Security

Mon, November 02, 2009 - The insider threat, the bane of computer security and a topic of worried conversation among CSOs, is undergoing significant change. Today's insider threats may have something much less insidious in mind--multitasking and social networking to get their jobs done.

Mon, November 02, 2009 - It's scary to think how much sensitive or even valuable information can be gleaned from an untended PC, even one whose user just walked away for a few minutes. That's the sort of thing that security managers fret about but the rest of the world hardly notices.

Fri, October 30, 2009 - The world got another smartphone this week with Motorola's Droid, available from Verizon. Google rolled out Android 2.0 as well. The Internet Corporation for Assigned Names and Numbers finally voted to allow non-Latin characters in domain names, and Windows 7 news continued apace, among other things. So read on and Happy Halloween everyone (see number 10).

Fri, October 30, 2009 - At least chocolate might help relieve the stress of having your credit ruined, says Ira Winkler.

Fri, October 30, 2009 - Few security technologies have received as much attention over the past few years as Data Leakage Prevention (DLP) solutions have. The concept behind them is exciting, offering the ability to scan traffic on your network and in your systems, and assign rules-based protections to the data that you want to protect. Someone e-mailing out a copy of customer records with SSNs? The DLP system will block it or encrypt it on the fly. Someone trying to copy IP to a USB drive? Alert management and block the action. It can be a great way to protect your most critical information assets, but as many have found, it is not an end-all, be-all solution to your data leakage problems.

Tue, October 27, 2009 - According to Winston Churchill, there is no worse mistake in leadership than to hold out false hopes. One area where false hopes have long abounded is information security, and it's happening again.

Wed, October 21, 2009 - Full disk encryption (FDE) systems use strong encryption algorithms to automatically protect all data stored on the hard drives of PCs and laptop computers. Users can access the data via an authentication device, such as a password, token or smart card. This enables the system to retrieve the key that decrypts the disk. On many systems, functions such as key management, access control, lock-outs, reporting and recovery are all managed centrally.

Fri, October 16, 2009 - There was a little bit of everything this week -- Sidekick users got a nasty surprise, Cisco made another acquisition, Oracle had its big user conference while questions lingered regarding the effect its plan to buy Sun will have, Biz Stone insisted he doesn't want to sell Twitter, and the world prepared for the launch of Windows 7 next week even as administrators grumbled their way through a monster patch Tuesday.

Wed, October 14, 2009 - We can blame it all on this dastardly economy, but even in good periods, qualified individuals find it difficult to land a job as an executive.

Mon, October 12, 2009 - Intrusion-detection tools might seem up to the job of stopping SQL injection attacks, but they aren't.