SEARCH RESULTS
 
Showing 1-10 of 23 records
 
Expand article

"Crawling" Toward SDL

2008-03-06 22:13:00 by sdl in The Security Development Lifecycle
 
...compiles/builds within Visual Studio 2005 SP1. The SP1 piece of this is important because some of the important defenses I discuss below were first made available in that version. Lets look at some of the tools you can use to get crawling toward SDL today Detailed awareness of your architecture and its attack surface Threat Modeling Even if...
 
Tags: sdl, security, perform security analysis, application security, application, applications security, security issues, issues, non-microsoft sdl engagements
 
 
 
 
Expand article

Five stolen Florida Department of Children and Families laptops

The Article has images
2008-01-04 10:12:20 by Evan Francen in The Breach Blog
...compile and maintain files on consumers on a nationwide basis, as defined in 15 U.S.C. s. 1681a(p), of the timing, distribution, and content of the notices Past Breaches Unknown
 
Tags: agency, law enforcement agency, law, confidential information, information, confidential personal information, law enforcement led, laptops, sensitive personal information
 
 
 
 
Expand article

Irongeek on Campus

2007-10-04 10:00:18 by Editor in Irongeek's Security Site
 
...compile a list of such campuses . If your campus uses my videos, please send me an email with the institutions name and a link to their web site. So far Jackson Community College is the only name on the list, but I know there's more to come
 
Tags: institutions, jackson community college, educational institutions, infosec classes, web site, videos, campus, list, link
 
 
 
 
Expand article

PrincipalPermissionAttribute and Static ctor Leads to DoS

2007-12-03 09:03:00 by Keith Brown in Security Briefs
 
...compile that demonstrates the danger using System using System.Security.Principal using System.Security.Permissions using System.Threading PrincipalPermission(SecurityAction.Demand, Role="SuperUser class Sensitive static Sensitive Console.WriteLine("Inside static constructor class Program static void Main(string[] args becomeSuperUser...
 
Tags: class sensitive, sensitive, class, class level, static constructor, inside static constructor, class program, static constructor leads, static void
 
 
 
 
Expand article

Questions to Consider in the Coming Privacy Wars

2008-01-03 21:10:12 by Editor in Digg / Security
 
It seems obvious that privacy is going to be a major point of contention in the near-term future. It's only going to get hotter as major online services compile huge amounts of data about us. There are a lot of "little questions" that we need to engage with as soon as possible. Here's my list of important questions, what's on yours
 
Tags: questions, near-term future, privacy, engage, lot, obvious, data, contention, major
 
 
 
 
Expand article

Recent Symantec and IBM vulnerabilities, giblets, banned APIs and the SDL

2008-01-04 23:37:00 by sdl in The Security Development Lifecycle
 
...Compiler and Linker SDL Requirements There is no indication which compiler is used to compile these DLLs, but it looks like none have stack-based buffer overrun detection defense (such as the Visual Studio C++ /GS flag) or exception handler defenses (such as the Microsoft Link /SAFESEH flag) - both of which are SDL requirements. I also assume...
 
Tags: linker sdl requirements, sdl requirements, ibm, sdl, requirements, symantec, bugs affect ibm, bugs, sdl refers
 
 
 
 
Expand article

E-crime and Socioeconomic Factors

The Article has images
2008-01-21 07:49:29 by HASH0x8b5217c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...compilers" generation took, and enjoyed only the fame that came with coming up with the most widely used and successful bot family. Take Pinch for instance and the recent arrest of the "coders". New and improved versions of Pinch are making their rounds online, but how is this possible since the people behind it are no longer able to update...
 
Tags: malware, code malware, modern malware, malware generators, source tool, source, malware bot, source malware bots, e-crime
 
 
 
 
Expand article

Humanitarian Security Survey

2008-01-10 22:10:00 by NGO Security in NGO Security
 
...compile a dataset of the range of services that private security providers are contracted to undertake and different models of security provision and partnerships. The results of this survey in conjunction with desk-based and field-based analysis of humanitarian actors' use of private security providers will serve as the basis for a...
 
Tags: survey, online survey, security providers, international cooperation, international, cooperation, international red, comprehensive report due, relevant parties
 
 
 
 
Expand article

Security talk on the radio

The Article has images
2008-01-20 19:12:00 by John Sexton in The Bullet Proof Blog
...compile and make available information for would-be travelers. Information ranges from arriving at the airport to being taken hostage. Thankfully, the latter does not happen often to casual travelers but it is good to be aware of the possibility, especially in these dangerous times Visit Sexton Executive Security at www.sextonsecurity.com
 
Tags: security, radio, security tips, would-be travelers, travelers, physical security, business, casual travelers, n-on
 
 
 
 
Expand article

Enabling hierarchical nant builds

2008-03-07 05:49:00 by Keith Brown in Security Briefs