SEARCH RESULTS
 
Showing 1-10 of 92 records
 
Expand article

Third Annual Movie-Plot Threat Contest Winner

2008-05-15 06:24:06 by schneier in Schneier on Security
 
On April 7 -- seven days late -- I announced the Third Annual Movie-Plot Threat Contest: For this contest, the goal is to create fear. Not just any fear, but a fear that you can alleviate through the sale of your new product idea. There are lots of risks out there, some of them serious, some of them so unlikely that we shouldn't worry about...
 
 
 
 
 
Expand article

Third Annual Movie-Plot Threat Contest

2008-04-07 15:50:38 by schneier in Schneier on Security
 
I can't believe I let April 1 come and go without posting the rules to the Third Annual Movie-Plot Threat Contest. Well, better late than never For this contest, the goal is to create fear. Not just any fear, but a fear that you can alleviate through the sale of your new product idea. There are lots of risks out there, some of them serious, some...
 
 
 
 
 
Expand article

Third Annual Movie-Plot Threat Contest Semi-Finalists

2008-05-07 14:33:13 by schneier in Schneier on Security
 
A month ago I announced the Third Annual Movie-Plot Threat Contest: For this contest, the goal is to create fear. Not just any fear, but a fear that you can alleviate through the sale of your new product idea. There are lots of risks out there, some of them serious, some of them so unlikely that we shouldn't worry about them, and some of them...
 
 
 
 
 
Expand article

Students breach Williamsville Central School District security

The Article has images
2008-04-15 15:12:32 by Evan Francen in The Breach Blog
Technorati Tag: Security Breach Date Reported 4/12/08 Organization Williamsville Central School District the largest suburban school district in Western New York, Williamsville Central encompasses 40 square miles including portions of the towns of Amherst, Clarence and Cheektowaga Contractor/Consultant/Branch Williamsville North High School...
 
 
 
 
 
Expand article

Malware Serving Exploits Embedded Sites as Usual

The Article has images
2008-01-09 18:04:58 by HASH0x8957398 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
The combination of the recent RealPlayer exploit and MDAC is a fad, but the very same is getting embraced in the short-term by malicious parties in China that have also started combining the Internet Explorer VML Download and Execute Exploit (MS07-004), thanks to recent localized forum postings on modifying the third exploit. Let's assess...
 
 
 
 
 
Expand article

The National Cyber Exercise

2008-02-06 13:29:21 by Burton Group in Security and Risk Management Strategies Blog
 
Blogger: Trent Henry It sounds so august: "CYBER STORM" (ok, officially it's just plain ol' "Cyber Storm," but a title like that begs for caps What is it? Or rather, what was it? The "National Cyber Exercise" was a 2006 Homeland Security (and other federal agencies) sponsored simulation of computer and network attacks. Here's the specific detail...
 
 
 
 
 
Expand article

The National Cyber Exercise

2008-02-06 13:29:21 by Burton Group in Security and Risk Management Strategies Blog
 
Blogger: Trent Henry It sounds so august: "CYBER STORM" (ok, officially it's just plain ol' "Cyber Storm," but a title like that begs for caps What is it? Or rather, what was it? The "National Cyber Exercise" was a 2006 Homeland Security (and other federal agencies) sponsored simulation of computer and network attacks. Here's the specific detail...
 
 
 
 
 
Expand article

Microsoft SDL Process in detail

2008-04-09 19:13:00 by sdl in The Security Development Lifecycle
 
Hello all Dave here I am currently at RSA and decided to take a few moments to blog about some updates to the Security Development Lifecycle. Admittedly, I have been radio silent on the blog for awhile for those that know me, thats usually a warning signal that I am cooking something up Anyway, back when we first started this blog we promised...
 
 
 
 
 
Expand article

Model Validation - Not Just for Quants

2006-12-26 05:10:00 by Jomni in Risk Management Quant
 
In an article recently published in the ERisk Monthly Newsletter , it is stated that model validation is not a purely quantitative endeavor. Below is a quote from the article Model validation is often thought of as a rather technical and mathematical exercise. However, bank losses from model risk are often caused by poor governance of the...
 
 
 
 
 
Expand article

Botnets, Fastflux and DDoS in D.C.