SEARCH RESULTS
 
Showing 1-10 of 20 records
 
Expand article

IT Risk Management vs. Information Security survey

The Article has images
2007-12-28 15:21:00 by Ryan Shopp in practical risk management
...tactical = security). Another thing to realize is IT risk encompasses more then technical control monitoring/management solutions ( that is only 50% of the scope as discussed in my previous post) . IT Risk also spans people & processes (e.g., non-technical controls). Since that typically requires getting into process improvement it is...
 
Tags: risk management, risk, risk management lead, security, strategic, strategic initiative due, risk encompasses, security prediction, prediction
 
 
 
 
Expand article

A Portfolio of Fake Video Codecs

The Article has images
2008-03-19 17:27:56 by HASH0x8b5b564 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...tactical warfare front the output of a malicious IFRAME campaign is often neglected from the perspective of lacking the two/three layered IFRAME-ing and redirection that the malicious parties usually implement at the beginning of the campaign. Basically, the over twenty fake video codecs domains are hosting the same binary in the form of a...
 
Tags: single zlob variant, zlob variant, zlob, zlob malware variant, net, malware, domains, huge domains portfolio, dvdaccess
 
 
 
 
Expand article

Detection Rates for Malware in the Wild

The Article has images
2008-04-30 04:58:01 by HASH0x8af6948 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...tactical warfare on the vendors infrastructure by supplying more malware variants than then can timely analyze, this tactical warfare on behalf of the malicious parties is only going to get more efficient
 
Tags: malware, signatures based malware, malware authors, source malware, malware threat center, malware binaries, binaries, vendors, vendors infrastructure
 
 
 
 
Expand article

Ask the Auditor: Who is Responsible for Information Security?

2007-12-29 06:24:50 by Editor in Security Links
 
...tactical value to an organizations operations. For example, internal auditing Tells the board and management whether business units understand the importance of security and adhere to policies; whether key information assets and systems are secure; and whether programs are in place for continually updating and strengthening safeguards against...
 
Tags: information, information security, information policy, information security risks, information assurance, information security governance, information security managers, information security management, assign information security
 
 
 
 
Expand article

Corporate Spying

2008-01-16 12:21:41 by schneier in Schneier on Security
 
...tactical behavior assessment, it relies on dozens of verbal and nonverbal cues to determine whether someone is lying. Signs of potential deception include meandering off topic rather than sticking to the facts and excessive personal grooming, such as nervously picking lint off a jacket. This method was developed by former lie-detector experts...
 
Tags: agents, intelligence agents, wal-mart, off-duty police officers, officers, wal-mart employee fired, cell-phone calls, phone calls, obtain
 
 
 
 
Expand article

IPs Now Private Info?

2008-01-22 13:49:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...tactical, into "PII collection efforts" with heavy privacy price to pay Now I have to share the dirty, evil thought that crossed my mind when read it: at one point, Google and other companies should just boycott those "' dumb privacy' freaks" and conduct a wonderful experiment: how long those Europeans will survive without search engine...
 
Tags: privacy, privacy chasm, dumb privacy, data privacy regulators, heavy privacy price, org outline, implication, org, pretty dramatic implication
 
 
 
 
Expand article

Heavily Armed Officers on New York City Subways

2008-02-07 06:06:42 by schneier in Schneier on Security
 
...tactical plan called Operation Torch, the officers will board trains and patrol platforms, focusing on sites like Pennsylvania Station, Herald Square, Columbus Circle, Rockefeller Center and Times Square in Manhattan, and Atlantic Avenue in Brooklyn What does it accomplish besides intimidating innocent commuters
 
Tags: patrol platforms, subway system daily, patrol, tactical plan, officers, rockefeller center, city, times square, herald square
 
 
 
 
Expand article

On "silent explosion of log management"

2008-02-12 15:15:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...tactical task at the bottom of the IT stack. Maybe in the past this was true, but in today's world, information is power and logs are device-specific information About me: http://www.chuvakin.org
 
Tags: log management, log management snowball, management, log management appears, network information system, information, silent explosion, device-specific information, logs
 
 
 
 
Expand article

The FirePack Web Malware Exploitation Kit

The Article has images
2008-02-20 08:38:26 by HASH0x8b2b43c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...tactical warfare from a marketing perspective, malicious parties are fighting for "hearth share" of their potential customers through active branding like the case with this malware kit. In a frontal competition attack aimed at IcePack , the authors of FirePack are pitching yet another "copycat" web exploitation malware kit for purchase at...
 
Tags: nuclear malware kit, malware kit, kit, metaphisher malware kit, malware exploitation kit, malware kits permanently, javascript obfuscation technique, source malware kits, major differentiation factors