SEARCH RESULTS
 
Showing 1-10 of 156 records
 
Expand article

Weak Evidence Links Congressmens Computer Attacks to China

2008-06-13 14:43:21 by Dave Lewis in Liquidmatrix Security Digest
 
...evidence that the two congressmen provided to back up their claims simply does not prove that the Chinese government, or even Chinese nationals, were involved Its so very hard to conclude that something came from someplace if all youre going from is an IP address, said Marcus Sachs, director of the SANS Internet Storm Center, a volunteer-run...
 
Tags: chinese, chinese nationals, chinese government, chinese person, evidence, chinese foreign ministry, evidence public, address, computer security experts
 
 
 
 
Expand article

Weak evidence links congressmen's cyber-attacks to China

2008-06-12 00:00:00 by Robert McMillan in Network World on Security
 
U.S. House of Representatives members who worry that China may have been responsible for attacks on their computers have provided little evidence to back up their claims, according to computer security experts
 
Tags: computer security experts, attacks, evidence, china, house, claims, responsible, computers, representatives
 
 
 
 
Expand article

"Walking" with the SDL - Part 3

2008-07-23 16:43:00 by sdl in The Security Development Lifecycle
 
...evidence when talking to your customers about how you ensure the security and privacy of your product Reference & Reuse Threat Modeling results & Attack Surface Reviews Your developers and testers should have access to and be familiar with the attack surface analysis or threat model documents you have created. These documents are invaluable...
 
Tags: security requirements serve, security requirements, security development lifecycle, security development, requirements, lifecycle, security lifecycle, security, security ecosystem
 
 
 
 
Expand article

"Crawling" Toward SDL

2008-03-06 22:13:00 by sdl in The Security Development Lifecycle
 
...evidence before investing in the changes to support full SDL adoption Since we usually focus on how to roll out the full Lifecycle, I want to take a shot at defining what it means to start crawling toward SDL. One very important note before I start. What I describe below is not Microsofts SDL process. It matches some of the tools and...
 
Tags: sdl, security, perform security analysis, application security, application, applications security, security issues, issues, non-microsoft sdl engagements
 
 
 
 
Expand article

Risk and Culture

2008-05-21 05:19:59 by schneier in Schneier on Security
 
...evidence of the effect of this dynamic in generating conflict about global warming, school shootings, domestic terrorism, nanotechnology, and the mandatory vaccination of school-age girls against HPV, among other issues. The Study also presents evidence of risk-communication strategies that counteract cultural cognition. Because nuclear power...
 
Tags: risk, values, cultural values, hold hierarchical, hold, egalitarian values, hold individualist values, diverse values, national risk
 
 
 
 
Expand article

Who's Selling Front-Running Data?

2008-01-18 11:15:55 by Editor in Cheap Hack
 
...evidence to back this statement up or if it was just speculation. Personally, I've never seen any hard evidence for where front-runners get their tips. They said "We have enough evidence to back up what we've said." I guess the word "may" can make the statement mean anything, so nobody's lying. But do registries actually and provide data on...
 
Tags: data, whois, command line whois, provide data, internet service providers, hard evidence, service, network solutions, evidence
 
 
 
 
Expand article

Who's Selling Front-Running Data?

2008-01-18 11:15:55 by Editor in Cheap Hack
 
...evidence to back this statement up or if it was just speculation. Personally, I've never seen any hard evidence for where front-runners get their tips. They said "We have enough evidence to back up what we've said." I guess the word "may" can make the statement mean anything, so nobody's lying. But do registries actually and provide data on...
 
Tags: data, whois, command line whois, provide data, internet service providers, hard evidence, service, network solutions, evidence
 
 
 
 
Expand article

Hackers Holy Grail - Redefined by Microsoft

2008-04-29 16:53:42 by Erik T. Heidt in Art of Information Security
 
...Evidence Extractor, is a USB thumb drive that was quietly distributed to a handful of law-enforcement agencies last June. Microsoft General Counsel Brad Smith described its use to the 350 law-enforcement experts attending a company conference Monday The device contains 150 commands that can dramatically cut the time it takes to gather digital...
 
Tags: holy grail, microsoft, hackers holy grail, black hat community, cybercrime underworld, cybercrime, computer, gather digital evidence, reverse engineer
 
 
 
 
Expand article

Using a File Erasure Tool Considered Suspicious

2008-07-15 13:36:03 by schneier in Schneier on Security
 
...Evidence Eliminator on his laptop computer just two days before investigators were due to copy its hard drive. Carter hasn't denied that the program was run on his computer, but he said it wasn't to destroy evidence. He said he had legitimate reasons to use the software. [...] But the wiper programs don't ensure a clean getaway. They leave...
 
Tags: evidence eliminator leaves, evidence eliminator, wiper programs, programs, wiper, laptop computer, computer, california court, carter
 
 
 
 
Expand article

Indiana State University professor's laptop is stolen

The Article has images
2008-07-17 09:29:35 by Evan Francen in The Breach Blog
...evidence to suggest that password security was breached, the university is taking the precaution of notifying all affected students for whom it has current contact information Evan] If someone were to breach the "password security", what evidence would the school see? None. There would be no evidence (except locally on the la