SEARCH RESULTS
 
Showing 1-10 of 22 records
 
Expand article

RSA Impressions - 3: CTO Panel

2008-04-09 10:21:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...darn scary! I guess it would be the "New Wild West I am also happy that somebody brought up 'everything that needs to be invented is already invented in security' and then dispelled this ugly and idiotic myth Another fun one mentioned is a change from "security of bad/good" to "security of flowing risk scale." It sounds deceptively simply,...
 
Tags: security, security bloggers, infrastructure- security, security defenses, fun security implications, security team, data criticality, data, data loss
 
 
 
 
Expand article

It Changed My Life: My Review of "Geekonomics"

The Article has images
2008-06-05 17:53:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
...darn, call me "out of touch with current security issues," but this book struck a major, major chord with me. It really did Now, I have experienced as much poor quality and insecure software as the next guy. I am never ever surprised about some feature in MS Office (or other application, really) just flat out not working or not working as...
 
Tags: software, software manufactures, typical software, software development, insecure, insecure software, bad software, bad, open-source software
 
 
 
 
Expand article

Ideal Tool to Solve Real Problems ... of the Near Future?

The Article has images
2008-06-12 19:02:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
...darn many log messages (seriously, 100,000 each second is a lot of log - but there is more at large companies!), and, which is worse, a lot of them are of unknown value to the users (might be useful, might not - but you never know in advance); thus, log clutter networks, systems and brains of security/system analysts Log diversity - logs all...
 
Tags: log-conclusion process, log, log diversity, log management vendor, logs, application logs, log messages, sap logs, future
 
 
 
 
Expand article

I Should Really Not Touch This ....

2008-01-15 23:50:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...darn it! - how can I miss a potential blog fight related to log management So, it seems like Raffy baited some poor folks from Prism with his post on "IT search " (what an abomination of a term!). But, seriously, "IT search" is a marketing term (nothing wrong with that, BTW!), so it will mean whatever the folks who coined feel at any given...
 
Tags: poor folks, folks, logs, typical siem approach, potential blog fight, log management, term, collect, argue objectively
 
 
 
 
Expand article

On Guanxi

2008-01-16 18:50:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...darn peculiar security implications ... especially this part of the Stratfor piece : "Chinese business ethics, however, are built on the basis of guanxi, which places relationships above other considerations, including an employers code of conduct and even the law. The idea that taking a job with a company, particularly a non-Chinese company,...
 
Tags: guanxi, simply regard guanxi, stratfor, stratfor piece, long-term relationships, non-chinese company, chinese business ethics, relationships, company
 
 
 
 
Expand article

AV Test Report?

2008-01-28 11:33:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
Here is that widely ridiculed anti-virus test report (with >95% average of successful detection My comments a) Make your own darn conclusions b) Credible AV testing is a hard, hard problem About me: http://www.chuvakin.org
 
Tags: anti-virus test report, darn conclusions, successful detection, hard, org, credible, widely, comments, average
 
 
 
 
Expand article

Monthly Blog Round-Up - January 2008

2008-02-01 15:46:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...Darn it, but same as during the last many, many months, the "fallout" from being featured on a high-profile programming site continues to drive loads of traffic. The topic that got such a huge boost was anti-virus efficiency. Thus, these posts with same theme of anti-virus efficiency were the most popular: Answer to My Antivirus Mystery...
 
Tags: blog round-up, monthly blog round-up, monthly, posts, popular posts, top, anti-virus efficiency, database, database log management
 
 
 
 
Expand article

C, I .... Hey!!! Where is my 'A'???

2008-02-03 15:28:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...darn it Security team usually does not own the 'A' - IT does. If you think "IT availability" equals "DoS defense", your view is painfully narrow It sucks that some folks chose 'A' over 'C-I-A', but they do It often takes some effort to explain why people need to care about 'C' and 'I' (no matter how painfully obvious it is for security...
 
Tags: security, security folks, security team, discussion, initial discussion, c-i-a, c-i-a risks, cesg gchq tomorrow, colleague michael farnum
 
 
 
 
Expand article

More on Air Defense's sleazy trade show shtick and Infosec World wrap up

2008-03-12 00:01:15 by HASH0x8b72520 in StillSecure, After All These Years
 
...darn thing about it, as I checked the SSIDs a few minutes later. That is OK a word to the show organizers about other exhibitors having problems with connectivity due to Air Defense's sleazy ways will put an end to them doing that in the future. In fact I encourage my many security vendor readers to make sure and make show organizers aware of...
 
Tags: air defense, wap, air defense wap, air defense booth, booth, air defense dude, people, direct people, air defense people