SEARCH RESULTS
 
Showing 1-10 of 37 records
 
Expand article

CHECKLISTS ARE NOT FOR DUMMIES, BUT THEY SURE ARE DUMB!

The Article has images
2008-06-11 13:51:33 by Alex in RiskAnalys.is
...Wisdom : Synthesis from the analysis. The So moment. So since there are many statements of authority made in the article that I can refute on evidence, I should be open but skeptical about whether the conclusions of this article are likely to have much value to me in my quest to understand the value of risk reducing investments. What Ive...
 
Tags: checklists, article checklists, article, mmmmm-mmmmmmm checklists, nice checklists, provide analysis, provide, nature, nature statement
 
 
 
 
Expand article

Sensitive Milwaukee County information posted to Web

The Article has images
2008-02-13 17:06:24 by Evan Francen in The Breach Blog
...wisdom" of Barrett's office forwarding confidential information included in its vendor database in response to a public record request by the group Evan] What wisdom County Executive Scott Walker said he had not heard of any complaints from anyone whose confidential information was placed on the Internet for nearly a week Barrett said he...
 
Tags: milwaukee county, milwaukee county officials, information, county, county officials, sensitive personal information, confidential information, county clerk, county records crg
 
 
 
 
Expand article

Audit/Monitor Controls or Audit/Monitor BEFORE Control?

The Article has images
2008-02-28 11:38:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
...wisdom got mired in one phase (e.g. in trying to get authentication under control) and ended up having no audit whatsoever: in other words, they are flying blind while implementing controls! Second, in some cases controls (authentication, authorization, administration) will actually be impossible to implement, while audit will be possible....
 
Tags: audit, broadly includes audit, broadly, includes, audit whatsoever, full-blown audit capability, paper, paper clarifies, controls
 
 
 
 
Expand article

The DDoS Attack Against CNN.com

The Article has images
2008-04-22 19:30:53 by HASH0x8b2d1ec in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...wisdom in terms of botnets used speaks for itself, this is China hacktivism and therefore common wisdom does not apply in an unrestricted warfare situation, and best of all data speaks for itself Through the use of DIY DDoS Tools Besides anticnn.exe which I assessed in a previous post, there's also the Supper DDoS tool that as it appears...
 
Tags: ddos, ddos-ing cnn, cnn, ddos people, warfare, information warfare attack, attack, ddos attack, chinese script kiddies
 
 
 
 
Expand article

Why even having health insurance is not enough anymore

The Article has images
2008-05-04 15:13:07 by HASH0x8b625c8 in StillSecure, After All These Years
...wisdom tooth with a cyst around it. My dental insurance covered the wisdom tooth, but the cyst removal would be considered under my regular insurance and my dentist was not participating. In fact I could not find a participating oral surgeon in the area. So I had to an extra $600 dollars out of pocket and of course my out-of-network...
 
Tags: insurance, health insurance, premiums, employees insurance premiums, insurance company pays, regular insurance, insurance company, care, health care system
 
 
 
 
Expand article

How effective is the wisdom of crowds as a security mechanism?

2007-12-21 15:26:10 by Tyler Moore in Light Blue Touchpaper
 
Over the past year, Richard Clayton and I have been tracking phishing websites . For this work, we are indebted to PhishTank , a website where dedicated volunteers submit URLs from suspected phishing websites and vote on whether the submissions are valid. The idea behind PhishTank is to bring together the expertise and enthusiasm of people...
 
Tags: phishtank, phishtank compare, leaves phishtank, users, phishtanks users, vote maliciously, vote, active users, urls
 
 
 
 
Expand article

Censoring Web 2.0 - The Access Denied Map

The Article has images
2007-12-03 10:31:55 by HASH0x89e8c58 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...wisdom of crowds, whose collective intelligence can in fact act as an early warning system , it's also important to educate those who cannot freely express their opinion on the process of expressing it
 
Tags: information online, online, anti-censorship, global anti-censorship network, online censorship, bloggers figure, global voices advocacy, bloggers, online activists
 
 
 
 
Expand article

Making Threat Modeling Work Better

The Article has images
2007-10-17 00:23:53 by sdl in The Security Development Lifecycle
...wisdom to know the difference, but, first, its too long, and second, if we started that way, it would be wrong to add beer or scotch
 
Tags: threat, process, process helps ensure, developers threat model, database design process, security, trust boundaries, threat model, security experts
 
 
 
 
Expand article

My 2008 Security Predictions!

2008-01-09 15:42:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...wisdom of Richard Feynman in mind: if you predict the status quo, you are more likely to be correct Here is my 'twitter-style' (I guess what used to be called telegraph-style :-)) view of predictions in no particular order Platform security Vista makes us secure = no . People start to actually use it (in large numbers) = maybe. And then get...
 
Tags: security, security predictions, broader information security, information security, smb security, virtual security appliances, security market, security solutions, security software