SEARCH RESULTS
 
Showing 1-10 of 232 records
 
Expand article

My New Favorite Tool Case Complete by Serlio Software

2006-10-17 04:54:00 by Eric Marvets in The Security Samurai
 
...Complete by Serlio Software The training demo and tutorial doc were clear, concise, and allowed me to learn the product in a couple of hours. I transferred all my use cases in Word over in less than a day (all 94 of them), and the template for creating a Word report was easy enough to configure The pricing was a little higher than I...
 
 
 
 
 
Expand article

Laptop, complete with Vista attack code, listed on eBay

2008-04-01 11:24:27 by Editor in Computerworld Security News
 
The Vista machine hacked in the CanSecWest PWn to OWN contest over the weekend is allegedly for sale on eBay already -- possibly complete with the $5,000 exploit. (Or not; check the date
 
 
 
 
 
Expand article

AoIS upgrade to Ubuntu 8.10 Complete !

2008-12-10 16:52:20 by Erik T. Heidt in Art of Information Security
 
My apologies for the slight outage of Art of Information Security last night, I had an almost flawless transition from the older version of Linux to Ubuntu 8.10 The Beauty of Virtualization AoIS is hosted by Linode , which is a Linux virtual host service provider. The beauty of this was the fact that I could Spin up a new host in 10 min...
 
 
 
 
 
Expand article

Prospects Brightening for a Common Event Standard

2008-02-25 08:38:57 by Burton Group in Security and Risk Management Strategies Blog
 
...complete common event standard out in the field today, there are many partial standards or solutions, including Syslog; the IETFs Intrusion Detection Message Exchange Format (IDMEF) and Incident Object Description and Exchange Format (IODEF); the Java Specification Request (JSR) 47 Logging API, WS-Management subscribe/publish APIs and so on....
 
 
 
 
 
Expand article

Prospects Brightening for a Common Event Standard

2008-02-25 08:38:57 by Burton Group in Security and Risk Management Strategies Blog
 
...complete common event standard out in the field today, there are many partial standards or solutions, including Syslog; the IETF???s Intrusion Detection Message Exchange Format (IDMEF) and Incident Object Description and Exchange Format (IODEF); the Java Specification Request (JSR) 47 Logging API, WS-Management subscribe/publish APIs and so...
 
 
 
 
 
Expand article

Who could use some extra cash?

The Article has images
2008-03-04 11:27:25 by HASH0x8b1bf78 in StillSecure, After All These Years
...complete without the fine print. So here it is Candidates cannot refer themselves and only the first person or agency to refer a candidate that is hired will be compensated. If a candidate is already under consideration at the time of the referral under this program, no compensation will be paid. Referrers must complete a W-9 for tax purposes...
 
 
 
 
 
Expand article

Who could use some extra cash?

The Article has images
2008-03-04 12:27:25 by ashimmy in StillSecure, After All These Years
...complete without the fine print. So here it is Candidates cannot refer themselves and only the first person or agency to refer a candidate that is hired will be compensated. If a candidate is already under consideration at the time of the referral under this program, no compensation will be paid. Referrers must complete a W-9 for tax purposes...
 
 
 
 
 
Expand article

Mashup of the Titans

2008-06-25 17:29:25 by Gunnar Peterson in 1 Raindrop
 
...Complete mediation: Every access to every object must be checked for authority. This principle, when systematically applied, is the primary underpinning of the protection system. It forces a system-wide view of access control, which in addition to normal operation includes initialization, recovery, shutdown, and maintenance. It implies that a...
 
 
 
 
 
Expand article

"Walking" with the SDL - Part 4

2008-07-25 20:49:00 by sdl in The Security Development Lifecycle
 
...complete, and all security-related testing should be completed and documented. In addition, everyone involved in the FSR should have full access to the bug database to review status or exceptions to security bugs What does an FSR team do Re-review threat models to verify all mitigations identified in those exercises were fixed or went through...
 
 
 
 
 
Expand article

Duke School of Law breach affects 3,200

The Article has images