SEARCH RESULTS
 
Showing 1-10 of 12 records
 
Expand article

MUST-DO Logging for PCI?

2008-02-11 10:46:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...interpret (again, not simply 'read', but interpret!) the PCI DSS guidance (e.g. Requirement 10 that is dedicated to logging) in your own environment Our field engineers do interpret it for our log management platform customers; I provided an interpretation in my PCI book , etc. But, there is still no MUST list; just the following route PCI...
 
Tags: pci, pci dss rules, pci dss compliance, pci dss guidance, compliance, log, must-log-this, pci book, log management
 
 
 
 
Expand article

Grasping Security thru Visualization

2008-05-04 02:02:12 by JJ in Security Uncorked
 
...interpreting security and network data through visualization is relatively new- and I think youre going to be seeing a lot more of this in the coming months and years One of the things I have the pleasure of doing, is consulting with various manufacturers to see how they can make their products and interfaces more usable. Specifically, I try...
 
Tags: visualization, security, data, network data, security visualization, map data sources, splunk, splunk demo, download splunk
 
 
 
 
Expand article

Bogus Microsoft sweepstakes emails

2007-08-19 22:35:48 by Steve Riley in Steve Riley on Security
 
...interpret the subject line this way: "Congratulations! You've won the privilege of sending 500,000 pounds to Microsoft! Warm up your check book The email insists that you contact Mr. Peter Garry, Microsoft's "fiduciary agent." There are some capitalization errors in this particular sentence There are several official-looking reference...
 
Tags: microsoft sweepstakes, sweepstakes, microsoft, email, email insists, domain, american domain, subject line, emails
 
 
 
 
Expand article

Dilbert Does Canonicalization

The Article has images
2008-05-05 12:03:32 by Chris Eng in Zero in a bit
...interpret the %XX as a hex number, so %20 is the space character (decimal 32), %21 is an exclamation point (decimal 33) and so on. But why is it showing up in a Dilbert mashups My first thought was that someone must be poking around the Dilbert site looking for security holes. But then I noticed that it wasnt just the one strip; a lot of them...
 
Tags: dilbert, dilbert mashups, mashups, comic, dilbert website, daily comic, comics, un-funny punch lines, dilbert comics
 
 
 
 
Expand article

Why [Some] Smart People Hate Logs?

2008-05-08 11:20:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...interpret). However, there is a whole other group of fairly intelligent people who "hate logs:" the organizers of some well-known technical security conferences. The experience of many of my colleagues (and competitors!) and myself proves that a log-related talk will NOT be accepted to ANY technical security conference nowadays. Now, some...
 
Tags: logs, logs sexy, people, fairly intelligent people, data, index data, darn philosophical posts, experience, exact experience
 
 
 
 
Expand article

PC Tools Vista Security Stats: What do they really mean?

2008-05-12 12:51:25 by Editor in Adventures in Security
 
There are multiple ways to interpret test results. Without asking questions about the context in which the tests were conducted, it's difficult to truly understand what the results mean. This is a problem I've having with assertions made by PC Tools
 
Tags: interpret test results, results, tools, questions, tests, context, multiple, difficult, assertions
 
 
 
 
Expand article

Notes from IEEE Web 2.0 Security and Privacy Workshop (W2SP2008)

2008-05-27 22:45:00 by Security Retentive in Security Retentive
 
...interpret and enforce is a really hot idea right now, and I'm hoping to catch up with Mike in the not too distant future Mike - if you see this, drop me a note Session 3: Social Computing Privacy Issues Adrienne Felt and David Evans . Privacy Protection for Social Networking Platform Adrienne presented some work she's done on weaknesses in...
 
Tags: browser, browser security models, browser project, browser security model, security models, browser security, security, web, security challenges
 
 
 
 
Expand article

Trip Report: PH-Neutral

The Article has images
2008-05-28 20:56:40 by Chris Eng in Zero in a bit
...interpret that to mean disorganized or watered down in any way. It was run with stereotypical German efficiency, from badging to presentations to the after-hours parties. The presentations were just as technical and relevant as any of the more corporate conferences. Unfortunately for me, I dont know that many people in European security...
 
Tags: talk, james atkinsons talk, flash, flash movies, recent flash 0day, befs talk, dingy club, conference, european security conference
 
 
 
 
Expand article

Nuke Plant Shutdown Due To Upgrade

2008-06-08 02:53:15 by Dave Lewis in Liquidmatrix Security Digest
 
...interpret the lack of data as a drop in water reservoirs that cool the plants radioactive nuclear fuel rods. As a result, automated safety systems at the plant triggered a shutdown Um, whoops Article Link
 
Tags: plant, shutdown, single computer, safety systems, systems, data, computer, nuclear power plant, diagnostic data
 
 
 
 
Expand article

The Governments Top Hackers?