SEARCH RESULTS
 
Showing 1-10 of 131 records
 
Expand article

Identity Framework Probable Feature List

The Article has images
2007-12-16 06:42:00 by Keith Brown in Security Briefs
...helps you implement a custom STS STS can issue managed cards (see below Fx provides a base class for your STS, (it's currently called SecurityTokenService You derive from this base class and supply a "ScopeProvider" implementation which answers (at least) two questions What type of claims your STS can issue (you have to generate a list of...
 
Tags: informationcard login control, login control, information card serializer, information, control, user authentication methods, user, custom sts, card
 
 
 
 
Expand article

UPDATES GALORE! or, THE PRONOUN WE MEANS YOU AND ME!

2008-08-13 15:24:17 by Alex in RiskAnalys.is
 
...helps parse out what is important in any undertaking to understand corporate risk (the repeated discussions on the ISO 27001 mailing list make me think it would be a place ripe for such a document For those who know risk, it helps to re-establish some fundamental principles like the use of scales (ratio, please), the implications of dealing...
 
Tags: risk, risk assessment methodologies, security forum, forum, magic-fairy risk, risk standards, fair, risk-world, fair similarly helps
 
 
 
 
Expand article

Getting into the Flow With Threat Modeling

The Article has images
2007-10-11 23:25:00 by sdl in The Security Development Lifecycle
...helps take them from worrying about what your goals mean to worrying about how to achieve them. Without clear goals, its very challenging to get into the spirit of anything, whether playing a game or shipping an operating system. As goals go, think like an attacker and brainstorm arent up there with A PC on every desktop. The lack of a clear...
 
Tags: threat, people develop skills, people, challenge people, flow, sdl threat, entire threat model, threat model, guide people
 
 
 
 
Expand article

Supporting your family, friends, and neighbors

2008-02-13 17:45:40 by Steve Riley in Steve Riley on Security
 
...helps to eliminate malware. Its updated each month through the automatic update client and runs the next time a computer boots. It scans for and removes common malware like certain prevalent worms and rootkits. Since the tools introduction, millions of computers have been cleaned of billions of pieces of malware If you need to quickly scan a...
 
Tags: suspicious e-mail message, mail, home computers defense, home computers, e-mail, home, web mail, windows live mail, site
 
 
 
 
Expand article

Ten top quality tips to keep ypu safe from ID theft

2008-05-08 14:08:49 by Doug Woodall in The Spyware Biz Blog
 
...helps you prevent your own identity theft as well as safeguard your company from unfortunate data leakage incidents. Parents teach us to look both ways before crossing the street but most of us didnt grow up hearing, make sure your password contains a number or install the latest service pack, says Todd Feinman, CEO of Identity Finder, LLC a...
 
Tags: theft, identity finder, identity, prevent, software helps prevent, identity theft, computer helps, computer, data leakage incidents
 
 
 
 
Expand article

Giving SQL Injection the Respect it Deserves

2008-05-15 18:45:00 by sdl in The Security Development Lifecycle
 
...helps to mitigate the risk of successful exploitation of user input which is not correctly verified This defense has been known about forever; heck, David and I discussed this in detail in the first edition of Writing Secure Code in 2002 From page 320, "Another way to perform this kind of processing is to use placeholders which are often...
 
Tags: sql, sql injection bug, sql injection requirements, sql injection attack, sql server, sql execute-only permission, malicious sql payload, sql injection, sql injection vulnerability
 
 
 
 
Expand article

More Log Management Questions - Answered!

2008-05-23 16:04:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...helps you to configure logging across all the systems as well as helps to know what information you have in your environment (should an auditor ask, for example). A log policy also defines log retention, log review practices, etc. NIST 800-92 Guide to Security Log Management [PDF] is a good source of info on this subject Enjoy Technorati...
 
Tags: log management, log, defines log retention, log policy, log management tool, log management program, infrastructure logs, logs, log messages
 
 
 
 
Expand article

Security Through Visibility - Montego, Lancope and NetFlow

The Article has images
2008-07-30 21:57:06 by John Peterson in Security In The Virtual World
...helps you with directing only the things you care about to an IDS (attack visualization product). Montego's HyperSwitch also can help you with the traffic redirection of only the things you care about Another method of visibility which I tend to be a fan of is one of packet analysis (aka NetFlow). NetFlow was invented by Cisco some time ago...
 
Tags: network, network visibility, visibility, environments, virtual environments network, security, network bandwidth, bandwidth, virtual
 
 
 
 
Expand article

Security Through Visibility - Montego, Lancope and NetFlow

The Article has images
2008-07-30 21:57:06 by John Peterson in Security In The Virtual World
...helps you with directing only the things you care about to an IDS (attack visualization product). Montego's HyperSwitch also can help you with the traffic redirection of only the things you care about Another method of visibility which I tend to be a fan of is one of packet analysis (aka NetFlow). NetFlow was invented by Cisco some time ago...
 
Tags: network, network visibility, visibility, environments, virtual environments network, security, network bandwidth, bandwidth, virtual