SEARCH RESULTS
 
Showing 1-10 of 258 records
 
Expand article

Users continue to ignore security policies, while security organizations are overlooking non-technical controls

The Article has images
2007-12-13 12:37:00 by Ryan Shopp in practical risk management
...controls After reading this I decided to do some searching around for some type of survey numbers around technical vs. non-technical controls. I didn't see much out there but did come across this (" Is Information Security Under Control ') from IEEE Computer Society published in early 2007 The survey focused in on 80 of the highest quality...
 
Tags: non-technical controls, technical controls, security, controls, aka non-technical controls, non-technical, quality, quality security controls, technical
 
 
 
 
Expand article

Audit/Monitor Controls or Audit/Monitor BEFORE Control?

The Article has images
2008-02-28 11:38:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
...controls after you put them in place; you monitor after you have authentication and authorization taken care of and you detect the violations after you organized your administration The paper even had the following picture, which is presented here to illustrate the point source: Forrester paper named above The paper clarifies: "With people...
 
Tags: audit, broadly includes audit, broadly, includes, audit whatsoever, full-blown audit capability, paper, paper clarifies, controls
 
 
 
 
Expand article

A tip on using ASP.NET validation controls

2008-09-03 17:16:35 by keith-brown in Security Briefs
 
...controls look at the ErrorMessage field to figure out what to display, so always use ErrorMessage in a verbose enough way that it will be helpful from a ValidationSummary control If you need a shorter message to display inline (i.e., where the validation control is on the form, as opposed to the ValidationSummary) use the body of the control...
 
Tags: shorter message, message, inline error message, validation control element, control, inline, display inline, errormessage, errormessage property
 
 
 
 
Expand article

Virtual Environment User Based Access Controls

2008-02-03 19:34:33 by John Peterson in Security In The Virtual World
 
...controls Can't I just put Trend Micro Anti-Virus on each Virtual Desktop? The answer is yes you can. But, keep in mind that Virtualization means SHARED resource. You would now have 100 Anti-Virus software products running on shared CPU's. Just think if 100 virus scans turned on at the same time and started scanning 100 virtual hard drives....
 
Tags: user, strict policy control, control, specific user, control user activity, access, access controls, user access, virtual desktop
 
 
 
 
Expand article

Virtual Environment User Based Access Controls

2008-02-03 19:34:33 by John Peterson in Security In The Virtual World
 
...controls Can't I just put Trend Micro Anti-Virus on each Virtual Desktop? The answer is yes you can. But, keep in mind that Virtualization means SHARED resource. You would now have 100 Anti-Virus software products running on shared CPU's. Just think if 100 virus scans turned on at the same time and started scanning 100 virtual hard drives....
 
Tags: user, strict policy control, control, specific user, control user activity, access, access controls, user access, virtual desktop
 
 
 
 
Expand article

Critical flaws found in MySpace, Facebook ActiveX controls

2008-01-31 00:00:00 by HASH0x8b233bc in Network World on Security
 
Bugs in the ActiveX controls on popular social networking sites Facebook and MySpace can be used by hackers to snatch control of Windows PCs, security experts said Thursday
 
Tags: activex controls, windows pcs, security experts, popular social, snatch control, sites facebook, myspace, bugs, thursday
 
 
 
 
Expand article

Going beyond technical security controls

2008-03-03 13:51:00 by Ryan Shopp in practical risk management
 
...controls around things that are not IP addressable (e.g., people, processes, facilities). The other need these products are offering is a normalized, unified view of the entire security program. Leveraging scoring from other products, they finally deliver the possibility of 100% visibility into the posture of your entire IT security, risk or...
 
Tags: security, security eventlog manager, assess security controls, entire security program, security policy, policy, security organization, unwieldy policy, security software application
 
 
 
 
Expand article

IBM project seeks privacy controls for users

2008-03-28 00:00:00 by John Fontana in Network World on Security
 
A three-year project to infuse privacy controls into identity technologies and emerging social networking communities is being undertaken by IBM Research with funding help from the European Union
 
Tags: infuse privacy controls, ibm research, three-year project, european union, identity technologies, communities, social
 
 
 
 
Expand article

GAO: FDIC Needs Stronger Security Controls

The Article has images
2008-06-05 03:09:28 by Dave Lewis in Liquidmatrix Security Digest
...controls, GAO reported Until the FDIC fully performs key information security program activities, GAO said there is an increased risk that it may not be able to maintain sufficient control over its financial systems and information Yeah, see thats bad mkay Article Link
 
Tags: fdic, multiple fdic users, gao, maintain sufficient control, test configuration controls, application source code, financial systems, article link, password