SEARCH RESULTS
 
Showing 1-10 of 24 records
 
Expand article

An interesting Whitepaper on Web 2.0 Security & Fortify Event

2008-01-18 07:40:36 by RaviC in Musings on Information Security
 
...conclude this post by quoting the importance of user awareness because user awareness determines the "usage" which is a very important component for a the threat model of an information system. I conclude by repeating the popular quote: "There is no patch for stupidity
 
Tags: information security breach, information security, security, information security documentary, documentary, security awareness, ex-microsoft security person, user awareness determines, user awareness
 
 
 
 
Expand article

Logging Poll #8 Analysis: Needed Log Context

The Article has images
2008-06-03 08:38:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
...conclude First , good documentation never hurts :-) - indeed, the most popular information to look for when facing a new log record is documentation on what it means. While some software vendors are great in this regard, many other don't bother documenting their logs or document them only when customers complain Second , I was not sure that...
 
Tags: log, recent log entry, strange log entry, log time stamps, log record, heavy log, log entry, complement logs, logs
 
 
 
 
Expand article

Logging Poll #4 "Who Looks at Logs?" Analysis

The Article has images
2008-01-08 19:48:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
...conclude from this First , a "duh" conclusion is in order! No matter how many times one can utter the word " compliance ," logs are still most useful for mundane (one would hope! :-)) system administration. Yes, indeed, sysadmins are the primary consumers of logs - yesterday, today, and - likely! - tomorrow as well Second , I am saddened by...
 
Tags: logs, poll, incident response, incident response team, reveal answers unobtainable, technorati tags, theoretical physicist, applications, application developers
 
 
 
 
Expand article

Logs: Parsing, Tokenizing or Extracting?

2008-03-11 01:54:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...conclude? It is too early to retire the human-written rules (so people will still have 's' and 'w' coming up in bad dreams... :-)), but this automated approach should definitely be used on the logs that will "allow you to do it to them." :-) Personally, I am also very happy that somebody is thinking about such matters Comment away Technorati...
 
Tags: logs, log analyst, log, convert logs, log management, diverse log sources, text logs, log analysis, bad logs
 
 
 
 
Expand article

Unauthorized access to the Stryker Corporation VPN

The Article has images
2008-04-17 12:45:57 by Evan Francen in The Breach Blog
...conclude whether the database was actually accessed of whether any Social Security numbers were acquired Based on the manner in which the user acquired access to Stryker's network and the user's network activity, Stryker believes the unauthorized user is a former employee with prior knowledge of the network Evan] Could this have been a...
 
Tags: stryker, stryker corporation, stryker suspects, stryker immediately, immediately, stryker intends, stryker servers, servers, evan user
 
 
 
 
Expand article

Symantec backs off claim, says current Flash Player safe from attack

2008-05-29 13:00:00 by Editor in Computerworld Security News
 
Reversing an earlier warning, Symantec Corp. today said that "suspicious behavior" by a captured exploit led it to mistakenly conclude that the latest standalone versions of Adobe's Flash Player are vulnerable to attacks from Chinese servers
 
Tags: flash player, suspicious behavior, exploit led, symantec corp, mistakenly conclude, chinese servers, standalone versions, attacks, adobe
 
 
 
 
Expand article

Weak Evidence Links Congressmens Computer Attacks to China

2008-06-13 14:43:21 by Dave Lewis in Liquidmatrix Security Digest
 
...conclude that something came from someplace if all youre going from is an IP address, said Marcus Sachs, director of the SANS Internet Storm Center, a volunteer-run effort that tracks emerging computer threats. Those of us who have done this for a living, we know that you cant prove that it was a Chinese person on the keyboard if you have a...
 
Tags: chinese, chinese nationals, chinese government, chinese person, evidence, chinese foreign ministry, evidence public, address, computer security experts
 
 
 
 
Expand article

Shimel's rules of business development and negotiating - Keep your eye on the prize

2008-06-13 12:39:00 by HASH0x8b0a484 in StillSecure, After All These Years
 
...conclude many successful business deals over the many years I have been at it. Over the years I have also had the opportunity to work with many good people on both sides of the table, as well as the chance to help train many good people. Some of the things I have tried to teach others and that I myself try to remember in negotiating business...
 
Tags: business, deals drag, deals, successful business deals, business terms, people, biz dev people, single agreement, single
 
 
 
 
Expand article

Friday Squid Blogging: Cuttlefish Embryos Can See

2008-06-13 16:39:56 by schneier in Schneier on Security
 
...conclude that the cuttlefish embryos must peer through their eggs, and learn to recognise their prey, a behaviour which will help give them a head-start in life
 
Tags: cuttlefish embryos, eggs, embryos, cuttlefish eggs lie, translucent eggs, unborn cuttlefish, black ink, recognise, envelope