<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: purchase]]></title>
    <link>http://securityratty.com/tag/purchase</link>
    <description></description>
    <pubDate>Wed, 30 Jul 2008 04:05:48 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Open Letter to Verizon Wireless]]></title>
      <link>http://securityratty.com/article/33861048df9fa12f13bd8d46690d0a5b</link>
      <guid>http://securityratty.com/article/33861048df9fa12f13bd8d46690d0a5b</guid>
      <description><![CDATA[After receiving no support from agents at the Verizon Wireless store or by agents on the phone, I decided to write them and make it an open letter. Its no secret that Verizon has a great network, but...]]></description>
      <content:encoded><![CDATA[<P><FONT size=2><FONT face=Verdana>After receiving no support from agents at the Verizon Wireless store or by agents on the phone, I decided to write them and make it an open letter.<SPAN>&nbsp; </SPAN>It&#8217;s no secret that Verizon has a great network, but it&#8217;s also no secret that their phone selection stinks.<SPAN>&nbsp; </SPAN>I don&#8217;t want to leave them and am hoping that whatever little bad press I can cause will encourage them to resolve the issue.<SPAN>&nbsp; </SPAN>If not, I&#8217;m tapping out.<SPAN>&nbsp; </SPAN>For 3 years I have hated my phone and loved their network.<SPAN>&nbsp; </SPAN>I&#8217;m ready to feel mediocre about both.<SPAN>&nbsp; </SPAN>Here it goes: </FONT></FONT>
<P><FONT size=2><FONT face=Verdana>I am currently without a phone and would appreciate a speedy reply. </FONT></FONT>
<P><FONT size=2><FONT face=Verdana>I have been a Verizon Wireless customer for over 5 years and my monthly bill easily averages over $200 during that time frame.<SPAN>&nbsp; </SPAN>While I love your network, I have been completely unsatisfied by your selection of phones.<SPAN>&nbsp; </SPAN>It is a stretch to say that my last phone worked&#8212;it had a feature called a battery that allowed me to switch from the car charger to my office charger without dying.<SPAN>&nbsp; </SPAN>And I waited&#8212;under duress&#8212;until I was allowed to purchase a new phone with the discount. </FONT></FONT>
<P><FONT size=2><FONT face=Verdana>My current phone has a wonderful battery life, but this is the 4th time the charger has snapped off in the phone.<SPAN>&nbsp; </SPAN>The phone is fine, but I keep paying $30 for new chargers.<SPAN>&nbsp; </SPAN>I refuse to purchase another or wait until February when I will be eligible for a new phone.<SPAN>&nbsp; </SPAN>You sold a phone with a design flaw, and I&#8217;m not even asking for a refund or a free phone.<SPAN>&nbsp; </SPAN>Just allow me to take a chance on a new one at the 2 year contract renewal rate.<SPAN>&nbsp; </SPAN></FONT></FONT>
<P><FONT size=2><FONT face=Verdana><SPAN></SPAN></FONT></FONT><FONT size=2><FONT face=Verdana>If not, I will gladly pay the early termination fee and leave Verizon.<SPAN>&nbsp; </SPAN>On general principle, I will spend more money canceling my account with you than I would likely receive as a discount on a new phone.<SPAN>&nbsp; </SPAN>As a customer, I consider it unacceptable that you sell inferior phones and leave me with no recourse. </FONT></FONT>
<P><FONT size=2><FONT face=Verdana>The first time I waited haplessly to become eligible for a new phone.<SPAN>&nbsp; </SPAN>I will not suffer a second time.<SPAN>&nbsp; </SPAN>If you don&#8217;t like the fact that you will end up losing money by allowing me to purchase a new phone early, I suggest you take it up your vendors who supply you with awful products.<SPAN>&nbsp; </SPAN>I can promise you that we will both lose more money if you don&#8217;t. </FONT></FONT>
<P><FONT size=2><FONT face=Verdana>Sincerely, </FONT></FONT>
<P><FONT face=Verdana size=2>Eric Marvets</FONT></P><img src ="http://marvets.com/blog/aggbug/12205.aspx" width = "1" height = "1" />]]></content:encoded>
      <pubDate>Mon, 25 Aug 2008 11:43:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/phone">phone</category>
      <category domain="http://securityratty.com/tag/phone workedit">phone workedit</category>
      <category domain="http://securityratty.com/tag/free phone">free phone</category>
      <category domain="http://securityratty.com/tag/current phone">current phone</category>
      <category domain="http://securityratty.com/tag/verizon">verizon</category>
      <category domain="http://securityratty.com/tag/phone selection stinks">phone selection stinks</category>
      <category domain="http://securityratty.com/tag/verizon wireless store">verizon wireless store</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/verizon wireless customer">verizon wireless customer</category>
      <source url="http://marvets.com/blog/archive/2008/08/25/12205.aspx">Open Letter to Verizon Wireless</source>
    </item>
    <item>
      <title><![CDATA[Software Security Market]]></title>
      <link>http://securityratty.com/article/0adbf216425dc6d24bde35c8640002aa</link>
      <guid>http://securityratty.com/article/0adbf216425dc6d24bde35c8640002aa</guid>
      <description><![CDATA[Information Security budgets are pretty crufty , they are an accumulation of decisions but the analysis that led to these decisions is rarely revisited, it just snowballs. So the normal Information...]]></description>
      <content:encoded><![CDATA[<p>Information Security budgets are pretty <a href="http://en.wikipedia.org/wiki/Cruft">crufty</a>, they are an accumulation of decisions but the analysis that led to these decisions is rarely revisited, it just snowballs. So the normal Information Security budget is just a legacy artifact of when the network was the greatest vulnerability. <a href="http://www.cigital.com/~gem/">Gary McGraw&#160;</a><a href="http://www.informit.com/articles/article.aspx?p=1237978">took a pass</a> at reviewing the numbers in software security, breaking down software security sectors like tools and services (note to Gary - I think <a href="http://www.aspectsecurity.com/">Aspect</a> does more than just training!). This is great work by Gary to get these numbers to see the real changes occuring in software security. Here were his findings on software security tools:</p><div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: &#39;Lucida Grande&#39;; line-height: 19px; ">One of the most important developments in the software security market can be seen in the tools space which, combined, almost doubled to $150-180 million. Top of list are two major acquisitions that closed in 2007: Watchfire&#39;s purchase by IBM (somewhere in the range of $120-150 million on 2006 revenue of $26 million) and SPI Dynamics&#39;s purchase by HP (for around $100 million on 2006 revenue of $21.2 million).</span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: &#39;Lucida Grande&#39;; line-height: 19px;">...</span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: &#39;Lucida Grande&#39;; line-height: 19px; ">The black box space was flat in 2007, with IBM/Watchfire checking in at $24.1 million and HP/SPI Dynamics earning $22.3 million. Smaller companies in the space, including Cenzic, Codenomicon, WhiteHat and the like had combined revenues around $12.5 million (a growth of 25%, though Cenzic grew 16% and WhiteHat 52%). Most of the growth &quot;hiccup&quot; in the black box market can be attributed to the serious challenges posed by any acquisition. So far 2008 looks to be back on track from a growth perspective in the black box testing space. The global reach that IBM and HP offer are already making a big difference.</span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: &#39;Lucida Grande&#39;; line-height: 19px;"><br /></span><span style="font-family: &#39;Lucida Grande&#39;; line-height: 19px; ">On a more positive note, static analysis tools for code review grew at a healthy clip in 2007 into a $91.9 million dollar market. Fortify was up 83% to $29.2 million. Klocwork grew over 60% to $26 million. Coverity grew over 50% to $27.2 million. Ounce Labs tripled their revenue to $9.5 million.</span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><br /></blockquote><div><br /><div>These are very nice growth numbers, what company doesn&#39;t want 83% growth? However, the total picture is not so good. Gary&#39;s estimate shows the software security space coming in at $150 Million total, yet we see a company like Checkpoint that won the network security war in 1995 with earnings of around $900 Million! One single network security vendor is 6 times bigger than the entire software security space?!? Complete UTTER Madness!</div><br /><div>This is the stupefying, stultifying effects of budget cruft, where the decisions made in <a href="http://1raindrop.typepad.com/1_raindrop/2007/10/network-securit.html">The People&#39;s Republic of Information Security</a> have no bearing on reality of threats or even a business case.</div><br /><div>Let&#39;s look at networks. Obviously Cisco is the biggest, they earned $39.5 Billion last year. Pretty stellar. So spending $900 Million (Checkpoint) to defined $39.5 Billion seems like a pretty good deal.</div><br /><div>Except, let&#39;s compare software security spending - last year Microsoft earned $60 Billion, SAP $16 billion, and Oracle $22 Billion. So that is about $98 Billion and you are going to &quot;defend&quot; that with allocating $150 Million worth of software security tools?</div><br />

</div><table border="1">
<tbody><tr>
<td>
</td>
<td><span style="background-color: #d0d0d0; font-family: &#39;Trebuchet MS&#39;; ">
Network
</span></td>
<td><span style="background-color: #d0d0d0; font-family: &#39;Trebuchet MS&#39;; ">
Software
</span></td>
</tr>
<tr>
<td>
Asset Value
</td>
<td>
$39.5 billion
</td>
<td>
$98 billion
</td>
</tr>
<tr>
<td>
Security Investment
</td>
<td>
$900 Million
</td>
<td>
$150 Million
</td>
</tr>
<tr>
<td>
Security Investment <br />&#160;as a percentage of asset value
</td>
<td>
2.28%
</td>
<td>
0.15%
</td></tr></tbody></table>

<br /><div>This table greatly disturbs me. From a prioritization standpoint The People&#39;s Republic of Information Security is misaligned by orders of magnitude. Next time you read about a data breach, or see an auditor&#39;s report with thousands of findings you won&#39;t have to wonder how it happened. It happened because Information Security doesn&#39;t have its eye on the ball.</div><br /><div>Consider that software security tools could grow 50% a year for five years and still be half of where Checkpoint is today!</div><br />I see the outcomes of backwards looking, crufty decisions by Information Security every day - one or two software security sherpas heading out to work with thousands of developers, meanwhile the network security people sit around and read the newspaper and go home every day at 5.</div><br /><div>The optimistic way of looking at all this data is that there is major room for growth for software security, if you take Checkpoint as a target, then the software security space should evolve to around 2% of the software space meaning that it should evolve into a $2 billion space <span style="font-style: italic;">around fifteen times larger</span> than it is today. Unprotected assets will either be protected or will cease to be assets, VCs get your check books ready.</div>]]></content:encoded>
      <pubDate>Mon, 25 Aug 2008 09:18:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/software">software</category>
      <category domain="http://securityratty.com/tag/software security market">software security market</category>
      <category domain="http://securityratty.com/tag/software security sectors">software security sectors</category>
      <category domain="http://securityratty.com/tag/space">space</category>
      <category domain="http://securityratty.com/tag/tools space">tools space</category>
      <category domain="http://securityratty.com/tag/compare software security">compare software security</category>
      <category domain="http://securityratty.com/tag/software security sherpas">software security sherpas</category>
      <category domain="http://securityratty.com/tag/software security space">software security space</category>
      <category domain="http://securityratty.com/tag/software security">software security</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/08/software-security-market.html">Software Security Market</source>
    </item>
    <item>
      <title><![CDATA[Creepy Customer Profiling via Facial Recognition]]></title>
      <link>http://securityratty.com/article/dfdb490391ea01b54e8449583b7ebb5b</link>
      <guid>http://securityratty.com/article/dfdb490391ea01b54e8449583b7ebb5b</guid>
      <description><![CDATA[Usually, shopping off-line is usually more ad-free than shopping online. But this is changing, with ads coming in strange places like video screens at Gas Stations, Albertsons, and so on. Googles been...]]></description>
      <content:encoded><![CDATA[<p>Usually, shopping off-line is usually more ad-free than shopping online. But this is changing, with ads coming in strange places like video screens at Gas Stations, Albertson&#8217;s, and so on. Google&#8217;s been using content targeted at users for some time, and now this is coming to offline ads too. Some unlikely retailers like Dunkin Donuts are installing facial recognition systems that change the ads shown, depending whether the viewer is male or female, and in what age range.</p>
<div id="main">
<div id="content">
<div class="post post-permalink">
<div class="entry">
<blockquote><p>The <em>Wall Street Journal</em> says that Dunkin&#8217; Donuts is experimenting with video screens that use facial recognition technology to figure out your age and gender. The screens then display ads targeted specifically to you.</p>
<p>Creepy!</p>
<p>Dunkin&#8217; Donuts is also tailoring the cash register ads to your specific purchase. If you buy a breakfast sandwich, you can expect an ad prompting you to return &#8220;for a coffee break in the afternoon&#8221; to &#8220;try an oven-toasted pizza.&#8221; The system is already in place at two Buffalo, NY locations.</p></blockquote>
<p>Read the<a rel="nofollow" target="_blank" href="http://consumerist.com/5040049/facial-recognition-technology-%252B-video-screens--creepy-dunkin-donuts-ads"> full article here</a>.</div>
</div>
</div>
</div>]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 05:41:08 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ads">ads</category>
      <category domain="http://securityratty.com/tag/cash register ads">cash register ads</category>
      <category domain="http://securityratty.com/tag/display ads">display ads</category>
      <category domain="http://securityratty.com/tag/dunkin donuts">dunkin donuts</category>
      <category domain="http://securityratty.com/tag/screens">screens</category>
      <category domain="http://securityratty.com/tag/video screens">video screens</category>
      <category domain="http://securityratty.com/tag/ads shown">ads shown</category>
      <category domain="http://securityratty.com/tag/age range">age range</category>
      <category domain="http://securityratty.com/tag/wall street journal">wall street journal</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/372009137/">Creepy Customer Profiling via Facial Recognition</source>
    </item>
    <item>
      <title><![CDATA[EPTS: Proposed Event Processing Definitions, September 20, 2006]]></title>
      <link>http://securityratty.com/article/c90d53785950324b36b55747a92766da</link>
      <guid>http://securityratty.com/article/c90d53785950324b36b55747a92766da</guid>
      <description><![CDATA[For interested readers, here are the event processing definitions we provided to the (future) EPTS working group on September 20, 2006, coordinated (edited)by David Luckham and Roy Schulte
adaptive...]]></description>
      <content:encoded><![CDATA[<p>For interested readers, here are the <a href="http://www.thecepblog.com/pdf/EVENT.PROCESSING.DRAFT.GLOSSARY.V4.SEPT.pdf" target="_blank">event processing definitions</a> we provided to the (future) EPTS working group on September 20, 2006, <a href="http://complexevents.com/?p=195" target="_blank">coordinated (edited) by David Luckham and Roy Schulte</a>;</p>
<p><strong>adaptive process management</strong> (n.) an element of resource and business process management, adaptive search and event processing. Sometimes referred to as “Level 4” event processing or process refinement.</p>
<p><strong>application concept</strong> (n.) a definition of a set of properties that represent the data fields of an application entity. An application concept can describe relationships among themselves. For example, an order concept might have a parent/child relationship with an item concept. A department concept might be related to a purchase requisition concept based on the shared property, department_id. Application concepts can include an application state model.</p>
<p><strong>application state modeler</strong> (n.) a UML-compliant application that allows you to model the life cycle of a concept instance — that is, for each instance of a given concept, you can define which states it will pass through and how it will transition from state to state. States have entry actions, exit actions, and conditions, providing precision control over the behavior of an event processing agent. Transitions between states also may have rules. Multiple types of states and transitions maximize the versatility and power of the application state modeler.</p>
<p><strong>derived event</strong> (n.) an event that is created as a result of processing one or more other events.</p>
<p><strong>complex event</strong> (n.) an event that is a situation-entity abstraction of two or more simple, derived or other complex events.</p>
<p><strong>complex event processing</strong> (n.) CEP is a technology for extracting information from message-based systems. CEP is primarily an event processing concept that deals with the task of processing multiple events from an event cloud with the goal of identifying the meaningful events within the event cloud. CEP employs techniques such as detection of complex patterns of many events, event correlation and abstraction, event hierarchies, and relationships between events such as causality, membership, and timing, and event-driven processes.</p>
<p><strong>event</strong> (n.) a instance of an event definition. It is an immutable object that represents a business activity that happened at a single point in time. Just as one cannot change the fact that a given activity occurred, one cannot change an event — events are immutable.</p>
<p><strong>event aggregation</strong> (n.) the aggregation of simple, derived or complex events into higher levels of event abstractions.</p>
<p><strong>event definition</strong> (n.) a set of properties related to a given activity that represents an important or interesting change of state in a human, system or computational activity. An event definition includes event properties such as event priority, event time to live (TTL), and a description of the payload, which is comprehensive information related to the activity that occurred. Events expire when the TTL has elapsed, unless the event processing agent has instructions to consume them prior to that time.</p>
<p><strong>event channel</strong> (n.) a communications channel in which events are transmitted from event source to event receivers, typically received as electronic messages. Each channel can have multiple destination and. events can be configured to transmit to a default destination. JMS is an example of an event channel.</p>
<p><strong>event cloud</strong> (n.) a partially ordered set of events (poset), either bounded or unbounded, where the partial orderings are imposed by the causal, timing and other relationships between the events. Typically an event cloud is created by the events produced by one or more distributed systems. An event cloud may contain many event types, event streams and event channels. The difference between a cloud and a stream is that there is no event relationship that totally orders the events in a cloud.</p>
<p><strong>event-driven</strong> (n.) the behavior of a human, system or computational entity whose execution or actuation is in response to events, typically received as electronic messages.</p>
<p><strong>event-driven architecture</strong> (n.) an architectural style for distributed computing applications in which some of the components are event-driven and communicate by means of events.</p>
<p><strong>event processing</strong> (n.) computing that performs operations on events, including modifying, creating and destroying events.</p>
<p><strong>event-object</strong> (n.) an software object that represents an event, generally for the purpose of computer processing, that exhibits both encapsulation, inheritance and polymorphism.</p>
<p><strong>event prediction</strong> (n.) computational activity where the impact of events, complex events, and situations caused by events identified, including both opportunity or threat. Sometimes referred to as “Level 2” event processing, impact assessment or predictive analytics.</p>
<p><strong>event pre-processing</strong> (n.) computational activity where events are cleansed or normalized to produce semantically understandable data. Sometimes referred to as “Level 0” event processing.</p>
<p><strong>event processing</strong> (n.) computational activities on events dealing with the association, correlation, and combination of event data and information from single and multiple event sources to achieve refined identity and situation estimates for observed event objects, and to achieve complete and timely assessments of opportunities, threats, and their significance. Event processing is characterized by continuous refinements of event estimates and assessments and by evaluation of the need for additional sources, or modification of the process itself, to achieve improved results.</p>
<p><strong>event processing agent</strong> (n.) an EPA is a computational entity that performs event processing.</p>
<p><strong>event processing network</strong> (n.) a set of event processing agents and a set of event channels connecting them.</p>
<p><strong>event properties</strong> (n.) data representation of an event, typically by name-value pairs of type string, integer, real, boolean or a complex data type.</p>
<p><strong>event refinement</strong> (n.) filter, identify and track events &amp; make initial processing decisions based on association, correlation and state estimation. Sometimes referred to as “Level 1” event, or event-object, track and trace.</p>
<p><strong>event stream</strong> (n.) a time-ordered sequence of events. An event stream may be bounded by a certain time interval or other contextual dimension (content, space, source, certainty), or be open ended and unbounded.</p>
<p><strong>event stream processing</strong> (n.) a time-ordered sequence of events. An event stream may be bounded by a certain time interval or other contextual dimension (content, space, source, certainty), or be open ended and unbounded.</p>
<p><strong>rule</strong> (n.) defines what triggers unusual, suspicious, problematic, or advantageous activity within an event processing agent and what the EPA does when it discovers these types of activities. Rules execute actions based on certain conditions on events, instances, or a combination of both. A rule includes a group of condition-rule statements and action-rule statements. The condition statements instruct the EPA what to look for in events, and action statements instruct the EPA how to respond when conditions are met. If all the conditions in a rule are satisfied by events or instances or both, the EPA fires the actions. The action might be to execute tasks, create an event instance, modify property values in an event instance, create and send an event, or something else.</p>
<p><strong>rules engine</strong> (n.) a type of event processing agent that uses a declarative programming model to process events. Formally described as &#8220;an abstract structure that describes a formal language precisely, i.e., a set of rules that mathematically delineates a (usually infinite) set of finite-length strings over a (usually finite) alphabet“. Informally, it can be any system that uses rules, in any form, that can be applied to data to produce outcomes.</p>
<p><strong>rule language</strong> (n.) is an artificial language that is used to control the behavior of an event processing agent. Rules languages, like human languages, have syntactic and semantic rules to define meaning.</p>
<p><strong>situation refinement</strong> (n.) identify situations, or complex events, based on event clustering, event-event relationships and relationship analysis and context. Sometimes referred to as “Level 2” event processing.</p>
<p><strong>simple event</strong> (n.) an event that is not an abstraction or composition of other events.</p>
<p><strong>virtual event</strong> (n.) an event that is imagined, modeled or simulated.</p>
<hr />Note:  The Emerging Technologies Engineering Team at <a href="http://www.tibco.com" target="_blank">TIBCO Software </a>significantly contributed to these event processing terms and definitions.</p>
]]></content:encoded>
      <pubDate>Thu, 21 Aug 2008 01:47:11 +0000</pubDate>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/event-object">event-object</category>
      <category domain="http://securityratty.com/tag/business process management">business process management</category>
      <category domain="http://securityratty.com/tag/process">process</category>
      <category domain="http://securityratty.com/tag/event correlation">event correlation</category>
      <category domain="http://securityratty.com/tag/process refinement">process refinement</category>
      <category domain="http://securityratty.com/tag/simple">simple</category>
      <category domain="http://securityratty.com/tag/simple event">simple event</category>
      <category domain="http://securityratty.com/tag/process events">process events</category>
      <source url="http://www.thecepblog.com/2008/08/21/epts-proposed-event-processing-definitions-september-20-2006/">EPTS: Proposed Event Processing Definitions, September 20, 2006</source>
    </item>
    <item>
      <title><![CDATA[A Diverse Portfolio of Fake Security Software - Part Two]]></title>
      <link>http://securityratty.com/article/9d3454e7551fca2a11e4a5ee55704677</link>
      <guid>http://securityratty.com/article/9d3454e7551fca2a11e4a5ee55704677</guid>
      <description><![CDATA[With scammers continuing to introduce new typosquatted domains promoting well known brands of rogue security software that is most often found at the far end of a malware campaign, exposing yet...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SKphU3YsSbI/AAAAAAAACDk/28wApKSrbYA/s1600-h/fake_security_software.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="76" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SKphU3YsSbI/AAAAAAAACDk/bPxU6HdrxA8/s200-R/fake_security_software.JPG" width="200" /></a>With scammers continuing to introduce new typosquatted domains promoting well known brands of rogue security software that is most often found at the far end of a malware campaign, exposing yet another diverse portfolio of last week's introduced domains is what follows.<br />
<br />
Naturally, in between taking advantage of the usual hosting services, most of the domains remain parked at the same IPs, this centralization makes it easier to locate them all, then having to go through several misconfigured malicious doorways that will anyway expose the portfolio.<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SKpjp46fg4I/AAAAAAAACDs/hW-zlDsLSIg/s1600-h/antivirus_pro_2008.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="160" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SKpjp46fg4I/AAAAAAAACDs/mjJJ2yUIcsE/s200-R/antivirus_pro_2008.png" width="200" /></a><b>antivirus2008t-pro .com</b> - (91.203.92.64; 78.157.142.7)<br />
<b>antivirus2008pro-download1 .com<br />
antivirus2008pro-download2 .com<br />
scanner.antivir64 .com<br />
antivirus2008t-pro .com<br />
antivirus-2008y-pro .com</b><br />
<br />
<b>&nbsp;systemscanner2009 .com</b> - (89.18.189.44; 208.88.53.114)<br />
<b>xpdownloadserver .com&nbsp;&nbsp;&nbsp; <br />
global-advers .com<br />
xpantivirus .com&nbsp;&nbsp;&nbsp; <br />
updatesantivirus .com<br />
windows-scannernv .com</b><br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SKpkn-kX73I/AAAAAAAACD0/GOsFiicPQXs/s1600-h/xp_anti_virus.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="160" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SKpkn-kX73I/AAAAAAAACD0/AekOVq9ibn0/s200-R/xp_anti_virus.png" width="200" /></a><b>ratemyblog1 .com</b> - 208.88.53.114<br />
<b>windows-scanner2009 .com<br />
systemscanner2009 .com<br />
antivirus-database .com<br />
antivirus2009professional .com<br />
antivirus-2009pro .com<br />
antivirus2009-scanner .com<br />
global-advers .com<br />
drivemedirect .com<br />
windows-scannernv .com</b><br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SKpmSONqTJI/AAAAAAAACEE/4Cukn7sK9ek/s1600-h/fake_IE_7.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="160" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SKpmSONqTJI/AAAAAAAACEE/iHExDhLb0z4/s200-R/fake_IE_7.png" width="200" /></a><b>webscweb-scannerfree .com</b> - (58.65.238.106; 208.88.53.180)<br />
<b>freebmwx3 .com<br />
mytube4 .com<br />
beginner2009 .com<br />
webscweb-scannerfree .com<br />
antivirus2009-software .com<br />
antivirus-database .com<br />
purchase-anti .com</b><br />
<br />
<b><br />
onlinescannerxp .com<br />
virus-onlinescanner .com<br />
spywareonlinescanner .com<br />
xponlinescanner .com<br />
virus-securityscanner .com<br />
virus-securityscanner .com<br />
webscannerfreever .com<br />
blazervips .com<br />
global-advers .com<br />
xpantivirus .com&nbsp;&nbsp;&nbsp; <br />
drivemedirect .com<br />
windows-scannernv .com</b><br />
<br />
<a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SKplujVb0XI/AAAAAAAACD8/laUP6HFKiPc/s1600-h/xp_anti_virus2.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/_wICHhTiQmrA/SKplujVb0XI/AAAAAAAACD8/vH2l1Xo0k0Y/s200-R/xp_anti_virus2.png" /></a><b>mytube4 .com</b> - 58.65.238.106<br />
<b>beginner2009 .com<br />
webscweb-scannerfree .com<br />
securityscannerfree .com<br />
xpcleaner-online .com<br />
streamhotvideo .com<br />
xpcleanerpro .com<br />
onlinescannerxp .com<br />
online-xpcleaner .com<br />
antispyguard-scanner .com<br />
virus-onlinescanner .com<br />
microsoft.browsersecuritycenter .com<br />
fastupdateserver .com<br />
blazervips .com<br />
xpantivirus .com<br />
drivemedirect .com<br />
fastwebway .com<br />
xpantivirussecurity .com<br />
wordpress.firm .in<br />
megacodec .biz<br />
mcprivate .biz</b><br />
<br />
<b>internet-defense2009 .com </b>- 84.16.252.73<b><br />
myfreespace3 .com<br />
greatvideo3 .com<br />
internet-defense2009 .com<br />
windows-defense .com<br />
3gigabytes .com<br />
teledisons .com<br />
updatesantivirus .com<br />
update-direct .com<br />
xp-protectsoft .com</b><br />
<br />
<b>top-pc-scanner .com - </b>(91.203.92.50; 92.62.101.43)<b><br />
nortonsoft .com - </b>(91.186.11.5)<b><br />
powerantivirus-2009 .com - (</b>91.208.0.233)<b><br />
powerantivirus2009 .com - </b>(91.208.0.233)<b><br />
pwrantivirus .com - </b>(91.208.0.231)<b><br />
xp-guard .com - </b>(92.62.101.35)<b><br />
xpertantivirus .com - </b>(91.208.0.230)<b><br />
internetscanner2009 .com - </b>(89.149.229.168)<br />
<br />
Where's the business model here? Where it's always been, upon installation of the rogue security software, the malware campaigner earns up to 40% revenue from the rogue security software's vendor.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/04/localized-fake-security-software.html">Localized Fake Security Software</a><br />
<a href="http://ddanchev.blogspot.com/2007/12/diverse-portfolio-of-fake-security.html">Diverse Portfolio of Fake Security Software</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/got-your-xpshield-up-and-running.html">Got Your XPShield Up and Running?</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/fake-pestpatrol-security-software.html">Fake PestPatrol Security Software</a><br />
<a href="http://ddanchev.blogspot.com/2007/10/rbns-fake-security-software.html">RBN's Fake Security Software</a><br />
<a href="http://http//ddanchev.blogspot.com/2008/07/lazy-summer-days-at-ukrtelegroup-ltds.html">Lazy Summer Days at UkrTeleGroup Ltd</a><br />
<br />
<b></b><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=h33YSK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=h33YSK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=jVrJfK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=jVrJfK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=FyAb7k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=FyAb7k" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=1wEuVk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=1wEuVk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=zeV8HK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=zeV8HK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Xb2U2K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Xb2U2K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=1JfUGk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=1JfUGk" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/368786894" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 21:51:48 +0000</pubDate>
      <category domain="http://securityratty.com/tag/fake security software">fake security software</category>
      <category domain="http://securityratty.com/tag/portfolio">portfolio</category>
      <category domain="http://securityratty.com/tag/diverse portfolio">diverse portfolio</category>
      <category domain="http://securityratty.com/tag/rogue security software">rogue security software</category>
      <category domain="http://securityratty.com/tag/domains">domains</category>
      <category domain="http://securityratty.com/tag/domains remain">domains remain</category>
      <category domain="http://securityratty.com/tag/drivemedirect">drivemedirect</category>
      <category domain="http://securityratty.com/tag/global-advers">global-advers</category>
      <category domain="http://securityratty.com/tag/lazy summer days">lazy summer days</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/368786894/diverse-portfolio-of-fake-security.html">A Diverse Portfolio of Fake Security Software - Part Two</source>
    </item>
    <item>
      <title><![CDATA[Review: Eye-Fi Explore Hits the Mark]]></title>
      <link>http://securityratty.com/article/33c4299be29dce33f9010e5f6b251d93</link>
      <guid>http://securityratty.com/article/33c4299be29dce33f9010e5f6b251d93</guid>
      <description><![CDATA[After spending two weeks with the $130 Eye-Fi Explore Wi-Fi memory card, I'm a fan: The Eye-Fi Explore was introduced in July by the eponymous firm to support geotagging - embedding latitude and...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.eye.fi/products/explore/"><strong>After spending two weeks with the $130 Eye-Fi Explore Wi-Fi memory card, I'm a fan:</strong></a> The Eye-Fi Explore was introduced in July by the eponymous firm to support geotagging - embedding latitude and longitude into photo metadata - and easier uploading of images. The Eye-Fi Explore is a Secure Digital (SD) card with 2 GB of storage, a tiny computer, and a Wi-Fi radio. The Explore uses Skyhook Wireless's Wi-Fi positioning data combined with Wayport's network of 10,000 hotspots, mostly McDonald's, along with revised firmware and software that dramatically improves the experience of uploading photos.</p>

<p>The company shuffled its products into three versions several weeks ago: Eye-Fi Home ($80), which uploads only to a specific computer over a local network; Eye-Fi Share ($100), a rebranded version identical to its first offering last year, which can upload to photo-sharing services or a computer or both; and the Explore. (You can purchase <a href="http://www.amazon.com/gp/redirect.html?ie=UTF8&location=http%3A%2F%2Fwww.amazon.com%2FEye-Fi-Explore-Wireless-Digital-EYE-FI-2EX%2Fdp%2FB001ACXHXE&tag=searchbyisbn&linkCode=ur2&camp=1789&creative=9325">the Eye-Fi Explore from Amazon.com</a><img src="http://www.assoc-amazon.com/e/ir?t=searchbyisbn&amp;l=ur2&amp;o=1" width="1" height="1" border="0" alt="" style="border:none !important; margin:0px !important;" />, as well as the other models.)</p>

<p><img src="http://wifinetnews.com//images/2008/eye-fi_cards_sharer_sm.jpg" alt="eye-fi_cards_sharer_sm.jpg" border="0" width="169" height="250" align="right" />I <a href="http://seattletimes.nwsource.com/html/businesstechnology/2008101745_ptgeotag09.html"><strong>reviewed the Explore as a geotagging system</strong></a> for The Seattle Times this last Saturday; I'd <a href="http://seattletimes.nwsource.com/html/businesstechnology/2004005462_pteyefi10.html"><strong>reviewed the original Eye-Fi</strong></a> (now Eye-Fi Share) for them last year as well. You can read that review for my take on geotagging, or skip to the bottom of this review, as well.</p>

<p>The hardware is apparently the same or nearly so, and it works just as well as it did last year. The biggest improvements, however, are a few workflow tweaks that make it far easier to manage and track uploads of pictures without draining your camera's batteries down to zero.<br />
<br clear="all"></p>]]></content:encoded>
      <pubDate>Tue, 12 Aug 2008 08:13:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/eye-fi explore">eye-fi explore</category>
      <category domain="http://securityratty.com/tag/explore">explore</category>
      <category domain="http://securityratty.com/tag/computer">computer</category>
      <category domain="http://securityratty.com/tag/specific computer">specific computer</category>
      <category domain="http://securityratty.com/tag/eye-fi share">eye-fi share</category>
      <category domain="http://securityratty.com/tag/review">review</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/weeks ago">weeks ago</category>
      <category domain="http://securityratty.com/tag/wi-fi radio">wi-fi radio</category>
      <source url="http://wifinetnews.com/archives/008418.html">Review: Eye-Fi Explore Hits the Mark</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Mumbai Blast Leads to Open Network; NullRiver's App Nullified; Copper Substitute]]></title>
      <link>http://securityratty.com/article/321165af2aaf7769bf8ef8224af4125c</link>
      <guid>http://securityratty.com/article/321165af2aaf7769bf8ef8224af4125c</guid>
      <description><![CDATA[Mumbai man's open wireless network used to send bomb claim: An American expatriate, Kenneth Haywood, left his Wi-Fi network open in Mumbai, and police allege it was used to send email claiming...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://www.guardian.co.uk/world/2008/jul/29/india.terrorism"><strong>Mumbai man's open wireless network used to send bomb claim:</strong></a> An American expatriate, Kenneth Haywood, left his Wi-Fi network open in Mumbai, and police allege it was used to send email claiming responsibility for a bomb blast that killed 42 people. The Guardian reports that Haywood says his email account was also hacked. Police say that someone would need to be within two floors of the 15th-floor apartment Haywood and others occupy, but they may be disregarding high-gain antennas. Haywood's installer demanded he not change his network password.</p>

<p><a href="http://www.infoworld.com/article/08/08/04/Apple_resurrects_iPhone_tethering_app_then_kills_it_again_1.html?source=rss&url=http://www.infoworld.com/article/08/08/04/Apple_resurrects_iPhone_tethering_app_then_kills_it_again_1.html"><strong>iPhone tethering application up, down, up, down:</strong></a> The NetShare connection-sharing application from NullRiver has made a couple of appearances on Apple's App Store, the only authorized place from which owners of iPod touch and iPhone devices can purchase software for uncracked equipment. NetShare appears to violate the terms of service for AT&T, although this wouldn't be the case with all carriers worldwide, by bridging 2.5G and 3G network traffic via the Wi-Fi connection on the iPhone. A laptop or desktop needs special configuration to connect to the iPhone, but various reports show it works fine. AT&T offers tethering with other smartphones - but not the iPhone - for typically about $20 more per month, comparable to a national hotspot aggregated subscription.</p>

<p><a href="http://www.usatoday.com/tech/products/2008-07-31-att-tries-to-stay-ahead-of-tech_N.htm?loc=interstitialskip"><strong>Speaking of AT&T, they like WiMax as a wire alternative:</strong></a> AT&T is bullish on WiMax, but the fixed kind used to replace wires in places they have no cable.</p>]]></content:encoded>
      <pubDate>Mon, 04 Aug 2008 05:56:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/haywood">haywood</category>
      <category domain="http://securityratty.com/tag/kenneth haywood">kenneth haywood</category>
      <category domain="http://securityratty.com/tag/iphone">iphone</category>
      <category domain="http://securityratty.com/tag/iphone devices">iphone devices</category>
      <category domain="http://securityratty.com/tag/att">att</category>
      <category domain="http://securityratty.com/tag/15th-floor apartment haywood">15th-floor apartment haywood</category>
      <category domain="http://securityratty.com/tag/att offers">att offers</category>
      <category domain="http://securityratty.com/tag/mumbai">mumbai</category>
      <category domain="http://securityratty.com/tag/police">police</category>
      <source url="http://wifinetnews.com/archives/008409.html">Wee-Fi: Mumbai Blast Leads to Open Network; NullRiver's App Nullified; Copper Substitute</source>
    </item>
    <item>
      <title><![CDATA[The Magical ATM Card and SMS Message in Thailand]]></title>
      <link>http://securityratty.com/article/1ba59a13d2493ca9d5042d5c2f7ceb4e</link>
      <guid>http://securityratty.com/article/1ba59a13d2493ca9d5042d5c2f7ceb4e</guid>
      <description><![CDATA[It was not too long ago that I penned Keyloggers: Why Banks Need Two-Factor Authentication . In that post, I briefly mentioned how a number of banks in Thailand use inexpensive SMS-based two-factor...]]></description>
      <content:encoded><![CDATA[<p>It was not too long ago that I penned <a href="http://www.thecepblog.com/2008/01/14/keyloggers-why-banks-need-two-factor-authentication/">Keyloggers: Why Banks Need Two-Factor Authentication</a>. In that post, I briefly mentioned how a number of banks in Thailand use inexpensive SMS-based two-factor authentication (2FA) with one-time password (OTP) to authenticate transactions.</p>
<p>One of my favorite banks in Thailand is <a href="http://www.kasikornbank.com/portal/site/KBank/?" target="_blank">K-Bank</a>. With K-Bank I can simply walk up to an ATM machine and pay a mobile phone bill, purchase mutual funds, buy insurance, or transact an ever-growing list of services payable at the modern and sleek K-Bank ATM.</p>
<p>For example, tomorrow I fly to Chiang Mai in Northern Thailand and found K-Bank&#8217;s service amazingly better than in the US. For example, I booked my flight as usual (over the phone, but could have used the Internet) and told the reservation agent I was going to pay by ATM. He simply gave me a PayCode and told me I had three hours to go to the ATM and enter the PayCode to perfect my reservation.  I also got the PayCode via SMS.  This gave me the time I needed to make sure I had <a href="http://www.r24.org/whatsonchiangmai.com/chiangmai/fernparadise/pictures/" target="_blank">booked the perfect boutique hotel</a> in Chiang Mai, the <strong><a href="http://www.r24.org/whatsonchiangmai.com/chiangmai/fernparadise/review/" target="_blank">Fern Paradise</a>.</strong></p>
<p>Then, I went out into the beautiful Thai weather and completely my airplane reservation at the ATM machine; which also printed out a receipt with my flight details and reservation number.</p>
<p>It sometimes amazes me how much further advanced some services are in Thailand compared to the US. To me, it feels more secure not to use an on-line payment center or give out my credit card details over the phone. I can simply book a ticket, take a PayCode, and complete the transaction at a nice modern, shiny, K-Bank ATM machine.</p>
<p>Who knows, maybe soon I can select the perfect window seat at the ATM and the receipt will act as my boarding pass!</p>
]]></content:encoded>
      <pubDate>Sun, 03 Aug 2008 09:30:52 +0000</pubDate>
      <category domain="http://securityratty.com/tag/atm">atm</category>
      <category domain="http://securityratty.com/tag/k-bank atm machine">k-bank atm machine</category>
      <category domain="http://securityratty.com/tag/sleek k-bank atm">sleek k-bank atm</category>
      <category domain="http://securityratty.com/tag/k-bank">k-bank</category>
      <category domain="http://securityratty.com/tag/thailand">thailand</category>
      <category domain="http://securityratty.com/tag/atm machine">atm machine</category>
      <category domain="http://securityratty.com/tag/banks">banks</category>
      <category domain="http://securityratty.com/tag/perfect window seat">perfect window seat</category>
      <category domain="http://securityratty.com/tag/perfect">perfect</category>
      <source url="http://www.thecepblog.com/2008/08/03/the-magical-atm-card-and-sms-message-in-thailand/">The Magical ATM Card and SMS Message in Thailand</source>
    </item>
    <item>
      <title><![CDATA[CISA and CISSP Preparation]]></title>
      <link>http://securityratty.com/article/4990229406d5e949151cc28d8d8799b9</link>
      <guid>http://securityratty.com/article/4990229406d5e949151cc28d8d8799b9</guid>
      <description><![CDATA[Recently I have received a number of questions seeking preparation tips and insights for the CISA and CISSP certifications. I hold both of these certifications, and passed them both on the first...]]></description>
      <content:encoded><![CDATA[<p>Recently I have received a number of questions seeking preparation tips and insights for the CISA and CISSP certifications. I hold both of these certifications, and passed them both on the first attempt using very different preparation approaches. I took the CISA first, and based on a few lessons learned, I radically changed my preparation plan for the CISSP.<br />
<br />
FYI, the official preparation information, qualification requirements, exam requirements, etc. can be found at:</p>
<ul>
<li>Certified Information Systems Auditor (CISA) : <a href="http://www.isaca.org/cisa/" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.isaca.org/cisa/');" target="_blank">http://www.isaca.org/cisa/</a></li>
<li>Certified Information Systems Security Professional : <a href="https://www.isc2.org/cissp" onclick="javascript:pageTracker._trackPageview('/outbound/article/https://www.isc2.org/cissp');">https://www.isc2.org/cissp</a></li>
</ul>
<p><strong>Are You Ready ?</strong><br />
A few basic questions to ask yourself to gauge how ready you are:</p>
<ul>
<li>Do I meet the spirit, and not just the letter, of the experience requirements ?</li>
<li>Has there been sufficient diversity in my experience ?</li>
</ul>
<p></p>
<div>Both of these exams cover a very broad spectrum of subjects. It is my personal belief that the experience requirements exist as an aid to whittle test takers down to candidates who have the professional experiences required to be successful, and to discourage people from taking the exams before they are ready. If you truly meet the background requirements, then you should have had some contact with many of the core topic areas for the exam.</div>
<p></p>
<div>If you are looking at the core content of the examination, and do not believe that you really have the breadth of exposure to be able to describe and discuss each domain at a high level, then you may be better served by delaying the exam in favor of working with your management to gain broader professional experience.</div>
<p><strong>Five Step Approach to CISA or CISSP Exam Preparation</strong></p>
<ol>
<li>Perform an initial benchmark and assessment of your readiness</li>
<li>Read a &#8220;survey&#8221; level preparation guide cover to cover</li>
<li>Perform a secondary benchmark, and compare your readiness</li>
<li>Review official, or &#8220;deep dive&#8221;, preparation materials on areas identified as your weaknesses</li>
<li>Re-benchmark, and repeat targeted reviews until ready</li>
</ol>
<p></p>
<div>For the first certification that I prepared for, I did not perform the first three steps outlined above. I went directly to the official source materials and began trying to review them cover to cover. I passed the exam, but I also spent a lot of time &amp; energy reviewing things that I already knew &#8220;well enough&#8221;, and was burned out when reviewing the areas which could have been richer learning opportunities. No matter what your professional background, no one knows-it-all or does-it-all, so there is always  an opportunity to learn new things while you are preparing for the certification exam. The goal of this five step approach is to focus your time where you have the greatest learning opportunities. Hopefully this focuses your time and energy in the most rewarding way.</div>
<p></p>
<div><strong>Performing the Benchmarks</strong></div>
<div>For the Benchmarks, I like to complete a timed half-length or full-length examination.</div>
<p></p>
<div>It is my feeling that a half-length exam is long enough that fatigue, maintaining focus, and pace are all stressed, as they will be on examination day. This of course requires access to a large set of test questions or sample tests, preferably with explanations of incorrect answers. In addition to commercial third-party test preparation tools, there are good (and free) test preparation quizzes available from <a href="http://www.cccure.org/" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.cccure.org/');">www.cccure.org</a>.</div>
<p></p>
<div><strong>Survey Materials</strong></div>
<div>I find the &#8220;Exam Cram&#8221; series to be very useful survey literature. I purchase books from this series when I want a high-level and quick handling of an entire subject matter area. As a result, I own survey books from the series in topic areas which I have no intention of pursuing certification for. Obviously the books I recommend for these certifications are:</div>
<p><a href="http://www.amazon.com/gp/product/078973446X?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=078973446X" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.amazon.com/gp/product/078973446X?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=078973446X');"><img src="http://artofinfosec.com/wp-content/uploads/cissp_exam_cram.jpg" border="0" alt="" /></a><img style="border:none !important; margin:0px !important;" src="http://www.assoc-amazon.com/e/ir?t=artofinfosecu-20&amp;l=as2&amp;o=1&amp;a=078973446X" border="0" alt="" width="1" height="1" /> <a href="http://www.amazon.com/gp/product/0789732726?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=0789732726" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.amazon.com/gp/product/0789732726?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=0789732726');"><img src="http://artofinfosec.com/wp-content/uploads/cisa_exam_cram.jpg" border="0" alt="" /></a><img style="border:none !important; margin:0px !important;" src="http://www.assoc-amazon.com/e/ir?t=artofinfosecu-20&amp;l=as2&amp;o=1&amp;a=0789732726" border="0" alt="" width="1" height="1" /></p>
<div><strong>Deep Dive Materials</strong></div>
<div>There are exam preparation materials available from a variety of sources that fit the bill in this area. What we are looking for are books that contain solid coverage of the areas where benchmarking has shown the most significant need for improvement. In addition to the materials from (ISC)2 and ISACA that I list below, consult your local library - often they will have books that fit the bill. (And, of course, consider arranging a donation of good materials if they do not.)</div>
<p><a href="http://www.amazon.com/gp/product/0849382319?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=0849382319" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.amazon.com/gp/product/0849382319?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=0849382319');"><img src="http://artofinfosec.com/wp-content/uploads/official_cissp.jpg" border="0" alt="" /></a><img style="border:none !important; margin:0px !important;" src="http://www.assoc-amazon.com/e/ir?t=artofinfosecu-20&amp;l=as2&amp;o=1&amp;a=0849382319" border="0" alt="" width="1" height="1" /> <a href="http://www.amazon.com/gp/product/1933284935?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=1933284935" onclick="javascript:pageTracker._trackPageview('/outbound/article/http://www.amazon.com/gp/product/1933284935?ie=UTF8&amp;tag=artofinfosecu-20&amp;linkCode=as2&amp;camp=1789&amp;creative=9325&amp;creativeASIN=1933284935');"><img src="http://artofinfosec.com/wp-content/uploads/cisa_review_2008.jpg" border="0" alt="" /></a><img style="border:none !important; margin:0px !important;" src="http://www.assoc-amazon.com/e/ir?t=artofinfosecu-20&amp;l=as2&amp;o=1&amp;a=1933284935" border="0" alt="" width="1" height="1" /></p>
<div><strong>Final Thoughts</strong></div>
<div>Good luck on your journey toward Information Security or Audit certification. One word of caution: Make sure that you have realistic expectations about what actually being certified will mean. Although I do think being certified helps a person establish credibility more quickly, and is helpful when searching for new employment, often people are underwhelmed by the &#8220;Congratulations, that&#8217;s nice&#8221; from their current employer. If your expectation is that a big raise, bonus, promotion, etc. is hinging on your being certified, then I would strongly encourage you to reality-check that with peers in your organization.</div>
<p></p>
<div>Cheers, Erik</div>
<p></p>
<p><a href="http://artofinfosec.com/60/cisa-and-cissp-preparation/" >CISA and CISSP Preparation</a></p>
<img src="http://feeds.feedburner.com/~r/artofinfosec/~4/351541992" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 31 Jul 2008 09:14:07 +0000</pubDate>
      <category domain="http://securityratty.com/tag/exam">exam</category>
      <category domain="http://securityratty.com/tag/exam requirements">exam requirements</category>
      <category domain="http://securityratty.com/tag/cissp exam preparation">cissp exam preparation</category>
      <category domain="http://securityratty.com/tag/half-length exam">half-length exam</category>
      <category domain="http://securityratty.com/tag/exam cram series">exam cram series</category>
      <category domain="http://securityratty.com/tag/certification exam">certification exam</category>
      <category domain="http://securityratty.com/tag/exam preparation materials">exam preparation materials</category>
      <category domain="http://securityratty.com/tag/preparation materials">preparation materials</category>
      <category domain="http://securityratty.com/tag/cissp">cissp</category>
      <source url="http://feeds.feedburner.com/~r/artofinfosec/~3/351541992/">CISA and CISSP Preparation</source>
    </item>
    <item>
      <title><![CDATA[Meru Networks erects a "cone of silence"]]></title>
      <link>http://securityratty.com/article/2b9b51efaeb059be63332e84e9b51781</link>
      <guid>http://securityratty.com/article/2b9b51efaeb059be63332e84e9b51781</guid>
      <description><![CDATA[Who doesn't remember the cone of silence from the original Get Smart TV series. Whenever Max and the Chief had something important to discuss they would lower the cone of silence so that no one else...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p><a onclick="window.open(this.href, '_blank', 'width=376,height=261,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false" href="http://www.stillsecureafteralltheseyears.com/.shared/image.html?/photos/uncategorized/2008/07/30/coneofsilence.jpg"><img title="Coneofsilence" height="173" alt="Coneofsilence" src="http://www.stillsecureafteralltheseyears.com/ashimmy/images/2008/07/30/coneofsilence.jpg" width="249" border="0" style="FLOAT: right; MARGIN: 0px 0px 5px 5px" /></a> Who doesn't remember <a class="zem_slink" title="Cone of Silence" href="http://en.wikipedia.org/wiki/Cone_of_Silence" rel="wikipedia">the cone of silence</a> from the original Get Smart TV series.&nbsp; Whenever Max and the Chief had something important to discuss they would lower the cone of silence so that no one else could hear them or eavesdrop. So it is only fitting with the recent release of the <a class="zem_slink" title="Get Smart (film)" href="http://getsmartmovie.warnerbros.com/" rel="homepage">Get Smart movie</a>, <a href="http://news.zdnet.co.uk/communications/0,1000000085,39453788,00.htm">Meru Networks has released a wireless cone of silence</a>. </p>

<p>Meru is one of few stand alone wireless companies still hanging on out there.&nbsp; So they need to be innovative to survive.&nbsp; Their latest product, RF Barrier puts antennas around a physical plant to dampen and make it impossible to to listen in on wireless data exchanges.&nbsp; They claim this is a first of its kind.&nbsp; Thinking about it though, I don't see a big barrier to other companies having similar technology. I don't think you have to be a genius to broadcast traffic that puts out &quot;noise&quot; to hide legit traffic. I think the real special sauce is that this works in conjunction with Meru's other security products like wireless firewalls and secure access points.</p>

<p>With Motorola's recent purchase of AirDefense is having wireless IPS soon going to be table stakes in the wireless provider game?&nbsp; I think it is and while Meru's RF barrier is a nice story, they are going to need to have some sort of IDS/IPS in their product line to keep up.</p>

<fieldset class="zemanta-related"><legend class="zemanta-related-title">Related articles by Zemanta</legend><ul class="zemanta-article-ul"><li class="zemanta-article-ul-li"><a href="http://www.itweek.co.uk/itweek/news/2222765/motorola-acquire-airdefense">Motorola to acquire AirDefense</a></li>

<li class="zemanta-article-ul-li"><a href="http://www.itweek.co.uk/itweek/news/2222643/meru-locks-car-park-hackers">Meru locks out car park hackers</a></li></ul></fieldset> <div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/5a77977d-6e3b-40f2-b9f2-737ba115b05b/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_e.png?x-id=5a77977d-6e3b-40f2-b9f2-737ba115b05b" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none" /></a></div></div>
]]></content:encoded>
      <pubDate>Wed, 30 Jul 2008 04:05:48 +0000</pubDate>
      <category domain="http://securityratty.com/tag/meru">meru</category>
      <category domain="http://securityratty.com/tag/meru networks">meru networks</category>
      <category domain="http://securityratty.com/tag/cone">cone</category>
      <category domain="http://securityratty.com/tag/silence">silence</category>
      <category domain="http://securityratty.com/tag/meru locks">meru locks</category>
      <category domain="http://securityratty.com/tag/wireless cone">wireless cone</category>
      <category domain="http://securityratty.com/tag/product line">product line</category>
      <category domain="http://securityratty.com/tag/hide legit traffic">hide legit traffic</category>
      <category domain="http://securityratty.com/tag/wireless provider game">wireless provider game</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/07/meru-networks-e.html">Meru Networks erects a "cone of silence"</source>
    </item>
  </channel>
</rss>
