SEARCH RESULTS
 
Showing 1-10 of 45 records
 
Expand article

My New Favorite Tool Case Complete by Serlio Software

2006-10-17 04:54:00 by Eric Marvets in The Security Samurai
 
...highlights of the functionality Allows you to break your use case project up into separate files (all stored as XML) so that you can store it in Source Safe and allow users to only check out the section they need. Ive had two people working on the use cases with no problems Automatic renumbering that will also update your exception steps. If...
 
 
 
 
 
Expand article

RSA Day 2: Wednesday with JJ & the Engima

The Article has images
2008-04-14 01:35:30 by JJ in Security Uncorked
...highlight of the days sessions had to be the Sins of Our Fathers breakout with an amazingly hilarious geek-filled panel including Daniel Houser , Ben Jun and Hugh Thompson . (Hugh unquestionably won the Most Entertaining Geek Award for the day). I was tweeting live from the session and took some photos of the interactive polls they...
 
 
 
 
 
Expand article

Segregation of data protection duties

2007-12-17 10:12:06 by Jen Albornoz Mulligan in Security & Risk Management
 
...highlight that his responsibilities are make both sense and money from the vast amounts of information Yahoo collects on the doings of 500 million people who visit its site every month Fayyad... [is] engaged in a major battle over how freely that information can be used to tailor ads to individuals These goals are almost diametrically...
 
 
 
 
 
Expand article

Passport Canada web site suffers serious breach

The Article has images
2007-12-05 11:51:09 by Evan Francen in The Breach Blog
...highlight it," said Michael Geist, a law professor at the University of Ottawa The reality is, even with the resources and the best security people, you're only as good as your weakest link," Prof. Geist said. "One mistake can result in significant security breaches that can put huge amounts of personal information at risk Comfyllama] A...
 
 
 
 
 
Expand article

Again, On Criticality of Logs

2007-12-07 08:32:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...highlight two pieces that, again, speak (No, scream! In fact, S-C-R-EA-M!) about the important of logs. Yes, my readers don't need additional motivation to take logs seriously, but these are just too cool to pass First is the interview with some convicted attacker , who said: 'Moore said it would have been easy for IT and security managers to...
 
 
 
 
 
Expand article

TSA Misses the Point, Again

2008-01-29 15:13:57 by schneier in Schneier on Security
 
...highlight tiny inscriptions found in borders of passports and other IDs. About 2,100 of each are going to the nation's 800 airport checkpoints The closer scrutiny of passenger IDs is the latest Transportation Security Administration effort to check passengers more thoroughly than simply having them walk through metal detectors More than 40...
 
 
 
 
 
Expand article

Top 11 Reasons to Analyze Your Logs

2008-02-20 16:56:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...highlight compliance-relevant messages? How to see which messages will lead to a violation? How do you satisfy those "daily log review" requirements? Thru automated analysis, of course Logs allow you to profile your users, your data and your resources/assets. Really? Yes, really: such profiling can then tell you if those users behave in an...
 
 
 
 
 
Expand article

Media and Our Mind - Risk is All About Perception

2008-01-23 07:22:32 by RaviC in Musings on Information Security
 
...highlight the most important risks. You are much more likely to lose data from human error or inadequately tested backup and recovery processes than from floods or attacks, but inadequate processes don't make good headlines. In addition, headlines fade quickly if something becomes frequent it's often less newsworthy, but the risk remains. Our...
 
 
 
 
 
Expand article

Grayware?

2007-03-07 07:11:45 by RaviC in Musings on Information Security
 
...highlight Grayware' is a term that regularly appears on IT and security professionals' radar screens today. An umbrella term applied to a wide range of applications that are installed on a user's computer to track and/or report certain information back to some external source, these applications are usually installed and run without the...
 
 
 
 
 
Expand article

Economics of secure software

2007-01-21 10:13:02 by RaviC in Musings on Information Security
 
...highlight of the article The software vendors have little economic incentive in churning out a secure product in the current marketplace. Holding a software liable (to an extent) for not making a secure product can not only force the software vendor to fix the problem but also provide economic incentive for