tagged w/ IIA
-
Cyber Security Awareness Month is a waste of time, energy, and tax payer money. All of which could be spent on improving security within the Federal government. They are the ones who are getting infected by malware spread by USB devices, or having their email read or their fighter jet designs stolen. They are the ones that cannot articulate a cyber defense strategy well enough to entice someone to take on the top job…Cyber Security Awareness Month is a waste of time, energy, and tax payer money. All of... more
-
-
We’ve just published the latest guide in our ‘Securing Social Media’ series. We advise companies to block the use of P2P on the corporate network where not related to business use, and implement security guidelines to limit future risk.We’ve just published the latest guide in our ‘Securing Social Media’... more
-
-
Your email is as firmly established as an identity as a credit report- it contains details of your finances, address history, and birthday just as a credit report would. Your address book may reveal your mother’s maiden name, and a compromise of the account could easily reveal your tax information or social security number. A compromise of this account could be devastating.Your email is as firmly established as an identity as a credit report- it contains... more
-
-
While the real thing may take time, some budget lobbying, and the guts to admit that you are not perfect, here instead is a very fast security self-assessment which will give you a rough idea of where you stand.While the real thing may take time, some budget lobbying, and the guts to admit that... more
-
-
As sites like Facebook, LinkedIn and Twitter have grown more popular, they have become a hot target for hackers. According to Kaspersky Lab, malicious code distributed via social networking sites is ten times more effective than malware spread via e-mail. Here are the Top 8:As sites like Facebook, LinkedIn and Twitter have grown more popular, they have become... more
-
-
The majority of IT security spending is focused on perimeter security. These measures are reactive in nature. “With the advent of Web Services and SOA, the attack surface is more exposed and is getting more complex. The more complex a system is, the easier it is to compromise. Security should be considered early in the software development process.The majority of IT security spending is focused on perimeter security. These measures... more
-
-
Seattle man used Limewire for identity theft; CA auto-immune update trashes systems; U.S. appeals court cans CAN-SPAM suit; ‘Zeus Bot’ in Internet postcards; Storage reliability questioned after high profile outages; UC Berkeley School of Journalism server hacked; ActiveX overhaul in Microsoft patch batch; Microsoft Releases August Security Bulletin; WordPress bug resets admin password; Twitter knocked offline once again; UPS forced to encrypt devices after data breach…Seattle man used Limewire for identity theft; CA auto-immune update trashes systems;... more
-
-
Casey Coleman, GSA CIO, has previously stated that cloud computing is the best way for government technology to move forward. To support this effort, the agency is encouraging an active dialog with industry professionals on possible future standardization issues such as…Casey Coleman, GSA CIO, has previously stated that cloud computing is the best way for... more
-
-
The terrain is more than the physical place, it is also, the people there, their thoughts, actions and motives as well as other resources at your disposal. Also at the adversary disposal. All this must be considered to be successful.The terrain is more than the physical place, it is also, the people there, their... more
-
-
While the word “encrypt” does not occur even once within the ARRA, the guidance that the Department of Health and Human Services (HHS) provides for complying with the HITECH Act portion of the ARRA is full of encryption direction.While the word “encrypt” does not occur even once within the ARRA, the... more
-
-
More organizations are using managed security services, where security functions such as vulnerability assessment and network firewall monitoring are offered to clients as a service. These services offer potential benefits to organizations that lack the internal security resources. They also present risks…More organizations are using managed security services, where security functions such... more
-
-
Both network vendors and PC vendors should wake up to the new reality that there is another layer of change on top of the ever increasing bandwidth, application, and storage requirements. A change in the threats.Both network vendors and PC vendors should wake up to the new reality that there is... more
-
-
People get so upset, understandably, when an organization loses a laptop with SSNs, or has one stolen. But now, upon hearing that crooks don’t even need to steal SSNs, but can just generate them from commonly known information and use them until the victims discover the crimes, it is puzzling why so many people don’t see this as something to be concerned with, and to demand changes for.People get so upset, understandably, when an organization loses a laptop with SSNs, or... more
-
-
Knowledge is paramount in our efforts to understand our “climate” when it comes to conflict, it’s causes, how it’s fueled by the feeling of loss of control, and how it either unfolds progressively over time or rapidly without notice. The extremes, ups and downs of emotions that spur loss of individual control and can lead to hot conflicts, dangerous encounters and unpredictable results.Knowledge is paramount in our efforts to understand our “climate” when it... more
-
-
Small and medium sized businesses (SMBs) are an attractive target for identity thieves. According to the Institute of Consumer Financial Education (ICFE), SMBs usually qualify for larger lines of credit, “enjoy extended payment terms and less transactional scrutiny for large purchases or high value ticket items than individual customers.”Small and medium sized businesses (SMBs) are an attractive target for identity... more
-
-
On July 29th, as I was following up on a story that flashed across my Twitter stream about 30 certified employees of a school district finding themselves victims of ID theft, I found something that should not have been there...On July 29th, as I was following up on a story that flashed across my Twitter stream... more
-
-
RSA, the Security Division of EMC recently released several research reports that examine the far-reaching security implications of promising technologies such as cloud computing, virtualization, social networking and mobile communications, and explore the pivotal business risks and rewards they represent to organizations worldwide.RSA, the Security Division of EMC recently released several research reports that... more
-
-
The US Defense Information Systems Agency announced that it is going to released a Request For Information this month. Anyone responding to DISA’s RFI would do well to study the methodology that Barrett Lyon describes using the open source SQUID proxy and caching server. The technique spelled out by Barrett involves putting a bank of high end servers running SQUID in front of the potential targets.The US Defense Information Systems Agency announced that it is going to released a... more
-
