SEARCH RESULTS
 
Showing 1-10 of 73 records
 
Expand article

New Paper "Five basic mistakes of security policy"

2008-02-29 09:14:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...mistakes of security policy." The actual mistakes are Not having a policy Not updating the security policy Not tracking compliance with the security policy Having a "tech only" policy Having a policy that is large and unwieldy Indeed, the stuff is pretty basic, but that is exactly the intention About me: http://www.chuvakin.org
 
Tags: policy, security policy, basic mistakes, pretty basic, actual mistakes, paper, compliance, org, tech
 
 
 
 
Expand article

Just-patched Excel makes calculation mistakes

2008-03-14 13:00:00 by Editor in Computerworld Security News
 
One of the 12 patches Microsoft issued Tuesday causes the spreadsheet application to make mistakes in some calculations
 
Tags: mistakes, spreadsheet application, patches microsoft, calculations, tuesday
 
 
 
 
Expand article

Full Presentation "Six Mistakes of Log Management" Released

2008-04-23 19:04:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
As you know, I release my presentations on Slideshare when I get tired of them The time for releasing my famous "Six Mistakes of Log Management" has come View | Upload your own About me: http://www.chuvakin.org
 
Tags: log management, mistakes, org, time, release, famous, slideshare, view, tired
 
 
 
 
Expand article

Binghamton University mistaken email exposes students

The Article has images
2008-03-19 14:10:22 by Evan Francen in The Breach Blog
...mistakes Overwork. Employees that are overworked and rushed make more mistakes Poor awareness. Improved awareness equates to less mistakes Technological conveniences. In this can, I think of Outlook and the auto-complete functions when addressing emails. It saves me time by not having to type the entire email address, but I can easily...
 
Tags: university, students, management students vulnerable, management, binghamton university students, select students, email, binghamton university, social security
 
 
 
 
Expand article

The Ethics of Vulnerability Research

2008-05-14 11:29:45 by schneier in Schneier on Security
 
...mistakes--mistakes in specification and design, but mostly mistakes in programming. Any large software package will have thousands of mistakes. These vulnerabilities lie dormant in our software systems, waiting to be discovered. Once discovered, they can be used to attack systems. This is the point of security patching: eliminating known...
 
Tags: software security experts, software, vulnerabilities nurtures, vulnerabilities, exploitable vulnerabilities, vulnerabilities lie dormant, security vulnerabilities, computer, computer security experts
 
 
 
 
Expand article

Hackers get busted

2007-11-30 11:08:26 by Dan Cvrcek in Light Blue Touchpaper
 
...mistakes, what sort of mistakes? How can isolation influence someones behaviour, what is the importance of external opinions on objectivity When we write a paper, we very much appreciate when someone is willing to read it, and give back some feedback. It allows to identify loopholes in thinking, flaws in descriptions, and so forth. The...
 
Tags: hackers, procedures, reconstruct operational procedures, hacker themself, tools, mistakes, hacker, bright, bbc news
 
 
 
 
Expand article

Franklin University student information posted on Web

The Article has images
2008-01-30 18:33:19 by Evan Francen in The Breach Blog
...Mistakes will happen, so you should count on them happening. Many mistakes can be averted through effective information security training and awareness, and many mistakes can be minimized through effective incident response procedures and testing Past Breaches Unknown
 
Tags: franklin university, franklin, students, students andor alumni, information, franklin university identification, franklin university students, class information, sensitive personal information
 
 
 
 
Expand article

Making Threat Modeling Work Better

The Article has images
2007-10-17 00:23:53 by sdl in The Security Development Lifecycle
...mistakes designing a database, and someone who isnt a security expert may make mistakes in security. For example, someone might try to use encryption to mitigate tampering threats. (The SDL crypto requirements cover this, and I try to gently correct them to integrity mechanisms like MACs or signatures.) This is a reality that we have to...
 
Tags: threat, process, process helps ensure, developers threat model, database design process, security, trust boundaries, threat model, security experts
 
 
 
 
Expand article

J.C. Penney customers affected by lost GE Money backup tape

The Article has images
2008-01-18 10:24:59 by Evan Francen in The Breach Blog
...mistakes Evan] Mr. O'Neill makes a valid point. Iron Mountain handles millions of tapes. According to their web site, they handle data storage (and protection) for over 90,000 organizations in 26 countries. Eventually a tape will go missing. I don't place much blame on Iron Mountain as I do on GE Money declined to identify the other...
 
Tags: penney, penney customers, tape, backup tape, money, sensitive personal information, personal information, penney card immediately, information security practices
 
 
 
 
Expand article

An internal breach at the University of Toledo exposes 6,500

The Article has images
2008-04-13 21:14:52 by Evan Francen in The Breach Blog