SEARCH RESULTS
 
Showing 1-10 of 105 records
 
Expand article

Four stages to establishing a successful IT Risk Management Lifecycle

The Article has images
2007-11-27 13:24:00 by Ryan Shopp in practical risk management
...successful IT Risk Management Lifecycle by: Ryan Shopp I recently came across this article from Symantec called IT Risk Management: Five Steps to Get from Good to Great . After reading it I found myself noticing it's similarity to a four step process I picked up in my early consulting days at International Network Services (INS) that seems...
 
Tags: risk management lifecycle, risk management, management, step process, step life cycle, step, process, time, peers
 
 
 
 
Expand article

Magic formula for successful performance testing

2008-04-10 16:39:54 by Scott Barber in WhatIs: Enterprise IT tips and expert advice
 
Is there a magic formula to ensure successful performance testing? Not really. But Scott Barber points out what factors contribute to a testing projects success or failure
 
Tags: magic formula, ensure successful performance, projects success, scott barber, factors contribute, failure
 
 
 
 
Expand article

10 tips for a successful video rollout

2008-04-14 00:00:00 by HASH0x8472c44 in Network World on Security
 
Here are 10 tips network managers should follow for a successful video deployment
 
Tags: successful video deployment, tips network managers, follow
 
 
 
 
Expand article

Giving SQL Injection the Respect it Deserves

2008-05-15 18:45:00 by sdl in The Security Development Lifecycle
 
...successful exploitation of user input which is not correctly verified This defense has been known about forever; heck, David and I discussed this in detail in the first edition of Writing Secure Code in 2002 From page 320, "Another way to perform this kind of processing is to use placeholders which are often referred to as parameterized...
 
Tags: sql, sql injection bug, sql injection requirements, sql injection attack, sql server, sql execute-only permission, malicious sql payload, sql injection, sql injection vulnerability
 
 
 
 
Expand article

Bots + Web Vulnerabilites - An Approaching Storm

2008-05-15 21:55:13 by Bill in Grumpy Security Guy
 
...successful but SQL Injection is a vulnerability that is on the decline (and will decline even more after this attack). I begin thinking about vulnerabilities that would do the same thing but have a much broader reach Our good friends XSS and CSRF So here is the attack Find a few permanent XSS vulnerabilities in some high traffic sites Find...
 
Tags: vulnerabilities, permanent xss vulnerabilities, xss, sql injection, attack shortly, attack, mass sql injection, web vulnerabilites, browser vulnerabilities
 
 
 
 
Expand article

Core Program Practices: Assess, Implement and Monitor

The Article has images
2008-03-13 11:00:46 by Micki Krause in BlogInfoSec.com
...successful program. These traits, sometimes called the soft skills of security management, are increasingly important as security risk management becomes a predominant Board room conversation Readers may assume that if not otherwise documented, the references are derived from the newly published anthology, CISO Leadership: Essential...
 
Tags: security program, effective security program, security, shape security strategies, security requires, risk management, security risk management, security experts, security leader
 
 
 
 
Expand article

Crimeware in the Middle - Zeus

The Article has images
2008-04-24 04:37:46 by HASH0x8ae4648 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...successful authentication Removing POST-needed data on the right URL Ideal Virtual Keylogger solution: After a call to the requested URL, a screenshot happening in the area, where was clicking Receiving certificates from the repository "MY" (certificates marked "No exports" are not exported correctly) and its clearance. Following is any...
 
Tags: zeus, file, remote file, zeus trojan, binary file, file system32 drivers, kit, metaphisher kit, configuration file
 
 
 
 
Expand article

Best Practices For DLP Content Discovery: Part 4

2008-04-29 18:01:19 by rmogull in securosis.com
 
...successful deployments isnt a technology weakness, but rather the failure of the enterprise to understand what to protect, decide how to protect it, and recognize whats reasonable in a real-world environment Setting Expectations The single most important factor for any successful DLP deployment content discovery or otherwise is properly...
 
Tags: content, business, protect content type, protect, business units, content policies, business unit, workflow capabilities, business unit contact
 
 
 
 
Expand article

Universal Man-in-the-Middle Phishing Kit why is this even news?

2007-01-24 00:00:00 by Uriel Maimon in Speaking of Security, the RSA Blog and Podcast
 
...successful industry (and who wouldn't call the fraud industry successful
 
Tags: fraud industry successful, universal, past month, successful industry, shady characters, people, kits, kit, bit