Security

Fri, August 15, 2008 - Linux kernel creator sounds off on hype surrounding security software vulnerabilities, his disclosure model for the Linux security list and his controversial thoughts about the OpenBSD "monkeys."

Wed, July 30, 2008 - Addressing application security solely as an operational issue doesn't work. Attackers are increasingly motivated by financial gain and have been learning how to exploit software for several decades. The same is not true for software engineers, and that needs to change.

Mon, July 21, 2008 - An inside source reveals details of missteps and misunderstandings in the curious case of Terry Childs, network kidnapper.

Fri, July 18, 2008 - An IT admin for the City of San Francisco holding the network hostage is just the latest high-profile example of the security risk posed by insiders. Learn what steps you can take so it won't happen to your company.

Thu, July 03, 2008 - Full compliance should never be confused with robust security. One does not beget the other and, at times, changes called for by compliance rules can have a detrimental effect on an enterprise's overall security posture.

Fri, June 27, 2008 - Monday is the day merchants must be in compliance with PCI DSS Requirement 6.6. That means the security vendor PR machine is in overdrive.

Fri, June 13, 2008 - When conducting a security review to determine assets and risks, internal configuration of a company's computer systems is often overlooked because it is assumed to contain non-confidential data. However, in the hands of a skilled attacker, even the most innocuous piece of data can be used to attack the system and gain access to the crown jewels.

Wed, June 04, 2008 - IT executives are overconfident about their ability to respond to a litigation event, reports a new study. There's an urgent need for organizations to adopt standardized policies and IT practices for activities related to the identification, preservation and collection of potentially responsive data. The existence of ad hoc and manual business processes exposes companies to potential litigation.

Mon, June 02, 2008 - A surge in the video surveillance software market will allow companies and governments to increasingly watch people, will create privacy issues, ABI says.

Mon, May 19, 2008 - If you're cutting costs to improve your bottom-line revenue, don't. Spending money can position your company for long-term cost reduction. Read on for these and other tips on how CIOs are spending during an economic downturn.