SEARCH RESULTS
 
Showing 1-10 of 28 records
 
Expand article

Interview with Josh Corman, Principal Security Strategist for IBM Internet Security Systems

2008-04-29 21:25:00 by Editor in Help Net Security - Articles
 
Joshua Corman serves as Principal Security Strategist for IBM Internet Security Systems. With more than ten years of experience in security and networking software development, Corman is responsible f
 
Tags: corman, security, principal security strategist, joshua corman serves, software development, responsible, experience
 
 
 
 
Expand article

Show 021 - A Panel Discussion with Cigitals Principals

The Article has images
2007-12-21 20:40:32 by rmacmich in The Silver Bullet Security Podcast
...principals. Participants include Sammy Migues (Director of Training and Knowledge Management), John Steven (Principal Consultant) and Pravir Chandra (Principal Consultant). The group discusses the best ways for large companies to get started with software security and the similarities between CLASP, Microsofts SDL, and the Security...
 
Tags: software security, security, principal consultant, cigitals principals, panel discussion, security touchpoints, owasp top, owasp, justice league blog
 
 
 
 
Expand article

Williamson County Schools learns of breach reported nine months ago

The Article has images
2008-07-13 00:12:01 by Evan Francen in The Breach Blog
...principal who had been contacted by a parent brought this to our attention on June 26th The information given to us indicated that our assessment specialist, Chris Nugent, was involved. This was the first we had heard of this situation We began our investigation immediately asking Mr. Nugent to gather all data that could possibly be...
 
Tags: school, school students, schools, williamson county schools, williamson county, county, breach, school authorities, school district
 
 
 
 
Expand article

Better exception reporting in ASP.NET part 2

2008-08-04 14:11:14 by keith-brown in Security Briefs
 
...Principal != null ) name = webRequestInfo.Principal.Identity.Name; formatter.AppendLine( string .Format( "Request URL: {0}" , webRequestInfo.RequestUrl)); formatter.AppendLine( string .Format( "Request path: {0}" , webRequestInfo.RequestPath)); formatter.AppendLine( string .Format( "User name: {0}" , name ?? "[ANONYMOUS]" ));...
 
Tags: return, return subjectbuilder, return formatter, exception, formatter, crazy formatter, static void, static void emitprocessinfo, return null
 
 
 
 
Expand article

The Importance of Advance Planning in Executive Protection

2008-10-12 20:10:00 by John Sexton in The Bullet Proof Blog
 
...Principal arrived out with the other protective agents. Very accurately, he described the need to cover every minute detail from the routes of travel to the alternative routes and to include such important features as local hospitals should medical treatment be needed Another important point highlighted was the need for agents to have access...
 
Tags: detail, security detail, current political situations, advance, situations, 2nd annual conference, gain hisher admiration, agents, routes
 
 
 
 
Expand article

Speaking of Security Podcast #73

2007-08-20 00:00:00 by Podcast Producers in Speaking of Security, the RSA Blog and Podcast
 
Click here to listen/download (08:06 Matt Buckley discusses the state of data security with Paul Stamp , Principal Analyst, Forrester Research. Paul is a leading expert on enterprise security technology, focusing on security architecture, and data security technologies, such as enterprise encryption
 
Tags: data security technologies, data security, paul stamp, enterprise security technology, matt buckley discusses, paul, forrester research, security architecture, principal analyst
 
 
 
 
Expand article

PrincipalPermissionAttribute and Static ctor Leads to DoS

2007-12-03 09:03:00 by Keith Brown in Security Briefs
 
...PrincipalPermissionAttribute at the class level in a certain scenario under WCF. I recommended caution in my guidebook , because of the nasty type load exception that you can run into if the first request to the class is denied by the attribute Be careful about using this attribute at the class level. If the class to which you apply it...
 
Tags: class sensitive, sensitive, class, class level, static constructor, inside static constructor, class program, static constructor leads, static void
 
 
 
 
Expand article

Show 014 - An Interview with Peter Neumann

The Article has images
2007-05-22 17:04:03 by rmacmich in The Silver Bullet Security Podcast
...Principal Scientist at the SRI Computer Science Laboratory. In this show, Gary and Peter discuss the most important changes in computer security since the 1960s, the discipline involved in early Multics engineering (nodody writes a line of code without the approving authorities [having] read and understood the specification), why DRM is the...
 
Tags: multics, multics history project, general-purpose file system, file system, peter neumann, wrong, risks, brooklyn boogaloo blowout, wrong solution
 
 
 
 
Expand article

The New Threat Modeling Process

The Article has images
2007-10-02 01:15:35 by sdl in The Security Development Lifecycle
...principal can access an object, such as a file or process c. If your trust boundary crosses something which isnt a data flow, you need to break it into two logical elements, or draw a sub-diagram with more details. (This is different advice: we used to tell people trust boundaries could only cross data flows. People drew them anywhere that...
 
Tags: process, threat, process validation entails, threat model, software process diagram, people, people trust boundaries, love threat, hamster wheel
 
 
 
 
Expand article

Hacking Power Networks

2008-01-22 14:24:55 by schneier in Schneier on Security