<![CDATA[[SecurityRatty] tag: tags]]> http://securityratty.com/tag/tags Mon, 13 Oct 2008 07:11:00 +0000 iRatty Engine http://blogs.law.harvard.edu/tech/rss <![CDATA[CSI SIEM Summit Slides and Notes]]> http://securityratty.com/article/2b72dfad65c1f793fb21be157bd6733d http://securityratty.com/article/2b72dfad65c1f793fb21be157bd6733d "SIEM Summit" at CSI 35th in DC. Here are my slides from the event; feel free to pick on them :-)


SIEM: Is It What Is SIEMs? Security Information and Event Management Summit at CSI 35th Conference
View SlideShare presentation or Upload your own. (tags: security siem)
About me: http://www.chuvakin.org
]]> Mon, 24 Nov 2008 11:45:00 +0000 siem siem summit csi 35th csi 35th conference event management summit event security siem view slideshare presentation security information CSI SIEM Summit Slides and Notes <![CDATA[SIRV5 Vulnerability Trends Webcast - 2 of 2 - Microsoft Trends]]> http://securityratty.com/article/5b16ce00809f7868f89aa7649d324959 http://securityratty.com/article/5b16ce00809f7868f89aa7649d324959 With the recent release of v5 of the Security Intelligence Report, I decided to produce a couple of webcast videos where I present my findings to you directly in a brief presentation. In this second one, I go over the vulnerability disclosure trends for vulnerabilities affecting Microsoft products.


1H08 Vulnerability Trends - Part 2 - Microsoft

To see all of my videos on http://edge.technet.com, click here (http://edge.technet.com/Tags/SecurityGuy/).

Best regards, Jeff

]]> Tue, 18 Nov 2008 13:34:00 +0000 microsoft webcast videos vulnerability disclosure trends videos microsoft products 1h08 vulnerability trends security intelligence report recent release edge SIRV5 Vulnerability Trends Webcast - 2 of 2 - Microsoft Trends <![CDATA[Monthly Blog Round-Up October 2008]]> http://securityratty.com/article/425e8bb2014656857a1c215075620790 http://securityratty.com/article/425e8bb2014656857a1c215075620790 As we all know, blogs are a bit "stateless" and a lot of good content gets lost since many people, sadly, only pay attention to what they see today. These monthly round-ups is an attempt to remind people of useful content from the past month!

So, here is my next monthly "Security Warrior" blog round-up of top 5 popular posts and topics.

  1. OF COURSE, the news of my “transition” is the item #1, by far. “Change!!!” and “Qualys” posts rule the list.
  2. Last month I posted a bunch of my presentations on logs, security, etc on the blog.  “Presentation from GOVCERT.NL 2008: Log Forensics” takes one of the tops spots; and so do “Presentation on Application Logging, Done Wrong or Very Wrong” and “Presentation on Optimizing Your Logging for Insider Attack Tracking.”  BTW, all the presentations are here.
  3. Shockingly, AGAIN this month, the "Top 11 Reasons to Secure and Protect Your Logs" came up as #1 most popular post (maybe driven by my poll).  BTW, see my other logging polls and my other “top 11” lists.
  4. SIEM bashing reached a new high (eh…“low”? :-)), now that Richard is helping too;  my “11 Signs That Your SIEM Is A Dog or "Raffy, You Killed SIM!" is on the top list. It is both humorous and sadly true (and backed up by other sources and here.)
  5. Somewhat predictably, PCI compliance is obviously still all the rage: MUST-DO Logging for PCI? post was again propelled to a place in my monthly Top5 list.

See you in November.

Possibly related posts / past monthly popular blog round-ups:

 

Technorati Tags: ,,,

About me: http://www.chuvakin.org
]]> Mon, 10 Nov 2008 13:35:00 +0000 monthly blog round-up blog blog round-up monthly monthly round-ups monthly top5 list posts list top Monthly Blog Round-Up October 2008 <![CDATA[SIRv5 Vulnerability Trends Webcast - 1 of 2 - Industry Trends]]> http://securityratty.com/article/2ba50d32e3515d12d216a9b35911ef8a http://securityratty.com/article/2ba50d32e3515d12d216a9b35911ef8a With the recent release of v5 of the Security Intelligence Report, I decided to produce a couple of webcast videos where I present my findings to you directly in a brief presentation. In this first one, I go over the industry-wide trends.

 


1H08 Vulnerability Trends - Part1 - Industry

To see all of my videos on http://edge.technet.com, click here (http://edge.technet.com/Tags/SecurityGuy/).

Best regards, Jeff

]]> Thu, 06 Nov 2008 18:36:00 +0000 industry webcast videos industry-wide trends videos 1h08 vulnerability trends security intelligence report recent release edge technet SIRv5 Vulnerability Trends Webcast - 1 of 2 - Industry Trends <![CDATA[Three years of Blue Box podcasts....]]> http://securityratty.com/article/cc61b7549892d897fdca3fb3d3366a42 http://securityratty.com/article/cc61b7549892d897fdca3fb3d3366a42 Today is a special day for me. It was three years ago on October 24, 2005, that Blue Box Podcast #1 was uploaded. It was an 11-minute episode where I talked about... Skype security, SIP security, IETF, VOIPSA and some other VoIP security news..... (Hmmm... sounds lot like our recent shows, too, eh?)

Jonathan Zar joined me a week later on Blue Box Podcast #2 and we've been going ever since. We've now produced over 112 episodes, had close to 245,000 downloads of our various shows, met some amazing people, learned a lot along the way... and hopefully helped you all learn a lot out there as well.

Thank you to all of you who have joined with us on this journey... whether you've listened to our show from the very beginning (and we know of a couple of you who have) or have only recently joined in... thank you!

And now... on to the next three years... :-)

Technorati Tags: , , , , , , , ,

]]> Fri, 24 Oct 2008 17:35:22 +0000 voip security news security blue box sip security voip voip security blue box podcast lot jonathan zar Three years of Blue Box podcasts.... <![CDATA[Researchers find problems with RFID passport cards]]> http://securityratty.com/article/9b77d2013d2d85781294b8025aa2f13e http://securityratty.com/article/9b77d2013d2d85781294b8025aa2f13e Thu, 23 Oct 2008 20:00:00 +0000 rfid tags researcher types documents thursday vulnerable Researchers find problems with RFID passport cards <![CDATA[Blue Box's 3-year anniversary coming up on Friday... ]]> http://securityratty.com/article/a116eaf0133996627443234f07d74420 http://securityratty.com/article/a116eaf0133996627443234f07d74420 It was three years ago Friday, on October 24, 2005, that I uploaded Blue Box Podcast #1, an 11-minute show where I introduced the show, talked about VoIP security news (To no surprise, I was talking about Skype security!), some projects of VOIPSA and some other podcasts people might find interesting. A week later, on Halloween 2005, Jonathan joined me in Blue Box Podcast #2 and we were off and running...

Three years later... 84 main Blue Box episodes (with one more recorded) .... 26 Special Editions (with about 10 in the queue)... almost 250,000 downloads... we're still here and, with an admitted bit of a rough patch this summer, are still going along creating shows and enjoying what we do.

Jonathan and I are planning to record a 3-year show on this coming Friday, October 24th, and if you have any comments you would like us to include in that show, please do get them to us by the end of the day on Thursday, October 23rd. You can send them to us via:

The show started out 3 years ago as really an experiment in seeing whether or not podcasting could be used to reach out to very specific audiences... and it's been both fun, amazing and interesting to see how well it's done.

Thank you to all of you who have continued to listen and contribute over the years!

Technorati Tags: , , , , , , ,

]]> Mon, 20 Oct 2008 15:22:26 +0000 voip security news voip blue box security voip security blue box podcast friday october october 24th Blue Box's 3-year anniversary coming up on Friday... <![CDATA[Presentation on Application Logging, Done Wrong or Very Wrong :-)]]> http://securityratty.com/article/64c60e0fd4df7a290c1a9b95390af78d http://securityratty.com/article/64c60e0fd4df7a290c1a9b95390af78d
This presentation "Application Logging Good Bad Ugly ... Beautiful?" would be useful to application developers who create logging functionality as well as security pros who then need to use the logs.

Here it is, embedded below:

Application Logging Good Bad Ugly ... Beautiful?
View SlideShare presentation or Upload your own. (tags: logs logging)



Enjoy!
About me: http://www.chuvakin.org
]]> Fri, 17 Oct 2008 01:55:00 +0000 presentation application logs countless bad logs bad ugly application developers view slideshare presentation security pros beautiful Presentation on Application Logging, Done Wrong or Very Wrong :-) <![CDATA[Presentation on Optimizing Your Logging for Insider Attack Tracking]]> http://securityratty.com/article/da77abec9952a309a60eb29d5a3adcd8 http://securityratty.com/article/da77abec9952a309a60eb29d5a3adcd8 [well, my blogspot scheduler, rather :-)] am releasing another fun presentation that I've been "hoarding" for a while to keep my readers "entertained" while I am enjoying Siberia.

This presentation is about using logs for tracking insiders as well as about "insider-proofing" you logs and making them more useful for that purpose.

It is also embedded below:

Logs vs Insiders
View SlideShare presentation or Upload your own. (tags: management security)



Enjoy!


Possible related posts:
About me: http://www.chuvakin.org
]]> Wed, 15 Oct 2008 07:11:00 +0000 presentation fun presentation logs view slideshare presentation management security blogspot scheduler insiders org enjoy Presentation on Optimizing Your Logging for Insider Attack Tracking <![CDATA[Presentation on Unusual Use Cases for Log Management]]> http://securityratty.com/article/31938c00f14386ae579d01eafc693b10 http://securityratty.com/article/31938c00f14386ae579d01eafc693b10 I am away. Here is the first - another presentation that I am unleashing upon the world. It covers a few "less common" use cases for log management: eDiscovery, database monitoring, etc.

It is also embedded below:

Log Management For e-Discovery, Database Monitoring and Other Unusual Uses
View SlideShare presentation or Upload your own. (tags: logs logging)


Enjoy!
About me: http://www.chuvakin.org
]]> Mon, 13 Oct 2008 07:11:00 +0000 log management presentation view slideshare presentation unusual database e-discovery world logs covers Presentation on Unusual Use Cases for Log Management