SEARCH RESULTS
 
Showing 1-10 of 222 records
 
Expand article

Simple SNMP scans yield network data

2008-03-05 00:00:00 by HASH0x8473a30 in Network World on Security
 
System administrators have long been wary of the security implications of Simple Network Management Protocol (SNMP), but a recent experiment by "ethical hacking" group GNUCitizen has shown that many SNMP-enabled devices are left unguarded and may be prone to giving away sensitive information
 
Tags: snmp, recent experiment, sensitive information, security implications, system administrators, shown, prone, ethical, devices
 
 
 
 
Expand article

Writing simple scripts and functions in Windows PowerShell

2008-03-24 09:16:55 by David Aiken in WhatIs: Enterprise IT tips and expert advice
 
In the last of our four-part series on working with Windows PowerShell, this screencast explains how to write simple commands and utilize functionality with Microsoft's scripting language
 
Tags: windows powershell, simple commands, screencast explains, four-part series, language, functionality, microsoft
 
 
 
 
Expand article

Giving SQL Injection the Respect it Deserves

2008-05-15 18:45:00 by sdl in The Security Development Lifecycle
 
...simple set of rules is not a substitute for careful design, implementation, and test. The SDL is a holistic process that covers the software lifecycle end-to-end, so don't mistake these simple rules as a guarantee that you will avoid SQL injection problems. You need to understand the situations in which the rules apply. You may find, for...
 
Tags: sql, sql injection bug, sql injection requirements, sql injection attack, sql server, sql execute-only permission, malicious sql payload, sql injection, sql injection vulnerability
 
 
 
 
Expand article

Gemalto, McAfee introduce simple two-factor authentication

2008-05-14 00:00:00 by HASH0x8b68ad8 in Network World on Security
 
Gemalto and McAfee announced a new integrated solution that enables PC and laptop users secure and convenient access to fully encrypted disks through strong, secure, hardware-based, two factor authentication
 
Tags: secure, factor authentication, laptop users secure, mcafee, gemalto, convenient access, enables, strong, solution
 
 
 
 
Expand article

DIY Phishing Kits Introducing New Features

The Article has images
2008-05-15 14:11:43 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...simple kit (screenshots included), whose objective was to make it easy for a phisher already possessing the phishing page, to enter a URL where all the data would be forwarded to. Several months later, the kit went 2.0 (screenshots included) and introduced new preview, and image grabber features in order to make it easier for the phisher to...
 
Tags: features, kits, image grabber features, kits trend, diy, core features, proprietary kits, kit, simple kit
 
 
 
 
Expand article

Password policies. Once again.

2007-09-04 22:14:00 by Steve Riley in Steve Riley on Security
 
...simple passwords at least 15 characters long. Forget about complexity rules that force people to write down passwords. A simple 15-character passphrase (think short sentence) is easy to remember, quick to type, and far stronger than any short complex password. A passphrase like this will withstand any kind of automated password attack,...
 
Tags: account, enable account lockout, password, account lockouts, disable account lockout, 42-day default expiration, default, expiration, password expires
 
 
 
 
Expand article

The First Step on the Road to More Secure Software is admitting you have a Problem

2008-02-21 14:26:00 by sdl in The Security Development Lifecycle
 
...simple, he (and the entire senior management team for that matter) recognized Microsoft faced a problem that needed solving; the company needed to shore up the security of its products. So Bill sent his memo to get the ball rolling Now let's go back to Jeff's recent analysis. Cover up the Mac OS X and Linux stats for a moment so you can only...
 
Tags: vulnerabilities, reduce security vulnerabilities, fewer security vulnerabilities, security vulnerabilities, source security bugs, bugs, major microsoft products, microsoft products, security
 
 
 
 
Expand article

Is Risk-Based Security Really Possible?

2007-07-26 20:42:00 by Bryan in practical risk management
 
...simple, we'd all use ALE to plan our security strategies. But ALE is fundamentally wrong for for information security. I'll concede that ALE can be useful as a simple conceptual model for risk because it requires us to think about both of the factors that generally influence risk: Likelihood and Impact. But literal use of ALE for information...
 
Tags: security, information security, information security decisions, security management, security breach, breach, risk, wrong, ale hopelessly wrong
 
 
 
 
Expand article

Models and Reductionism - Reducing Clouds Into Streams

2008-04-14 01:17:58 by Greg Reemler in The Complex Event Processing Blog
 
...simple problem sets is an interesting, and sometimes valid,approach to complex event processing. Transformations can be useful, especially when well defined For example, CEP was evisioned as a new technology to debug relatively large distributed systems,discover hidden causal relationships in seemingly disconnected event space. This discovery...
 
Tags: complex event, complex, software tools, software, cep, cep products, reduce complex, cep software, reduce posets