michael Barrett isn't ready to claim a victory in the fight against phishing schemes, but he said that his company is slowly turning the tide using a set of new partnerships and technological means. ![]() September 20, 4:23 a.m. PDT AT&T: Network perimeter security should be virtual Enterprise companies will soon begin offloading many of their network security responsibilities to telecommunications and Internet service providers and save vast amounts of time and money doing so, if AT&T has its way. ![]() September 20, 4:05 a.m. PDT Fear of insider threats hits home The more money that companies spend on securing their IT operations from external attack, the more it seems they become aware that the potential threat posed by their own employees remains their most significant risk. ![]() September 18, 10:42 a.m. PDT Infrastructure threats: Botnets show DoS who's boss Malware-infected botnet PCs have overtaken DoS attacks as the top security issue facing Internet service providers and other Web infrastructure hosting players, according to a new survey of the organizations. ![]() September 18, 3:54 a.m. PDT FaceTime to launch unified communications appliance FaceTime Communications, a maker of network security appliances, announced the USG (Unified Security Gateway), one of the first devices directed at the full gamut of UC (unified communications) services, this week. ![]() September 12, 12:00 p.m. PDT Verizon taps FBI criminal division chief as CSO The executive in charge of the U.S. Federal Bureau of Investigation's criminal investigations division will take over as chief security officer (CSO) of Verizon Communications early next year. September 12, 5:52 a.m. PDT Cisco says acquisitions don't impede best-of-breed Cisco executives speaking at the ongoing Security Standard Conference claim that the networking giant hasn't sapped innovation in the security companies it has acquired in its efforts to add to its own expanse of IT systems-defense products, while some customers clearly feel otherwise. ![]() September 10, 4:38 p.m. PDT Cisco extends NAC product lineup Cisco announced a pair of additions to its Network Admission Control (NAC) product line on Monday, launching new tools that promise to extend the authentication system to a greater variety of devices and office environments. ![]() September 10, 5:00 a.m. PDT Best of open source in networking If we had to pick the most significant trend in networking today, the VoIP phenomenon might well top the list. And open source is playing no small part. While enterprises remain reluctant to rip out their tried-and-true PBXes, open source VoIP -- usually in the form of Asterisk -- is capturing business communications one small business or branch office at a time. Sooner or later, enterprises too will catch the open source VoIP bug. The cost savings and flexibility are too compelling to resist. ![]() September 10, 3:00 a.m. PDT Best of open source in security In areas such as CRM software and portals, open source gained a foothold because users were willing to compromise -- less could be more, because the price was right. In security, open source rushed in because commercial vendors fell down on the job. As security problems in the enterprise outstripped the capabilities of commercial solutions, a number of talented security researchers stepped into the breach via the open source model. ![]() September 10, 3:00 a.m. PDT Nokia, Intel beef up new network security appliance Nokia added a new appliance to its network security range that has more processing muscle -- the first product to come out of its collaboration with Intel. September 6, 4:43 a.m. PDT Forrester security show stresses risk management Enterprise security decision makers have long been more likely to be swayed by flashy new technologies than by the notion of comprehensive IT restructuring to protect data and other corporate assets, but the situation is evolving rapidly, according to experts participating in Forrester Research's ongoing Security Forum. ![]() September 5, 11:33 a.m. PDT China denies its military hacked Pentagon network China Tuesday denied allegations that its military hacked a Pentagon network in June -- the second time in as many weeks that the country has responded to charges of sponsoring computer attacks. September 5, 5:54 a.m. PDT FBI: Enterprises need counterintelligence The Chinese government has denied involvement in a series of hacks carried out against IT systems at the Pentagon in June this week, but the threat of technology-driven espionage has forced the FBI to push businesses and academic institutions to better prepare for such attacks. ![]() September 4, 3:45 p.m. PDT Malicious Web: Not just porn sites The New Zealand Honeynet Project, which produced Capture-HPC (mentioned here last week), also produced an excellent white paper about using Capture-HPC to identify malicious Web servers. On the group's Web site, you'll find that paper, the captured data, and the tools for anyone to inspect and replicate. ![]() August 31, 3:00 a.m. PDT Intel's vPro chips in more security for businesses With the introduction of its latest vPro microprocessors on Monday, Intel contends it is injecting a heavy dose of new security capabilities for the benefit of business customers and third-party technology providers alike. ![]() August 27, 8:00 a.m. PDT Intel adds desktop NAC to latest chips Intel's move to provide new integration with NAC (network access control) tools in its latest vPro desktop processors could provide interesting opportunities for use with the device authentication systems while further strengthening the technology standards it supports, according to industry watchers. ![]() August 27, 8:00 a.m. PDT Security SaaS maturing fast Security technologies delivered via the SaaS (software-as-a-service) business model may still be in their nascent stage, but some early adopters are already piecing together multiple offerings to outsource a significant portion of their IT systems defense infrastructure. ![]() August 22, 11:06 a.m. PDT Mobile workers still struggling with security A fair amount of business users remain oblivious or unconcerned about many of the security issues involved with mobile devices, according to a new study published by Cisco and the National Cyber Security Alliance. ![]() August 21, 3:08 p.m. PDT IT at Beijing Olympic Games to cost $400 million The price tag for IT and communications at the world's biggest sporting event will run to around $400 million and use the expertise of thousands of IT managers and engineers. August 15, 4:22 a.m. PDT Novell buys endpoint security firm Senforce Novell announced on Monday that it has acquired Senforce Technologies, a provider of endpoint and network security tools, for an undisclosed sum. ![]() August 13, 9:40 a.m. PDT Thoughts from Black Hat Talk to anyone who attends Black Hat USA conferences and you'll hear about how boring the talks are, how nobody learned anything new, how the hacks were known last year — not to mention the ridiculous posers. Ask those same attendees if they plan to attend next year, and they say "yeah" as fast as a poker player pushing all in with pocket aces. ![]() August 10, 3:00 a.m. PDT Web browser attack skirts corporate firewall A 10-year-old security problem has come back to haunt corporate IT, a security researcher told an audience at the Black Hat conference in Las Vegas Wednesday. August 2, 4:17 a.m. PDT Taunting the CIO The Wall Street Journal on Monday ran a special section whose lead article was headlined "Ten Things Your IT Department Won't Tell You." The image on the section cover showed a white-shirted IT guy clutching a keyboard and a tangle of Ethernet cables, looking straight at the reader, with duct tape over his mouth. ![]() August 2, 3:00 a.m. PDT Microsoft System Center can ease network security fright The night is so dark, it sticks to your skin. The young geek wanders lost through thick foliage, branches grabbing his sleeves, the glow from his pitiful penlight only serving to accentuate the crushing blackness all around. Suddenly branches snap under mysterious feet somewhere ahead, his heart base jumps into his mouth, and he nearly swallows his penlight in a vain attempt to stay hidden. ![]() August 1, 3:00 a.m. PDT Apps security to dominate Black Hat Black Hat kicks off this week in Las Vegas with a big shift in focus from Internet viruses to application security. ![]() July 31, 3:00 a.m. PDT P-to-P users expose U.S. government secrets Contractors and U.S. government employees are sharing hundreds of secret documents on peer-to-peer networks, in many cases overriding the default security settings on their P-to-P software to do so, according to a company that monitors the networks. July 27, 8:31 a.m. PDT Take a byte out of ID crime More than a year after President Bush commissioned a task force on the topic, the Department of Justice has finally drawn up legislation to combat identity theft. And if the DoJ's efforts remain consistent with the objectives stated in the task force's strategic plan (PDF), the new bill could in fact mark significant progress in protecting personal identity data. ![]() July 27, 3:00 a.m. PDT Aruba, Alcatel-Lucent deepen mobility partnership Alcatel-Lucent plans to extend enterprise security into cellular networks through its own fixed-mobile convergence systems and Aruba Networks' "follow-me" security technology as part of a planned joint venture. July 26, 12:30 p.m. PDT Organized crime infiltrates financial IT In Martin Scorsese's hit movie "The Departed," actor Matt Damon plays the part of a mole -- someone who helps his connected mob friends stay a step ahead of the cops by becoming one of the very law enforcement officials assigned to stop them. ![]() July 23, 11:14 a.m. PDT Piecing together IBM's security puzzle IBM owns some of the world's leading IT security talent, products, and services, but executives with the massive company say it will likely never aim to become what people might label as a true "security vendor." ![]() July 23, 3:00 a.m. PDT Anti-phishing techniques for the real world I need to expand my idea of a secure computing ecosystem into the real world. Let me explain. ![]() July 13, 3:00 a.m. PDT Printers get smarter but less secure If you've seen my column photo, you know I like the occasional spoon of sugar in my coffee. (OK, four spoons, so bite me.) Point is, since Brian Chee keeps me well stocked in Hawaiian Kona coffee, I make sure to keep a box of Domino instant-dissolve sugar in the kitchen. Tear off plastic, open little metal spout on side of box, pour sugar, reactivate synaptic functionality — simple. Then some product marketing management wizard apparently decided to fix it. Now the spout is cardboard, no longer firmly attached to the box, and inexplicably blocked by another slab of cardboard that serves no discernable purpose, yet must somehow be removed without dislodging the spout. ![]() July 3, 5:50 p.m. PDT Cisco pushes IronPort smarts to firewalls Cisco Systems will begin offering IronPort's security filtering tools to its firewall customers after the networking giant's acquisition of the company closes on June 25. ![]() June 22, 10:05 a.m. PDT A secure Internet requires a secure network protocol This is my third column on creating a more secure computing ecosystem. My first two columns summarized the larger ideas behind this project: It begins with secure hardware and moves on to secure booting, a secure OS, secure applications, and authenticated users, as well as the ability to track network packets from start to end. ![]() June 22, 3:00 a.m. PDT Pentagon shuts down systems after cyberattack The U.S. Department of Defense took an estimated 1,500 computers offline Wednesday after a security breach within the Office of the Secretary of Defense (OSD). June 21, 3:04 p.m. PDT Lawmakers: Can DHS protect its networks? The U.S. Department of Homeland Security's (DHS) CIO was on the hot seat Wednesday on Capitol Hill after an independent audit found that a database that screens U.S. visitors lacked security controls. June 20, 2:38 p.m. PDT Homeland Security to detail IT attacks Officials from the U.S. Department of Homeland Security will hold a hearing on Capitol Hill on June 20 to discuss the findings of an investigation into the agency's own problems in battling electronic attacks and IT systems intrusions. ![]() June 15, 11:26 a.m. PDT The security solution revolution, continued I've just figured out that I'm a guy who needs two or three columns to communicate my big ideas, or at least argue them out. ![]() June 15, 3:00 a.m. PDT Global co-op feeds FBI's botnet fight Officials with the FBI claim that global law enforcement partnerships are playing a significant role in its ongoing efforts to stomp out botnets and other computer-borne crimes. ![]() June 14, 3:09 p.m. PDT Helping retailers wipe ID data issue When data breach investigator Bryan Sartin gets a call to check into an incident involving customer records loss at a retailer, he knows that the situation most likely involves information that has been lifted from a company's point-of-sale systems. ![]() June 13, 8:44 a.m. PDT The security solution revolution “Every generation needs a new revolution.” — Thomas Jefferson ![]() June 8, 3:00 a.m. PDT 2007 InfoWorld CTO 25: Aristotle Balogh Here in San Francisco, where the San Andreas fault shifts the ground beneath our feet, most of us try to ignore the fact that the Big One is coming. At VeriSign offices down the road in Mountain View, they worry about a different kind of Big One -- namely, a cataclysm that wipes out the Internet. Not only that, they pin all the responsibility for survival on a single guy: CTO Ari Balogh. ![]() June 8, 3:00 a.m. PDT Experts: Botnets add fault tolerance Security experts contend that a growing number of operators of compromised computer networks (or "botnets") are finding new ways to grow their networks and make them immune to potential shutdowns, including sophisticated fault-tolerance planning to help ensure that their networks can't be easily wiped out. ![]() June 7, 12:00 a.m. PDT Microsoft unveils integrated security Microsoft shared details of its long-term security product strategy as part of its ongoing TechEd 2007 training conference on June 4, lifting the lid on plans to deliver an integrated suite of its software by mid-2009. ![]() June 4, 7:24 a.m. PDT 2007 InfoWorld CTO 25: Antonio Nucci Comparing Narus' Dr. Antonio Nucci to your average CTO is like comparing Tiger Woods to your average duffer. ![]() June 4, 3:00 a.m. PDT Spammers' use of AI only just begun Though security industry experts were openly referring to the death of spam several years ago, the arrival of image-based attacks has resulted in a stunning renaissance in the volumes of unwanted e-mail reaching end-users' inboxes. ![]() May 31, 5:03 p.m. PDT Attackers get chatty on VoIP The recent spate of malware attacks propagating throughout the user base of the Skype Internet calling system illustrates a broader trend toward cyber-criminals moving to take advantage of VoIP platforms as they become increasingly popular. ![]() May 30, 12:18 p.m. PDT Google buys into security, acquires GreenBorder Google has jumped into the anti-malware market, snatching up browser-based security software maker GreenBorder Technologies for an undisclosed amount of money. ![]() May 29, 9:32 a.m. PDT 3Com offers cheap IPS gateways 3Com is jumping into the unified security business, with branch office and SMB gateways that include enterprise-grade security technology from its TippingPoint subsidiary. May 23, 8:31 a.m. PDT Microsoft could fulfill security dreams with NAP Spring Interop in Vegas. Temperatures in triple-digit positives, air conditioning in double-digit negatives, pneumonia just over the horizon, and loads and loads of NOC geeks playing with the latest tech toys, oblivious to the debauched temptations around them. ![]() May 23, 3:00 a.m. PDT Companies open wallets for secure data An annual VanDyke Software-sponsored survey of IT network and systems administrators finds that businesses have increased their spending on secure data communications technologies and also have undertaken significant work to improve their internal processes to benefit security. ![]() May 22, 11:42 a.m. PDT Networking trouble caused nuke plant to shut down Water pumps need firewalls too. That's what operators of the Tennessee Valley Authority's (TVA's) Browns Ferry Nuclear Plant discovered last August when they were forced to manually shut down one of their plant's two reactors after networking problems caused two water pumps to fail and threatened the stability of the plant itself. May 22, 5:37 a.m. PDT Microsoft, TCG get closer on NAC The Trusted Computing Group (TCG) is tying its authentication software standard to Microsoft's proprietary network access protection platform -- a move that leaders in the network access control (NAC) segment tout as a major step toward getting products made by different vendors to work together. ![]() May 21, 8:20 a.m. PDT Deepwater churns around unencrypted data The most sensitive and highly classified data communicated over the nation's internal computer networks remains at risk for exposure, according to key witnesses in the government's investigation into the United States Coast Guard's Deepwater procurement program. ![]() May 17, 11:33 a.m. PDT IBM pitches risk management strategy IBM unveiled a new IT governance and risk management strategy on May 15 that it will market to enterprise customers as a means to weave together security and compliance projects to ease planning and help drive down related expenses. ![]() May 15, 12:42 p.m. PDT Symantec pitches rootkit tech as Veritas validation Some industry watchers may still question why Symantec moved to acquire storage software maker Veritas for $10.2 billion in 2004, but the fruits of the companies' combined labors are already proving the deal as a winner, according to executives with the massive security firm. ![]() May 9, 4:26 p.m. PDT Infrastructure security powers up He may not have known it at the time, but Lonnie Charles Denison helped prove the need for tighter security at many infrastructure businesses when he launched a multifaceted attack against California Independent System Operator, a quasi-governmental agency responsible for management of the state's power grid. ![]() May 9, 4:17 a.m. PDT Cryptome afloat despite Deepwater's ripple The Deepwater defense contractor scandal has echoed from the halls of Congress across the World Wide Web, and despite being shut down by its ISP after posting documents considered central to the controversy, online resource Cryptome.org remains alive. ![]() May 8, 4:46 a.m. PDT Cruel and unusual Incident: I still have trouble believing that this happened only last year. Our consulting guys got called in to rebuild a server farm “from scratch,” as the caller put it. That surprised us because we’d done some business with this client before and the client’s on-site guy was decent. Calls to him for an explanation, however, went unanswered. So we show up on-site and find out why: They’d fired him. This didn’t come as a complete surprise, as he did have some personality issues that might have made him unpopular. But as it turns out, according to office gossip, they didn’t just fire him. The CEO -- whom we didn’t like either -- actually did an Ari Gold number on him. Fired him during a staff meeting, embarrassed him in front of everyone, screamed at him, told him he wasn’t getting his agreed-on severance for cause. I can’t get into specifics, but let’s say that the gossip showed that “cause” was highly arguable. Looked to us like he was getting blamed for a sales engineer screwing up at a client site. ![]() May 7, 3:00 a.m. PDT Document shell code attacks loom large Targeted attacks that utilize vulnerabilities in popular document file formats and execute via hard-to-find shell code are becoming an increasingly popular menace, according to researchers at IBM's Internet Security Systems division. ![]() May 2, 12:37 p.m. PDT Making sense of Websense's SurfControl buyout Websense's $400 million buyout offer for rival network filtering specialist SurfControl should help position the two companies for short-term growth and possible acquisition in the future, according to market watchers. ![]() May 1, 11:27 a.m. PDT Nokia expands security appliance line Nokia introduced two new network security appliances on April 30, adding high- and low-end models that aim to help companies filter out malware traffic before it penetrates their IT systems. ![]() April 30, 2:17 p.m. PDT Rootkits: The next big enterprise threat? Late at night, a system administrator performed a routine check of a crashed server, one of 48 systems comprising a major online infrastructure that generated about $4 million per month in revenue. He was a bit surprised that the system had gone down, as it had been humming for months without any indication of being prone to crashing. The check uncovered three encrypted files. The administrator called on MANDIANT to analyze them. ![]() April 30, 3:00 a.m. PDT McAfee unveils DLP gateway McAfee introduced its newest data leakage prevention technology on April 24, taking the wraps off a gateway package meant to compliment its existing host-based DLP (data loss prevention) software. ![]() April 24, 2:44 p.m. PDT Large enterprises still serving up spam Well-known enterprise companies are still having their IT systems hijacked by spammers despite investing in many different types of technologies aimed at stopping the problem. ![]() April 17, 3:04 p.m. PDT Symantec takes initial step into SaaS Symantec took its initial step into the software-as-a-service market on April 17, introducing its maiden set of hosted applications for small and medium-sized businesses. ![]() April 17, 4:00 a.m. PDT P2P worms get their turn Massive networks of infected computers controlled by attackers worldwide will serve as a powerful engine for the new breed of so-called P2P worm that is currently echoing across cyberspace. ![]() April 16, 11:17 a.m. PDT Bottom line impact of data breaches unclear Despite the fact that unwanted exposure of consumer data has become a hot-button issue in the media and among legislators nationwide, experts admit that it remains unclear just how much damage the events will cause to the finances and reputations of companies that experience major incidents. ![]() April 13, 3:01 p.m. PDT More security OEM deals to come With enterprises demanding more tightly integrated security products than ever before and pressure increasing on vendors in the space to offer as many tools as possible to win deals, experts say that an increasing number of technology providers will turn to licensing agreements to help increase their marketability. ![]() April 12, 3:57 p.m. PDT U.S. agencies still get low cybersecurity grades The U.S. departments of Defense and State received F grades and Homeland Security got a D in the latest scorecard measuring their information security measures. April 12, 11:11 a.m. PDT McAfee: Cyber-crime will continue to pay The latest research report from McAfee's Avert Labs paints a frightening picture for enterprise IT administrators and end-users, predicting continued maturation of cyber-crime and the technological means being used to carry out external attacks. ![]() April 10, 9:00 p.m. PDT Finding security in Windows Mobile monoculture Without a doubt, the most influential factor driving the current state of IT security is the ubiquitous presence of Microsoft's dominant Windows operating system on a vast majority of the world's PCs. ![]() April 6, 4:52 p.m. PDT Microsoft patching five flaws, two critical Microsoft announced in its monthly Patch Tuesday preview that it plans next week to release security updates for five individual product vulnerabilities, including two critical issues. ![]() April 6, 10:28 a.m. PDT Intel adds vPro management to new Centrino laptops In a move to bolster its pending refresh of the Centrino wireless notebook package, Intel said Wednesday it would add vPro IT management to the bundle, which PC vendors are scheduled to begin selling by June. April 4, 8:30 a.m. PDT Debate lingers over federal data-handling laws Even as the federal government appears poised to create new consumer data protection laws in 2007, businesses and privacy advocates in the United States remain at odds over the parameters of such legislation and its potential impact. ![]() April 3, 6:59 p.m. PDT ShmooCon hacker event gets under way The third annual ShmooCon convention kicked off in Washington, D.C., on March 23 and will run throughout the weekend with a series of lectures and presentations covering a wide range of enterprise security issues. ![]() March 23, 2:12 p.m. PST TJX stolen data used in Florida crime spree Law enforcement officials in Florida have arrested six individuals suspected of carrying out a fraud scheme built around the misuse of credit card data stolen from retailer TJX Companies. ![]() March 21, 9:25 a.m. PST Global malady: Virus writers worldwide team up Security researchers have been touting the growing nature of professionalism among virus authors over the last several years, but new evidence points to increased cooperation between malware writers spread around the globe, according to some experts. ![]() March 20, 11:13 a.m. PST Real-world IT security challenges: Doing away with passwords Today's column starts an ongoing periodic feature where I'll be covering various real-world scenarios I've come across in my professional consulting life. We're talking about real-world solutions for real-world security problems. ![]() March 16, 3:00 a.m. PST Researchers peel The Onion Router Researchers in the U.S. say they've successfully shown how attackers could compromise a network designed to make it harder to trace Internet surfers and the Web sites they are viewing. March 2, 5:57 a.m. PST When lawyers use Napster at work Some years ago, I got a job doing network support for the District Attorney’s office in a large city that shall remain nameless. When I arrived, the network was a mess! Malware was rampant, Internet and WAN connections were saturated, and users were constantly complaining about slow computers and network performance. Even so, my attempts to enforce a mindful security policy were met with fierce resistance. The attitude among the legal staff was, “This is my computer and my network; you’re just a computer janitor.” ![]() February 27, 3:00 a.m. PST Toshiba secures quantum key distribution Researchers at Toshiba have developed a method that they say makes it possible -- barring a change in the laws of physics -- to absolutely secure distribution of encryption keys across a network. February 23, 5:41 a.m. PST Bots and DDoS attacks: a primer My friends Paul and Robin Laudanski at CastleCops have been under a huge DDoS attack for over a week. The attack has initiated sustained malicious loads over 1GB/s. ![]() February 23, 3:00 a.m. PST Danger inside the firewall Between the latest firewall technology and advanced intrusion detection systems, IT professionals are breathing a little easier. This is a big mistake. It may be easier to protect the network from external attack these days, but the greatest security risks still come from inside the DMZ. ![]() February 20, 3:00 a.m. PST DNS attack puts Web security in perspective A few years ago, I had the privilege of seeing some root DNS servers in action at VeriSign's main headquarters. It's something I had wanted to do for over a decade, and I was literally slightly shaking with excitement (yes, I am that big of a geek). ![]() February 16, 3:00 a.m. PST New U.S. cybersecurity chief lays out guidance SAN FRANCISCO -- U.S. companies and the federal government need to step up and fix the problems in their computer networks, the nation's new cybersecurity czar told attendees during his first-ever address at RSA Conference here on Thursday. February 9, 4:43 a.m. PST Cisco to enhance range of security products Over the next few months, Cisco plans to enhance a range of its security products, offering customers an integrated and improved line of products. February 6, 4:53 a.m. PST NAC smorgasbord: Four ways to police the network In this age of worms, zombies, and botnets, mobile computers themselves are a kind of Trojan horse. Do you know where that computer’s been? No, you really don’t. ![]() February 5, 3:00 a.m. PST NAC policy management wags the watchdog The most critical element of a NAC system is the policy management system. As every administrative interface that an administrator must use requires specialized focus and understanding, the ease with which an administrator can launch the policy management system, make the changes desired, view reports, and perform other management tasks is critical. No administrator is likely to have hours to devote to these systems each day, so the simplification and visualization provided by the system should be a primary consideration for shoppers (and a prime opportunity for differentiation among the vendors). ![]() February 5, 3:00 a.m. PST Enemy inside the firewall Corporate security lapses are once again sweeping the news hour, but these days the culprit is just as likely to be an inside source -- a paid employee at a reputable company -- as a hacker doing evil somewhere in a Moscow basement. ![]() February 2, 3:00 a.m. PST Security no matter what the OS I’m a public supporter of Microsoft Windows, but I also use, respect, and support other operating systems. I’ve been an AS/400 administrator for nearly 20 years. I thought the AS/400 would be long gone by now, but what it does, it does well. I use several flavors of Linux, FreeBSD, and OpenBSD. I even do a little hacking and defense teaching using Sun Solaris. ![]() January 26, 3:00 a.m. PST Cisco discloses three router security problems Cisco Systems is warning of three vulnerabilities within its Internet Operating System (IOS) software that could allow a denial-of-service (DoS) attack or let a hacker run arbitrary code on an affected switch router. January 25, 5:38 a.m. PST A tale of two Internets One third of all U.S. adults had their identity and financial information stolen or lost in 2006 alone. Bogus messages make up 90 percent of the e-mail traffic on the Internet. Ninety-nine percent of all malware exists to steal your money. Tens of millions of dollars are being stolen off the Internet every day from bank fraud, phishing attacks, bogus stock trades, extortion, etc. A large percentage of the Internet is owned and operated by the criminals, and they almost never get caught. ![]() January 19, 3:00 a.m. PST > Networking > Security |
|
||||||||||||||||||||||