<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: businesses]]></title>
    <link>http://securityratty.com/tag/businesses</link>
    <description></description>
    <pubDate>Fri, 08 Aug 2008 06:43:32 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[On-device defenses for mobile malware]]></title>
      <link>http://securityratty.com/article/854b089acffaef149eb82cb9d1832f19</link>
      <guid>http://securityratty.com/article/854b089acffaef149eb82cb9d1832f19</guid>
      <description><![CDATA[As workforces grow increasingly dependent on smartphones, mobile threats warrant serious consideration. As discussed last month, mobile malware barriers are falling fast, at precisely the time when...]]></description>
      <content:encoded><![CDATA[As workforces grow increasingly dependent on smartphones, mobile threats warrant serious consideration. As discussed last month, mobile malware barriers are falling fast, at precisely the time when mobile users are becoming a bigger, juicier target. When the mobile malware "tipping point" is reached, will your organization be ready?

Conventional Win32 malware defenses are commonly deployed on the assets they protect: PCs. Antivirus scanners, host intrusion detection programs, personal firewalls, and email spam filters are all designed to stop viruses, worms, trojans and spyware that prey upon desktops and laptops. These "on device" defenses are generally accepted security best practices, widely used by both businesses and individuals.<img src="http://feeds.feedburner.com/~r/WhatisEnterpriseItTipsAndExpertAdvice/~4/370945630" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 21 Aug 2008 05:27:21 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mobile malware">mobile malware</category>
      <category domain="http://securityratty.com/tag/mobile malware barriers">mobile malware barriers</category>
      <category domain="http://securityratty.com/tag/email spam filters">email spam filters</category>
      <category domain="http://securityratty.com/tag/mobile threats warrant">mobile threats warrant</category>
      <category domain="http://securityratty.com/tag/juicier target">juicier target</category>
      <category domain="http://securityratty.com/tag/defenses">defenses</category>
      <category domain="http://securityratty.com/tag/increasingly dependent">increasingly dependent</category>
      <category domain="http://securityratty.com/tag/mobile users">mobile users</category>
      <category domain="http://securityratty.com/tag/antivirus scanners">antivirus scanners</category>
      <source url="http://feeds.feedburner.com/~r/WhatisEnterpriseItTipsAndExpertAdvice/~3/370945630/0,289483,sid40_gci1326415,00.html">On-device defenses for mobile malware</source>
    </item>
    <item>
      <title><![CDATA[ScienceLogics 5-Year Anniversary]]></title>
      <link>http://securityratty.com/article/1287b8dac0ea60512bed5f303d15fe55</link>
      <guid>http://securityratty.com/article/1287b8dac0ea60512bed5f303d15fe55</guid>
      <description><![CDATA[August 2003. The largest blackout in U.S. history darkens the Northeast and Midwest, the Blaster worm has been unleashed and Madonna and Britney create a stir at the 2003 MTV Music Video Awards . In...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 0px 10px 10px 0px; border-left: 0px; border-bottom: 0px" height="164" alt="B-day Cake" src="http://blog.sciencelogic.com/wp-content/uploads/2008/08/b-day-cake1.jpg" width="244" align="left" border="0"> August 2003. The largest <a href="http://blogs.wsj.com/biztech/2008/08/13/celebrating-the-anniversary-of-the-big-blackout/?mod=djemTECH" target="_blank">blackout</a> in U.S. history darkens the Northeast and Midwest, the <a href="http://news.cnet.com/2010-1001-5117862.html" target="_blank">Blaster worm</a> has been unleashed and Madonna and Britney create a stir at the <a href="http://en.wikipedia.org/wiki/2003_MTV_Video_Music_Awards" target="_blank">2003 MTV Music Video Awards</a>. In the midst of this <a href="http://www.grid.unep.ch/product/publication/download/ew_heat_wave.en.pdf" target="_blank">hot summer</a> madness, ScienceLogic was founded.
<p>To kick off our celebration of our first five years, we asked <a href="http://www.sciencelogic.com/leadership.htm" target="_blank">ScienceLogic founders</a> Dave Link, Richard Chart and Chris Cordray for their thoughts and memories on events leading to today’s milestone. How and why did they set out on this venture? What happened along the way – expected and unexpected? Why were they successful in times when other new (and established) businesses have come and <a href="http://en.wikipedia.org/wiki/Category:2003_disestablishments" target="_blank">gone</a>?
<p><b>How did you three put together this team?</b>
<p>We all worked together at a large Managed Service Provider for a couple of years before leaving to start ScienceLogic, so we all knew each other and knew our collective strengths. More importantly, each of us had worked with network management tools on some level (sales and marketing, engineering and product development), and knew first-hand all of the customer pain points, from every perspective. So we left and began rapidly figuring out how to build a better network management solution based upon our real world operational experience..
<p><strong>Dave:</strong> One interesting aspect is that our areas of expertise don’t overlap, which has contributed to our success. Chris is excellent with developing the product front-end and interface, Richard handled the backend architecture and engineering and I focused on the technical business side of sales and marketing. Our roles have been to build a product that works well and that provides real value to operations teams that experience the same day to day frustrations that we felt.<b></b>
<p><b>Whose idea was it to start the company?</b>
<p><strong>Dave:</strong> It was really a collective effort. We were all passionate about “getting it right” and not just starting a company. We knew the industry need and between us, we had the knowledge and skill sets to address all of the right aspects of developing a product and a building a business around it.
<p><b>What process did you go through to get started?</b>
<p><strong>Richard:</strong> From the beginning we knew the type of solution the market needed and we knew that we wanted to build it as an appliance. From different vantage points, we had each experienced the effects of long, difficult and expensive installations that still exist with traditional network tools. Every install has unique variations: there are always different server types, varying hardware and software versions, different patches installed, and on and on. Every installation was time consuming and unpredictable. We knew that an appliance model would address all of these variables and save a lot of time on how quickly customers could achieve immediate value.
<p>The harder decisions were around actually starting the business, assessing the market and of course determining the product pricing.
<p><b>EM7 completely flips the traditional model of complex, lengthy and expensive deployments. How did you convince others that the EM7 Meta-Appliance product was valid?</b>
<p><strong>Dave:</strong> Yes, EM7 totally disrupts the traditional model for network management. While others take a narrow approach, we intentionally designed EM7 to focus on the broad problem – managing the data center. How do you cover a variety of technologies and make sure they work seamlessly together? The vision was to make it easier, not harder, for customers.
<p><strong>Chris:</strong> I have to give it to Dave – very early on, he realized the power of a demo. If Dave could get in front of someone, he’d make them a believer. He’d use the Peter Falk/Columbo technique of “let me show you one more thing.” It was very effective. It’s getting easier, but even today people sometimes have to see EM7 in action before they become believers.
<p><b>Can you describe the early days of running a new business?</b>
<p><strong>Dave:</strong> ScienceLogic is a classic case of entrepreneurship. For the first year we worked out of our basements. We kept the costs low in every conceivable way and spent the first year developing the product before we even made a sale.
<p><strong>Chris:</strong> We stayed at lots of odd places when we were on the road, took cheap flights with multiple layovers and purchased lots of our first test equipment on eBay. This was during the dot-com bust so there was lots of equipment for sale on eBay, really cheap!
<p><strong>Richard:</strong> The amount of equipment I had in my house was absolutely crazy. Back then, servers were huge – I had a Cisco 6509 Catalyst, a Compaq Proliant DL380, Brocade switch, IBM Netfinity 4500R, and tons of other machines.
<p><strong>Chris:</strong> I had to install a new circuit box at home because I was blowing breakers. I remember when that 6509 crashed, we revived it and it died again. The second death was final.
<p><b>So you started in your houses – what was your first office space?</b>
<p><strong>Dave:</strong> My friend, the CEO at Ernst &amp; Young Technology had a few extra cubes and a data center in their office that they graciously allowed us to use. Their help was an important step in helping us really formalize the business. We started doing well and adding people, but ironically, their company was downsizing. Before long, many of their original YET people were gone and the ScienceLogic team kept growing in to the open cubes.
<p>Our first leased space was converted warehouse space in Chantilly, VA that once housed an internet radio station. It was cool – it had a large salt water fish tank, a loft, a spiral staircase and a Star Trek door that retracted into the walls with the customary lights and “whooshing” sound.
<p>We outgrew the Chantilly space, leading to our current office in Reston, VA.
<p><b>Who was the first ScienceLogic customer?</b>
<p>Our first paying customer was <a href="http://martinspoint.com/" target="_blank">Martins Point Health Care</a>. We deployed there in July 2004 and are pleased to say they continue to be a ScienceLogic customer. Other early (and still) EM7 <a href="http://www.sciencelogic.com/customers.htm" target="_blank">customers</a> include Navy Knowledge Online and the Department of Transportation. Nearly all of our customers are still actively using EM7 and renewing their maintenance.
<p><b>Where do you see the company in the next 5, 10 or 15 years?</b>
<p>Well, our revenue has doubled year-over-year in each of the last three years, so of course we’d like to continue to grow like that or even faster. In five years we’ve gone from three founders to the point where Dave does not know everyone’s fondest childhood memory. We’ll continue to scale our growth to cover the demands of our growing customer base.
<p><b>Where do you see the industry going over the coming years?</b>
<p><strong>Chris:</strong> IT is always moving and gaining in complexity, so network management is also becoming more complicated. There’s increasing diversity, new standards, virtualization and cloud computing. All of these are today’s technologies. Customers have a mix of the old and the new, so EM7 has to accommodate and support both.
<p><strong>Richard:</strong> Each generation of products has a new set of ways to monitor, but the “old” doesn’t go away. Even when a new, hot technology comes along, the old technologies still need to be supported. We work to ensure EM7 keeps up with both.
<p><strong>Dave:</strong> After five years we’re just hitting our stride and we’re just now reaching the tipping point in awareness of ScienceLogic and EM7. We’re all still passionate about the product and as Chris and Rich said, there’s still a lot do. We’ll continue disrupting the market with EM7. Our vision hasn’t changed, and with the increasing levels of automation that customers demand, the market needs are greater than ever. Our future is as bright, or brighter, than ever and we’ll continue to be looking for smart ways to automate traditionally manual IT Operations processes.
<p><b>What’s your advice for someone interested in starting their own business?</b>
<p><strong>Chris:</strong> Be passionate. That’s what has gotten me through the tough times. I didn’t really appreciate this thought when I heard others say it before. But it’s very true.
<p><strong>Richard:</strong> I agree. We met and talked with lots of people who told us, “That’s been done before.” But we kept going because we truly believed in what we were doing and we knew that while our approach was different, that it would be successful.
<p><strong>Richard:</strong> Be fearless. You can’t be too nervous and you need to be able to expect and handle the stress because it will be there. You have to learn to accept the stressful times as a necessary part of the process of starting out on your own.
<p><strong>Dave:</strong> Know your niche from the beginning and give potential customers a compelling reason to trust you and really benefit from your solution. You have to know the problem, see the gap and have a clear and consistent vision of how to solve the problem. Then you have to execute. If you don’t build your team with “doers” you won’t make it.
<p><strong>Chris:</strong> It helps to have friends. ScienceLogic was built on friendships and relationships, starting with the three of us. If you look at our team, most of our hires are referrals – people who developed and maintained great connections with other great people throughout their careers. Maintain your connections and keep in touch with your network of friends.</p>
]]></content:encoded>
      <pubDate>Wed, 20 Aug 2008 18:39:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/em7 completely flips">em7 completely flips</category>
      <category domain="http://securityratty.com/tag/em7">em7</category>
      <category domain="http://securityratty.com/tag/network management">network management</category>
      <category domain="http://securityratty.com/tag/network management tools">network management tools</category>
      <category domain="http://securityratty.com/tag/em7 meta-appliance product">em7 meta-appliance product</category>
      <category domain="http://securityratty.com/tag/sciencelogic team">sciencelogic team</category>
      <category domain="http://securityratty.com/tag/team">team</category>
      <category domain="http://securityratty.com/tag/front">front</category>
      <category domain="http://securityratty.com/tag/product front-end">product front-end</category>
      <source url="http://blog.sciencelogic.com/sciencelogics-5-year-anniversary/08/2008">ScienceLogics 5-Year Anniversary</source>
    </item>
    <item>
      <title><![CDATA[Changes to PCI standard not expected to up ante on protecting payment card data]]></title>
      <link>http://securityratty.com/article/bf27c281117cda1a2c49240f942ee290</link>
      <guid>http://securityratty.com/article/bf27c281117cda1a2c49240f942ee290</guid>
      <description><![CDATA[An update of the Payment Card Industry Data Security Standard, or PCI, may ease some of the compliance challenges facing businesses that handle cardholder...]]></description>
      <content:encoded><![CDATA[An update of the Payment Card Industry Data Security Standard, or PCI, may ease some of the compliance challenges facing businesses that handle cardholder data.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=htckdq"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=htckdq" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/370408352" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 20 Aug 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/handle cardholder data">handle cardholder data</category>
      <category domain="http://securityratty.com/tag/pci">pci</category>
      <category domain="http://securityratty.com/tag/compliance challenges">compliance challenges</category>
      <category domain="http://securityratty.com/tag/businesses">businesses</category>
      <category domain="http://securityratty.com/tag/ease">ease</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/370408352/article.do">Changes to PCI standard not expected to up ante on protecting payment card data</source>
    </item>
    <item>
      <title><![CDATA[Old laws dont cover Cybercrime]]></title>
      <link>http://securityratty.com/article/f9bae1b796c4a6d1b215809f4cbd3027</link>
      <guid>http://securityratty.com/article/f9bae1b796c4a6d1b215809f4cbd3027</guid>
      <description><![CDATA[We really need to get our laws updated quickly. Cybercrime is up 20
Businesses are being targeted more routinely


clipped from www.crime-research.org

Scene of the Cybercrime: Inside Todays...]]></description>
      <content:encoded><![CDATA[<div>We really need to get our laws updated quickly. Cybercrime is up 20%.<br />
Businesses are being targeted more routinely.</div>
<table style="border: 4px solid #e5e5e5; margin: 12px 0px; background: #ffffff none repeat scroll 0%; font-family: arial; color: #333333; width: 100%; clear: left;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td valign="top">
<table class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td valign="top">
<table style="border-bottom: 1px solid #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee; background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td valign="top"><a title="go to this clipmark" href="http://clipmarks.com/clipmark/64B02289-0173-4D25-8D18-B2E876E5E3D6/"><img style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" src="http://content.clipmarks.com/blog_icon/a09d3640-cf18-4e6d-b96e-e15292ab93eb/64B02289-0173-4D25-8D18-B2E876E5E3D6/" border="0" alt="" width="19" height="19" /></a>clipped from <a style="font-size: 11px;" title="http://www.crime-research.org/news/10.08.2008/3498/" href="http://www.crime-research.org/news/10.08.2008/3498/">www.crime-research.org</a></td>
</tr>
</tbody>
</table>
<table style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.crime-research.org/news/10.08.2008/3498/ --></p>
<div style="margin: 4px 0px; color: #000000; font-size: 20px;">Scene of the Cybercrime: Inside Today&#8217;s Cybercrime World</div>
</td>
</tr>
</tbody>
</table>
<table style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.crime-research.org/news/10.08.2008/3498/ --></p>
<div>
<div></div>
<p>Today we live and work in a world of global connectivity. We can exchange casual conversation or conduct multimillion-dollar monetary transactions with people on the other side of the planet quickly and inexpensively. The proliferation of personal computers, easy access to the Internet, and a booming market for related new communications devices have changed the way we spend our leisure time and the way we do business.</p></div>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td style="background:transparent;border-width:0px;padding:0px;"></td>
<td style="border-width: 0px; padding: 0px; background: transparent none repeat scroll 0%; width: 107px;" width="107" align="right"><a title="blog or email this clip" href="http://clipmarks.com/share/64B02289-0173-4D25-8D18-B2E876E5E3D6/blog/"><img style="border-width:0px;padding:0px;margin:0px;" src="http://content6.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" /></a></td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
</tbody>
</table>
]]></content:encoded>
      <pubDate>Sat, 16 Aug 2008 12:38:41 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cybercrime">cybercrime</category>
      <category domain="http://securityratty.com/tag/exchange casual conversation">exchange casual conversation</category>
      <category domain="http://securityratty.com/tag/planet quickly">planet quickly</category>
      <category domain="http://securityratty.com/tag/quickly">quickly</category>
      <category domain="http://securityratty.com/tag/communications devices">communications devices</category>
      <category domain="http://securityratty.com/tag/easy access">easy access</category>
      <category domain="http://securityratty.com/tag/monetary transactions">monetary transactions</category>
      <category domain="http://securityratty.com/tag/personal computers">personal computers</category>
      <category domain="http://securityratty.com/tag/leisure time">leisure time</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=561">Old laws dont cover Cybercrime</source>
    </item>
    <item>
      <title><![CDATA[Corporate Identity Theft]]></title>
      <link>http://securityratty.com/article/57c21b4d57a8ae63a7ec8f43043877e8</link>
      <guid>http://securityratty.com/article/57c21b4d57a8ae63a7ec8f43043877e8</guid>
      <description><![CDATA[I remember a talk by the value investor Mason Hawkins (Longleaf Funds) where someone asked him about investing overseas. He answered that he does, but mainly in places where the British flag flew at...]]></description>
      <content:encoded><![CDATA[<p>I remember a <a href="http://www.bengrahaminvesting.ca/Resources/videos.htm#hawkins">talk</a>&#160;by the value investor&#160;<a href="http://en.wikipedia.org/wiki/Mason_Hawkins">Mason Hawkins</a>&#160;(Longleaf Funds) where someone asked him about investing overseas. He answered that he does, but mainly in places where the British flag flew at some point, where there is a rule of law. Here is one example of what he is worried about and why investing in places where your assets have no legal protection does not give the investor a margin of safety.</p><div>Hermitage Fund was until recently the largest fund in Russia. From the Business Week story<a href="http://hermitagefund.com/index.pl/news/article.html?id=895"> &quot;Hijacking the Hermitage Fund&quot;</a></div><br /><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p>Corruption, intimidation, robbery, violent assault, forgery, large-scale fraud. No, not the subject of the latest John Grisham novel, but sensational allegations, made public Apr. 4 by Hermitage Capital Management -- until recently the largest foreign portfolio investor in Russia. In a detailed and damning report, titled Criminal Justice -- Russian-Style, Hermitage alleges the fund&#39;s Russian subsidiaries have fallen victim to an elaborate con designed to defraud the fund of hundreds of millions of dollars.&#160;<br />&#160;&#160;<br />The most sensational part of Hermitage&#39;s allegations is that the attempted larceny was carried out with the direct connivance of officials in the Russian police. Hermitage alleges the police seized documents and equipment that were instrumental to the attempted fraud, which involved bogus court cases based on forged documents, the aim of which was to sue Hermitage subsidiaries for hundreds of millions of dollars. &quot;The most shocking thing is not that there are corporate raiders in Russia who attempt to steal your shares,&quot; says Jamison Firestone, managing partner of Firestone Duncan, Hermitage&#39;s law firm. &quot;The shocking thing is that the police worked hand-in-hand with them, and actually performed the theft of the documents so that the corporate raiders could then do their work.&quot;</p></blockquote><div><br /><div>From the most recent Hermitage Fund letter, here is the current state:</div><br /><br /></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p>So the two-pronged scam worked in one area and failed in another. The perpetrators weren’t able to steal the assets from us based on the fake court claims, but they were able to steal $230 million from the Russian government by filing amended tax returns on behalf of our stolen companies. What makes this story even more shocking is that we filed six 255-page criminal complaints with the Russian authorities in December last year, one month before the tax fraud took place, and they did nothing to stop it. Two complaints were sent to the Russian General Prosecutor, two to the Russian State Investigative Committee and two to the Internal Affairs Department of the Interior Ministry. There was enough information to prevent the fraud and indict a number of people behind it if the government had acted.&#160;</p><p>Instead of doing anything to save the Russian state from this highly sophisticated and organized looting, two of our complaints were thrown out immediately; two were returned to the same Interior Ministry official we were complaining about (essentially, he was being asked to “investigate himself”); and one was thrown out for “lack of any crime committed.” Only one complaint was taken seriously. It was taken up by the Russian State Investigative Committee in early February, but before it could get any traction, the case was lowered to the South region of the Moscow district of the State Investigative Committee (the lowest level of the Committee) and by June, another senior Interior Ministry official whom we had named in our complaint had joined the “investigation” team (again, to “investigate himself”). To this day there has been no serious response by the Russian authorities to this massive fraud against the Russian state.&#160;</p><p>As we described in our April letter, the problem of corporate “raiding” is now so endemic in Russia that President Medvedev speaks about it as one of the biggest problems faced by Russian businesses. In this case, raiders have taken this problem to a new and absurd extreme by “raiding” the Russian state itself and so far getting away with it. Together with HSBC, we will shortly be filing new criminal complaints with the Russian General Prosecutor and Russian State Investigative Committee as well as with many law enforcement authorities outside of Russia. It is hard to predict what will happen next in this unfolding and unbelievable saga, but as always we will keep you updated on any further developments as they arise.</p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><br /></blockquote><p>Of course we see individual identity theft on a regular basis (actually as Ross Anderson points out its not really identity theft but poor controls on the bank&#39;s parts using SSNs as secrets and so on), but you dont see a major corporation stolen every day.</p>]]></content:encoded>
      <pubDate>Sat, 16 Aug 2008 05:58:30 +0000</pubDate>
      <category domain="http://securityratty.com/tag/russian police">russian police</category>
      <category domain="http://securityratty.com/tag/police">police</category>
      <category domain="http://securityratty.com/tag/russian">russian</category>
      <category domain="http://securityratty.com/tag/russian government">russian government</category>
      <category domain="http://securityratty.com/tag/government">government</category>
      <category domain="http://securityratty.com/tag/identity theft">identity theft</category>
      <category domain="http://securityratty.com/tag/russian-style">russian-style</category>
      <category domain="http://securityratty.com/tag/hermitage">hermitage</category>
      <category domain="http://securityratty.com/tag/fund">fund</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/08/corporate-identity-theft.html">Corporate Identity Theft</source>
    </item>
    <item>
      <title><![CDATA[Throwplace.com can help in these hard times]]></title>
      <link>http://securityratty.com/article/fd15950218eb383fb4127301c6c5d76f</link>
      <guid>http://securityratty.com/article/fd15950218eb383fb4127301c6c5d76f</guid>
      <description><![CDATA[Of course you wont see any of our Politicians there, they are not having hard times. Throwplace also has a recycle directory and a green directory


clipped from www.enn.com

Free Goods At...]]></description>
      <content:encoded><![CDATA[<div > Of course you wont see any of our Politicians there, they are not having hard times.<br/>Throwplace also has a recycle directory and a green directory. </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/E2D45BF5-33C3-4737-80F4-17388A4A2136/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/288a468d-7da7-4fa5-b5c3-8a9e4775a4d4/E2D45BF5-33C3-4737-80F4-17388A4A2136/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://www.enn.com/press_releases/2598" href="http://www.enn.com/press_releases/2598" style="font-size: 11px;">www.enn.com</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.enn.com/press_releases/2598 -->
<div style="margin: 4px 0px; color: #000000; font-size: 20px;">Free Goods At Throwplace.com Help Consumers in Tough Times</div>
</td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.enn.com/press_releases/2598 --><P><br />
At Throwplace.com, charities, businesses and individuals from all over the world can<br />
&#8220;throw&#8221; their excess onto the Internet where others can view and &#8220;take&#8221; what they need<br />
for free. Each &#8220;throw&#8221; and &#8220;take&#8221; is recycled and reused, keeping countless goods out of<br />
landfills, and helping people and non-profits make ends meet during tough economic times.<br />
</P></td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/E2D45BF5-33C3-4737-80F4-17388A4A2136/blog/" title="blog or email this clip"><img src="http://content7.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
]]></content:encoded>
      <pubDate>Thu, 14 Aug 2008 13:34:29 +0000</pubDate>
      <category domain="http://securityratty.com/tag/throwplace">throwplace</category>
      <category domain="http://securityratty.com/tag/hard times">hard times</category>
      <category domain="http://securityratty.com/tag/directory">directory</category>
      <category domain="http://securityratty.com/tag/recycle directory">recycle directory</category>
      <category domain="http://securityratty.com/tag/tough economic times">tough economic times</category>
      <category domain="http://securityratty.com/tag/tough times">tough times</category>
      <category domain="http://securityratty.com/tag/free">free</category>
      <category domain="http://securityratty.com/tag/landfills">landfills</category>
      <category domain="http://securityratty.com/tag/world">world</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=560">Throwplace.com can help in these hard times</source>
    </item>
    <item>
      <title><![CDATA[Patch Tuesday haul nets 11 fixes]]></title>
      <link>http://securityratty.com/article/02ec17f864fe73f48d18a460083d6340</link>
      <guid>http://securityratty.com/article/02ec17f864fe73f48d18a460083d6340</guid>
      <description><![CDATA[Microsoft's monthly Patch Tuesday brought the largest haul of patches in quite some time and included another fix for the company's WSUS patch management tool for businesses. A previous fix in July...]]></description>
      <content:encoded><![CDATA[Microsoft's monthly Patch Tuesday brought the largest haul of patches in quite some time and included another fix for the company's WSUS patch management tool for businesses. A previous fix in July didn't fix the initial problem entirely, so a second update was required. VMWare users also have a bevy of patches to install, particularly the users that woke up to inoperable servers Tuesday due to a software bug. And Nokia phone users beware, a bug in the Java implementation for the Nokia Series 40 phones could allow hackers to make calls and record converstations on an affected phone.]]></content:encoded>
      <pubDate>Wed, 13 Aug 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/previous fix">previous fix</category>
      <category domain="http://securityratty.com/tag/fix">fix</category>
      <category domain="http://securityratty.com/tag/software bug">software bug</category>
      <category domain="http://securityratty.com/tag/monthly patch tuesday">monthly patch tuesday</category>
      <category domain="http://securityratty.com/tag/users">users</category>
      <category domain="http://securityratty.com/tag/bug">bug</category>
      <category domain="http://securityratty.com/tag/vmware users">vmware users</category>
      <category domain="http://securityratty.com/tag/java implementation">java implementation</category>
      <category domain="http://securityratty.com/tag/nokia series">nokia series</category>
      <source url="http://www.networkworld.com/newsletters/bug/2008/081108bug2.html?fsrc=rss-security">Patch Tuesday haul nets 11 fixes</source>
    </item>
    <item>
      <title><![CDATA[PCI compliance: Web application firewall vs. code review]]></title>
      <link>http://securityratty.com/article/fed5fdf80b1822478cbcfcfce59a4e80</link>
      <guid>http://securityratty.com/article/fed5fdf80b1822478cbcfcfce59a4e80</guid>
      <description><![CDATA[The Payment Card Industry Data Security Standard requirement 6.6 gives businesses a choice in how they protect card holder data -- use a Web application firewall or conduct code reviews. Learn how to...]]></description>
      <content:encoded><![CDATA[The Payment Card Industry Data Security Standard requirement 6.6 gives businesses a choice in how they protect card holder data -- use a Web application firewall or conduct code reviews. Learn how to advise clients and help them comply with PCI.<img src="http://feeds.feedburner.com/~r/WhatisEnterpriseItTipsAndExpertAdvice/~4/362928396" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 12 Aug 2008 05:17:08 +0000</pubDate>
      <category domain="http://securityratty.com/tag/web application firewall">web application firewall</category>
      <category domain="http://securityratty.com/tag/conduct code reviews">conduct code reviews</category>
      <category domain="http://securityratty.com/tag/advise clients">advise clients</category>
      <category domain="http://securityratty.com/tag/pci">pci</category>
      <category domain="http://securityratty.com/tag/businesses">businesses</category>
      <category domain="http://securityratty.com/tag/comply">comply</category>
      <category domain="http://securityratty.com/tag/choice">choice</category>
      <source url="http://feeds.feedburner.com/~r/WhatisEnterpriseItTipsAndExpertAdvice/~3/362928396/0,289483,sid97_gci1323865,00.html">PCI compliance: Web application firewall vs. code review</source>
    </item>
    <item>
      <title><![CDATA[XTM? YAUSA, or Yet Another Useless Security Acronym]]></title>
      <link>http://securityratty.com/article/1cfad76faecbff53ca0cd9b7d4b3dcda</link>
      <guid>http://securityratty.com/article/1cfad76faecbff53ca0cd9b7d4b3dcda</guid>
      <description><![CDATA[Sometimes, two negatives do make a positive. Gartner has avoided using the term UTM (that is, unified threat management) in our research because

1. You can't (and wouldn't want to) manage threats
2....]]></description>
      <content:encoded><![CDATA[Sometimes, two negatives do make a positive. Gartner has avoided using the term UTM (that is, unified threat management) in our research because:<br />
<br />
1.	You can't (and wouldn't want to) manage threats.<br />
2.	UTM originally applied to products for small and midsize businesses (SMBs), but UTM has been recently co-opted by some enterprise security vendors under the guise of fresh marketing.<br />
3.	There is little evidence that many of the components in these platforms are integrated, much less "unified." Now, there is some promotion of the new acronym XTM (that is, eXtensible threat management) as a new generation of UTM. We're not referring to any product name, but the attempt to create a new and confusing acronym, and create another artificial market to size and make predictions about.<br />
<br />
No matter what you call it, the arc of advancement of network security products for the SMB will continue: New threats will drive the development of new safeguards that will be included as an option in that same appliance. This is not true for the enterprise, where best-of-breed buying of point solutions will continue, with consolidation of products occurring in three places, aligned by buying center and safeguard profile (see <a href="http://my.gartner.com/portal/server.pt?gr=dd&docCode=146229&ref=g_itlsite"  target="http://my.gartner.com/portal/server.pt?gr=dd&docCode=146229&ref=g_itlsite"  >"Introducing the Secure Web Gateway"</a>). <br />
<br />
The next-generation firewall (NGFW) will serve the enterprise and combine firewall and IPS,; however, there will be no UTM for the enterprise (see <a href="http://my.gartner.com/portal/server.pt?gr=dd&docCode=151129&ref=g_itlsite"  target="http://my.gartner.com/portal/server.pt?gr=dd&docCode=151129&ref=g_itlsite"  >"Magic Quadrant for Enterprise Network Firewalls, 2H07"</a>). We are already seeing SMB multifunction firewall vendors optimizing performance by assigning separate ASICs, emphasizing that the inspection tasks on content and network processing are very different (see <a href="http://my.gartner.com/portal/server.pt?gr=dd&docCode=159003&ref=g_itlsite"  target="http://my.gartner.com/portal/server.pt?gr=dd&docCode=159003&ref=g_itlsite"  >"MarketScope for Multifunction Firewalls for Small and Midsize Businesses"</a>). Even among SMBs, we are seeing little evidence that many are deploying network, content and e-mail processing in the same platform, usually leaving e-mail security to a separate product or service.]]></content:encoded>
      <pubDate>Mon, 11 Aug 2008 13:06:29 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/enterprise network firewalls">enterprise network firewalls</category>
      <category domain="http://securityratty.com/tag/enterprise">enterprise</category>
      <category domain="http://securityratty.com/tag/network security products">network security products</category>
      <category domain="http://securityratty.com/tag/enterprise security vendors">enterprise security vendors</category>
      <category domain="http://securityratty.com/tag/utm">utm</category>
      <category domain="http://securityratty.com/tag/acronym">acronym</category>
      <category domain="http://securityratty.com/tag/term utm">term utm</category>
      <category domain="http://securityratty.com/tag/products">products</category>
      <source url="http://blog.gartner.com/blog/security.php?x=0&amp;itemid=3779">XTM? YAUSA, or Yet Another Useless Security Acronym</source>
    </item>
    <item>
      <title><![CDATA[SQL Attacks Still Inject Websites Including Government Sites In US, UK]]></title>
      <link>http://securityratty.com/article/c5429a8c759a9a3a9659af78716ec7bc</link>
      <guid>http://securityratty.com/article/c5429a8c759a9a3a9659af78716ec7bc</guid>
      <description><![CDATA[A new round of SQL injection attacks (most likely by Asprox) has infected millions of web pages belonging to businesses and government agencies, including those that belong to the National Institutes...]]></description>
      <content:encoded><![CDATA[A new round of SQL injection attacks (most likely by Asprox) has infected millions of web pages belonging to businesses and government agencies, including those that belong to the National Institutes of Health and Education Department in the US and the UK Trade &#38; Investment. It seems that a lot of domains involved are still [...]]]></content:encoded>
      <pubDate>Fri, 08 Aug 2008 06:43:32 +0000</pubDate>
      <category domain="http://securityratty.com/tag/sql injection attacks">sql injection attacks</category>
      <category domain="http://securityratty.com/tag/government agencies">government agencies</category>
      <category domain="http://securityratty.com/tag/national institutes">national institutes</category>
      <category domain="http://securityratty.com/tag/web pages">web pages</category>
      <category domain="http://securityratty.com/tag/education department">education department</category>
      <category domain="http://securityratty.com/tag/asprox">asprox</category>
      <category domain="http://securityratty.com/tag/lot">lot</category>
      <category domain="http://securityratty.com/tag/businesses">businesses</category>
      <category domain="http://securityratty.com/tag/round">round</category>
      <source url="http://cyberinsecure.com/sql-attacks-still-inject-websites-including-government-sites-in-us-uk/">SQL Attacks Still Inject Websites Including Government Sites In US, UK</source>
    </item>
  </channel>
</rss>
