SEARCH RESULTS
 
Showing 1-10 of 234 records
 
Expand article

Software and Security Separateness - You're Doing It Wrong

The Article has images
2008-05-30 08:55:19 by Gunnar Peterson in 1 Raindrop
...wrong way In the same way that you can get two separate things confused you can also get confused by thinking two things that are joined as being separate - if you think security is one thing and software development is another, you are doing both of them the wrong way. I had a coffee with a marketing person yesterday, he had been to my talk...
 
Tags: software, software-, software security, software security architectures, security, architectures, security properties, centers, strong centers
 
 
 
 
Expand article

All Security Is Wrong?

2008-02-12 16:01:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...wrong about security Father of anti-virus says to invest in security awareness training " (Mr Stiennon says 'forget it Security Today == Shooting Arrows Through Sunroofs of Cars? " (Mr Hoff agrees and disagrees I'd add more as more people opine About me: http://www.chuvakin.org
 
Tags: security, security awareness, security departments, log management class, wrong, people opine, hoff agrees, ntivirus inventor, peter tippett
 
 
 
 
Expand article

Security Matters: Lesson From the DNS Bug: Patching Isn't Enough

2008-07-23 19:00:00 by Bruce Schneier in Wired Security
 
...wrong. Kaminsky found the vulnerability by accident. There's no reason to believe he was the first one to find it, and it's ridiculous to believe he would be the last. Don't shoot the messenger. The problem is with the DNS protocol; it's insecure The real lesson is that the patch treadmill doesn't work, and it hasn't for years. This cycle of...
 
Tags: security, security engineer, security engineer brings, security holes, smart design choice, design, security engineers, kaminsky, dan kaminsky
 
 
 
 
Expand article

Windows Live OneCare has a Broken Light

The Article has images
2008-01-16 04:27:00 by Keith Brown in Security Briefs
...wrong, or red if there's something really wrong. For example, it'll glow red while your firewall is disabled By the way, that's one thing I really like about this product. In Windows XP, if you wanted to turn off the firewall, you could, but then you'd have to remember to turn it back on. With OneCare's replacement firewall, you get a more...
 
Tags: onecare, windows, windows live onecare, contact onecare support, onecare dashboard, light, wrong, firewall, replacement firewall
 
 
 
 
Expand article

Making Threat Modeling Work Better

The Article has images
2007-10-17 00:23:53 by sdl in The Security Development Lifecycle
...wrong As people kept doing it, I decided to swallow my pride and accept it. I now tell people to put their trust boundaries wherever they believe one exists. And theyve continued exactly as before, but Im a lot happier, because Ive found a way to help them draw more detailed diagrams where they need them. Which includes anywhere a trust...
 
Tags: threat, process, process helps ensure, developers threat model, database design process, security, trust boundaries, threat model, security experts
 
 
 
 
Expand article

My 2008 Security Predictions!

2008-01-09 15:42:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...Wrong problems, wrong solutions, wrong speed (as in: solving solved problems of day before yesterday...). There will be some exceptions: for example, some of the Project Honeynet academic participants deliver a punch Secure coding becomes mainstream = no (definitely, 'not yet' on this one) It pains me to say that that I think that while this...
 
Tags: security, security predictions, broader information security, information security, smb security, virtual security appliances, security market, security solutions, security software
 
 
 
 
Expand article

Is Risk-Based Security Really Possible?

2007-07-26 20:42:00 by Bryan in practical risk management
 
...wrong for for information security. I'll concede that ALE can be useful as a simple conceptual model for risk because it requires us to think about both of the factors that generally influence risk: Likelihood and Impact. But literal use of ALE for information security decisions is problematic to say the least The problem with ALE is that...
 
Tags: security, information security, information security decisions, security management, security breach, breach, risk, wrong, ale hopelessly wrong
 
 
 
 
Expand article

Babies and bath water

The Article has images
2008-03-21 16:13:09 by HASH0x8b4bc58 in StillSecure, After All These Years
...wrong at Lockdown Chris makes some good points about the Lockdown shutdown. One in particular that I think we should all realize is that Lockdown's failure is not a failure of NAC technology, but rather a failure of Lockdown's execution. NAC still solves problems that customers have. Done right, NAC is valuable and will find its place in the...
 
Tags: nac, cover nac, nac technology, nac sucks, nac solutions, nac companies, live nac, lockdown, lockdown networks
 
 
 
 
Expand article

Productivity vs Security

2008-02-05 11:13:00 by Allen Baranov, CISSP in Security Thoughts
 
...wrong or the information security is wrong If you tack on security after the fact your thinking will always be wrong Example A sales-rep is always on the road. Because he lives in the North part of town that is where his customers are. He has a list of customers and their details in his laptop. He also has their buying trends and banking...
 
Tags: security, productivity, information, sync information, time information, security controls, information security, security theory, increase productivity