Google's Open Source Security Audit Tool
Google has placed Ratproxy, a passive security audit tool, into open source
Continue reading Google's Open Source Security Audit Tool...
Site Sponsor:
Now Available:
Featured Resource:
Newsletter
Email Address:
Ask the Expert
Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.
July 8, 2008
Digg it!
Sphere it!
Del.icio.us
Reddit!
NewsvineJuly 7, 2008
Who Is Running More Secure Browser Still an Open Question
A recent study on which of the major browsers are more like to be up to date is generating a fair bit of discussion focused on the study's methodology. Critics are right that some assumptions may have biased the findings but there are easy ways to assess how much of a bias those assumptions introduced. The study isn't perfect but it is a step in the right direction.
Continue reading Who Is Running More Secure Browser Still an Open Question...
July 5, 2008
Security as a Service: Is It Right for You?
Outsourcing security services has a number of advantages, including gaining access to expertise not available in house, more efficiently dealing with mundane operational tasks, and expanding the breadth of your security measures. This podcast discusses the advantages, the kinds of services you can expect to find in a security as a service offering, and finally some issues you should consider, such as defining roles and responsibilities, coordinating multiple vendors, and third party access to private and confidential data.
July 3, 2008
Slaying the E-Mail Dragon: One Success Story from NYT
After reading Luis Suarez's New York Times piece I Freed Myself from E-Mail's Grip I wanted to email everyone I work with to tell them about it - but the irony of littering their inboxes with an article on controlling email was too much to swallow.
Continue reading Slaying the E-Mail Dragon: One Success Story from NYT...
July 2, 2008
Security Management: Tips and Techniques Articles
Managing security in any sizable IT organization can sometimes feel like juggling - things keep coming at you and the stuff you've already handled seems to have a way of coming back at you. There are no simple formulas or list of habits that will guarantee your success in this arena but over the last couple of years we have accumulated a number of articles that help to frame and explain some common issues in security management. Here are some of the most relevant:
Continue reading Security Management: Tips and Techniques Articles...
July 1, 2008
Securing Web Applications: Tips and Techniques Articles
Web applications are prime targets for attackers and developers are expected to develop applications with security high on the requirements list. Over the past years we have accumulated a number of articles that describe tips and techniques for improving application security. Here are some of the most relevant:
Continue reading Securing Web Applications: Tips and Techniques Articles...
June 30, 2008
Evaluating Your Security Management Program: What to Look For
The latest article in the Essentials Series: Messaging and Web Security - Volume III looks into how to keep your security management plan in synch with other business objectives. Here's an excerpt:
Continue reading Evaluating Your Security Management Program: What to Look For...
June 27, 2008
Capturing Keystrokes in Internet Explorer 6
Researchers at McAfee's Avert Labs have reported a vulnerability in Internet Explorer 6 that allows attackers to capture keystrokes. IE 7 does not have this vulnerability.
Continue reading Capturing Keystrokes in Internet Explorer 6...
Search
Most Active Posts
- Changes to Election Results Demonstrate e-Voting Vulnerabilities comments (1)
- Microsoft Patents Privacy Policy Notification Mechanism comments (2)
- Skype Worm Hits Windows comments (2)
Recent Posts
- Google's Open Source Security Audit Tool
- Who Is Running More Secure Browser Still an Open Question
- Security as a Service: Is It Right for You?
- Slaying the E-Mail Dragon: One Success Story from NYT
- Security Management: Tips and Techniques Articles
- Securing Web Applications: Tips and Techniques Articles
- Evaluating Your Security Management Program: What to Look For
- Capturing Keystrokes in Internet Explorer 6
- You Are Being Targeted: Common Ground of Phishers and Polticial Strategists
- Business Intelligence Security
Latest White Papers
Blog Roll
Dan Sullivan's Bio:
Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net