SEARCH RESULTS
 
Showing 1-10 of 45 records
 
Expand article

Expanding Response: Deeper Analysis for Incident Handlers

2008-10-10 08:38:00 by Russ McRee in HolisticInfoSec.org
 
...Deeper Analysis for Incident Handlers , now available in the SANS Reading Room . The premise was to further expand on the topics discussed in my Malware analysis tools post. This paper includes tools discussed at various times in my toolsmith column in the ISSA Journal , and includes details on Argus , HeX , NSM-Console , and NetworkMiner ...
 
 
 
 
 
Expand article

Physicians and medics

2008-05-26 20:12:12 by JonesJ in RiskAnalys.is
 
...deeper understanding of the complex, sometime subtle health considerations, then Id prefer a physician. Someone who didnt say; Boy, this anatomy and physiology stuff is complicated. Im just going to stick with The hip bone is connected to the back bone My physician may, of course, choose to follow a pragmatic, commonly-used course of...
 
 
 
 
 
Expand article

The role of control depth in assessment quality

2007-09-12 12:17:00 by Bryan in practical risk management
 
...deeper. It's not enough to ask whether regular backups are taken and stored offsite. You have to ask how often. You have to ask where the tapes are stored before being transported offsite (hint: "under the receptionist's desk" isn't going to cut it). You have to ask whether backup tapes are encrypted. You have to ask whether backups are...
 
 
 
 
 
Expand article

The Real Migration Problem

2008-09-09 09:38:33 by Gunnar Peterson in 1 Raindrop
 
...deeper (in this case literally) then we will be ok."...at least until the person in question retires One of the legacy migration project I worked on, I was the third consultant that tried to get this company off of mainframe and onto distributed systems (which are no panacea but this company really did need to make the move). The core...
 
 
 
 
 
Expand article

Speaking of Security Podcast #76

2007-09-17 00:00:00 by Podcast Producers in Speaking of Security, the RSA Blog and Podcast
 
...deeper into this world. Learn even more on the 9/18 Web Seminar: A VIEW OF THE GROWING CRIMEWARE THREAT IN ACTION
 
 
 
 
 
Expand article

Stolen laptops affect 337,000 Davidson County voters

The Article has images
2007-12-29 11:30:26 by Evan Francen in The Breach Blog
...deeper into determining the extent of loss that occurred during the holiday break-in, we now know that full social security numbers were included on the voter files contained on one or more of the stolen computers." said Ray Barrett Initially, we thought that the only information was the same that the public can purchase when putting...
 
 
 
 
 
Expand article

A cryptographic hash function reading guide

2007-11-23 16:01:18 by George Danezis in Light Blue Touchpaper
 
...deeper details of what makes these functions secure, or how to break them Chapter 9 on Hash Functions and Data Integrity of the Handbook of Applied Cryptography (Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone) provides a very good first overview of the properties expected from collision resistant hash function. It also presents...
 
 
 
 
 
Expand article

Severity Rating Systems - Part 1

2007-11-02 21:32:42 by jrjones in Jeff Jones Security Blog
 
...deeper look might be interesting I've posted up Part 1 on CSOonline . Read the full details there and give me your thoughts as feedback. I'm planning either one or two more follow-up posts to further explore severity rating systems and your feedback could very likely influence those posts Regards ~ Jeff
 
 
 
 
 
Expand article

Financial Ombudsman losing it?

2008-01-23 15:14:58 by Ross Anderson in Light Blue Touchpaper
 
...deeper than I thought The Financial Ombudsman Service, and its predecessor the Banking Ombudsman, have for many years found against bank customers and in favour of the banks. In the early-to-mid 1990s, they upheld the banks outrageous claim that mag-stripe ATM cards were invulnerable to cloning; this led to the court cases described here and...
 
 
 
 
 
Expand article

More trustworthy election systems via SDL?

2008-02-04 23:34:00 by sdl in The Security Development Lifecycle
 
...deeper reading of the cryptographic concerns (page 29 in report) notes concerns (amongst others) over the use of a flawed implementation of the SHA hash algorithm and use of the Data Encryption Standard (DES) algorithm. The SDL has specific policies outlining appropriate selection of cryptographic algorithms. For example, DES is prohibited...