SEARCH RESULTS
 
Showing 1-10 of 25 records
 
Expand article

Threat Modeling Self Checks and Rules of Thumb

2007-10-22 21:04:01 by sdl in The Security Development Lifecycle
 
...actionable. Review this carefully, or Focus your attention here are more actionable. People threat modeling are already concerned Good rules of thumb encourage flow by empowering people to make a snap decision and move along
 
Tags: thumb, threat, rules, people threat, data, people, data sinks, thumb encourage flow, actual software
 
 
 
 
Expand article

Summarizing June's Threatscape

The Article has images
2008-07-01 07:05:01 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...actionable intelligence gathered in the shortest timeframe possible is already proving accurate and highly valuable. How come? Stay tuned for more developments 06. ImageShack Typosquatted to Serve Malware - In a rare instance of a creative attack combining typosquatting in order to impersonate ImageShack and serve malware by...
 
Tags: site, fake youtube site, web site defacements, malware, malware hosts, web site defacer, sites, vulnerable sites, malicious
 
 
 
 
Expand article

Web Services and XML Security Training at OWASP

2008-08-28 08:55:59 by Gunnar Peterson in 1 Raindrop
 
...actionable tasks that I took back to my project teams the very next day Jesse Aalberg, Sr. Enterprise Application Architect, United Healthcare The class was distinctly focused on Security requirements and the strength and weaknesses of the various solution approaches we could consider. The result of the course was actionable approaches to...
 
Tags: security, soa security standards, security standards, soa security, soa, security critical environment, information security, information, application security principles
 
 
 
 
Expand article

Links for 2008-09-11 [del.icio.us]

2008-09-12 00:00:00 by Editor in Anton Chuvakin Blog -
 
...actionable - concise, express symptoms. Anything logged is something fixable. It should be giving you less downtime - shorter time to resolution. Logging takes resources, so make it worth it. Filter down your logs to be concise and actionable. Production logging has different goals from dev/QA logging. Youre looking for problem diagnosis and...
 
Tags: security management platform, security management, management, web admin blog, conference experience, american express, ciso, concise, mba
 
 
 
 
Expand article

Playing around with my blog

2007-09-26 18:40:21 by Steve Riley in Steve Riley on Security
 
...actionable for ordinary citizens. This website has some good commentary that'll make your blood boil Technorati stuff--authority display (which isn't working, maybe it takes a while?), reaction counts and link, and a button for you to add me to your Technorati favorites As time goes on, I'll probably add more. Hope you find this useful
 
Tags: blog, time, blog software, technorati favorites, days ago, ordinary citizens, technorati stuff, right-hand column, blood boil
 
 
 
 
Expand article

Cached Malware Embedded Sites

The Article has images
2007-12-16 18:18:26 by HASH0x8a09e44 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...actionable historical intelligence in the form of what was embedded at the site, where was it pointing, are there many other sites currently embedded by the same campaign etc. This is an interesting opinion stating that cached malware embedded sites are a security problem, well they're, but the bigger problem to me is that it's only Google...
 
Tags: sites, sites wrongly, web sites, malware, malicious site, site, single site offers, sites notification services, popular sites
 
 
 
 
Expand article

The Dutch Embassy in Moscow Serving Malware

The Article has images
2008-01-28 16:07:58 by HASH0x8af6a58 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...actionable intelligence on who's what and what's when is a necessity. Here are for instance two far more in-depth assessments given the exploits URLs were still alive back then, discussing the malware embedded at the sites of the U.S Consulate in St. Petersburg , and the Syrian Embassy in the U.K Related posts MDAC ActiveX Code Execution...
 
Tags: malware, attack, malware attack, media malware gang, redirector script, script, alive iframes, royal netherlands embassy, alive
 
 
 
 
Expand article

Healthcare Best Practices Security Framework

2007-12-27 17:37:00 by Ryan Shopp in practical risk management
 
We are excited to see this announcement about the formation of HITRUST (Health Information Trust Alliance). A health care vertical specific initiative around establishing and collaborating on information security best practices. Why are we excited, our solution (along with other IT-GRC solutions) are specifically designed to enable a major...
 
Tags: information security framework, information security, major enterprises, it-grc solutions, practices, hitrust, enable, track-able, actionable
 
 
 
 
Expand article

Central Bank of the UAE reports ATM fraud to lenders

The Article has images
2008-03-03 11:41:37 by Evan Francen in The Breach Blog
...actionable for the people affected. There is not enough information to help anyone It is often very (and I mean VERY) difficult to notice good card skimmers and cameras. Here is an example borrowed from the University of Texas Card skimmer being installed Card skimmer after installation Camera to capture PIN numbers hidden in an...
 
Tags: bank card details, card details, bank, bank card, atm, regular card reader, reader, customers, bank customers