SEARCH RESULTS
 
Showing 1-10 of 22 records
 
Expand article

SQL Injection Defense Tools

2008-06-24 16:43:00 by sdl in The Security Development Lifecycle
 
...conjunction with Microsoft Each of these tools works differently and each attacks the SQL injection problem from a different angle, and in combination they complement each other well. MSCASI analyzes classic ASP source code to find potential SQL injection vulnerabilities. It can detect both first- and second-order SQL injection bugs and will...
 
Tags: source code, complete source code, tools, source, source-code analysis tools, defense, sql injection defense, detection tools, sql injection
 
 
 
 
Expand article

Pushdo - Web Based Malware as Usual

The Article has images
2007-12-19 18:01:44 by HASH0x89b80bc in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...conjunction with whitelists and blacklists of country codes. This enables the Pushdo author to limit distribution of any one of the malware loads from infecting users located in a particular country, or provides the ability to target a specfic country or countries with a specific payload This is an excerpt from a previous post on " Botnet...
 
Tags: malware, web based malware, pushdo, botnet masters circa, botnet masters, nuclear malware kit, botnet, pushdo author, botnet communication platforms
 
 
 
 
Expand article

More trustworthy election systems via SDL?

2008-02-04 23:34:00 by sdl in The Security Development Lifecycle
 
...conjunction with the audit log. The MBB has mitigations in place to protect integrity (tampering) of votes, but doesnt appear to protect against information disclosure. The SDL cryptographic policies also cover correct random number generation. The challenge of fully considering all ways in which data can be reverse engineered, contextualized...
 
Tags: machine security concerns, security concerns, election systems, election, security, security researchers, election systems margin, margin, election management system
 
 
 
 
Expand article

Humanitarian Security Survey

2008-01-10 22:10:00 by NGO Security in NGO Security
 
...conjunction with desk-based and field-based analysis of humanitarian actors' use of private security providers will serve as the basis for a comprehensive report due in April 2008. The survey is anonymous, and no individual organization or agency will be cited by name in published findings To take the survey, follow this link
 
Tags: survey, online survey, security providers, international cooperation, international, cooperation, international red, comprehensive report due, relevant parties
 
 
 
 
Expand article

IBM Acquires Encentuate

2008-03-13 09:58:32 by Andras Cser in Security & Risk Management
 
...conjunction with user account provisioning - will continue to drive the IAM market growth
 
Tags: e-sso, e-sso marketplace, ibm, iam, iam suite, market, e-sso vendors, market share, iam market growth
 
 
 
 
Expand article

A breach that hits home with 2008 presidential candidates

The Article has images
2008-03-22 13:16:50 by Evan Francen in The Breach Blog
...conjunction with those congressional committees that have oversight function so it's not simply an internal matter From the Stanley, Inc. Official Company Statement Stanley manages more than 1,800 personnel including subcontractor personnel nationwide on contracts assisting Department of State and other contract employees with production of...
 
Tags: stanley subcontractor employees, subcontractor employees, subcontractor, confidential information, information, information security, stanley, personal information, employees
 
 
 
 
Expand article

What is 802.1X? Here's a Technology Primer for You

2008-04-02 03:10:42 by JJ in Security Uncorked
 
...conjunction with 802.1X to provide a robust solution with Layer 2 and up protection. Other NAC vendors that dont leverage 802.1X are using a variety of Access Control Lists, either on switches, routers, a NAC appliance, or at the host. If youre using 802.1X with NAC, well generally say its Layer 2 NAC (since 802.1X is a L2 standard) and if...
 
Tags: edge port, edge, edge ports, network access control, network access, wireless standard, standard, standard network traffic, network
 
 
 
 
Expand article

Stolen SunGard laptop affects at least 10 post-secondary schools

The Article has images
2008-04-21 14:49:39 by Evan Francen in The Breach Blog
...conjunction with other controls) reduced the risk of exposure to a level that is acceptable to many organizations (mine included All affected customers have been notified. Customer names will not be disclosed for privacy and security reasons as the investigation continues Evan] We already know of at least 10 post-secondary institutions The...
 
Tags: information, personal information, store confidential information, university, university system, data custodians apply, data custodians, information security governance, sungard
 
 
 
 
Expand article

Where's JJ? Schedule Updated

2008-05-22 21:05:50 by JJ in Security Uncorked
 
...conjunction with the Techno Security Conference in SC. This trip will have to be short, as we have a couple of 1X, NAC and wireless implementations to finish up In June , our company, CAD , is sponsoring the NC Bar Association Annual Conference and a Dept of Energy show in Texas. I dont plan to be at those, but youll find the CAD flag proudly...
 
Tags: schedule, annual conference, conference, usa, techno security conference, presentation, thursday afternoon presentation, black hat usa, network security fun
 
 
 
 
Expand article

Comcast.net not Hacked, DNS Records Hijacked

The Article has images
2008-05-30 07:58:46 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge