SEARCH RESULTS
 
Showing 1-10 of 719 records
 
Expand article

Choosing the Right Security Personnel

2008-06-19 16:25:46 by Editor in Help Net Security - Articles
 
In the new edition of the HNS podcast, Simon Heron from Network Box discusses why choosing the right security personnel is every bit as important as opting for the right security technology
 
Tags: security personnel, network box discusses, security technology, hns podcast, simon heron, bit, edition
 
 
 
 
Expand article

Memo to Next President: How to Get Cyber Security Right

2008-08-07 15:45:00 by Bruce Schneier in Wired Security
 
Obama has a cyber security plan It's basically what you would expect : Appoint a national cyber security advisor, invest in math and science education, establish standards for critical infrastructure, spend money on enforcement, establish national standards for securing personal data and data-breach disclosure, and work with industry and...
 
Tags: security, security standards, improvements, security improvements, information security, cyber security plan, research, government research, national security
 
 
 
 
Expand article

Are we asking the right questions often enough?

2008-09-09 07:13:47 by Editor in Adventures in Security
 
An increase in management's awareness of the importance of information security has come with a commensurate willingness to approve budget requests for security controls. But are security managers targeting the right challenges? Are they asking the right questions
 
Tags: approve budget requests, security controls, security managers, questions, information security, awareness, challenges, importance, increase
 
 
 
 
Expand article

How to Do Database Logging/Monitoring "Right"?

2007-12-13 11:26:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
So, people sometimes ask me about how to do database logging/auditing/monitoring and log analysis right. The key choice many seem to struggle with for database auditing and monitoring is reviewing database logs vs sniffing SQL traffic off the wire . Before proceeding, please look for more background on database log management , auditing and...
 
Tags: database, analyze database logs, database logs, database log review, database performance impact, database configuration, performance impact, database log management, log management
 
 
 
 
Expand article

Hacker Free Site?...Yeah, right.

2008-05-09 19:51:00 by Russ McRee in HolisticInfoSec.org
 
So as not to seemingly pick only on McAfee Hacker Safe, I thought it appropriate to show just how ridiculous the entire premise of calling anything Hacker Safe, Hacker Proof, and now WebSafe Shield Hacker Free Site really is. For you, dear reader, a new video for your streaming pleasure, courtesy of the WebSafe Shield Hacker Free Site My brother...
 
Tags: mcafee hacker safe, hacker safe, safe, courtesy, xss silliness courtesy, xss, websafe shield, mention xss, security vulnerabilities
 
 
 
 
Expand article

German Courts Rule on Spying in Cyberspace

2008-03-12 06:18:49 by schneier in Schneier on Security
 
Good ruling : The Federal Constitutional Court in Karlsruhe said cyber spying violated individuals' right to privacy and could be used only in exceptional cases More info : Germany's Federal Constitutional Court has rejected provisions adopted by the State of North Rhine-Westphalia that allowed investigators to covertly search PCs online. In its...
 
Tags: federal constitutional court, court, german, blanket covert online, covert online, privacy, pcs, pcs online, judges
 
 
 
 
Expand article

What Are You Managing Towards? (And On Disproving Risk Management)

The Article has images
2008-06-03 14:41:11 by Alex in RiskAnalys.is
First, Id like to thank Steve McCalmont for including FAIR in his excellent article in the May 2008 ISSA Journal, Streamlining the Risk Management Process. Three quick things to anyone who has read it and is visiting our blog for the first time We dont believe that the goal of Quantitative Risk Analysis is to be precise. We believe the goal is...
 
Tags: management, risk management, term risk management, management focuses, management approach, risk management process, patch management, cost management, upper management
 
 
 
 
Expand article

Privacy Policies: Perception vs. Reality

2008-09-04 13:15:54 by schneier in Schneier on Security
 
New paper: "What Californians Understand About Privacy Online," by Chris Jay Hoofnagle and Jennifer King. From the abstract : A gulf exists between California consumers' understanding of online rules and common business practices. For instance, Californians who shop online believe that privacy policies prohibit third-party information sharing. A...
 
Tags: california consumers overvalue, consumers, california consumers, privacy policy, consumers interpret, website, privacy policies, website operators, delete personal information
 
 
 
 
Expand article

US Government planning to spend 10% of its IT budget on cyber-security by 2009.

2008-02-25 13:59:58 by Khalid Kark in Security & Risk Management
 
This article in GSN caught my attention on the proposed IT budget numbers released by OMB (Office of Management and Budgets). The 10% spending on cyber-security may seem surprising to some, especially when compared to an average 8% of IT spend in the commercial sector across North America and Europe. As many of us have seen stagnation in our...
 
Tags: cyber-security, budget, cyber-security budget, security, government, measure security, security budgets, mature security postures, government infrastructure