Infosecurity (USA) - the online magazine dedicated to the strategy and technique of information security

Latest News

Phone phreaker sentenced
An 18-year-old, legally blind hacker has been sentenced to 11 years in jail following a string of crimes revolving around phone phreaking.
Jackson's death rocks net
Never one to miss a trick, the blackhat community capitalised on the death of Michael Jackson over the weekend by seeding the web with spam and malware designed to steal email addresses and join the troubled star's fans to botnets.
Weekly Brief - June 30 2009
Danny Bradbury explores some of the more interesting stories in the security field from the last week.
Java delays approval of Oracle’s Sun takeover
The US Department of Justice (DoJ) wants more time to consider Oracle's $7.4bn Sun deal before giving its approval.
Sanford's mistress: my Hotmail account was hacked.
The Argentinian woman at the centre of the Mark Sanford scandal has said that her Hotmail account was hacked.

Addressing the Unique IT Security Risks Posed by the Virtual Data Center
As noted by analysts such as Gartner, virtualization technology is becoming not only increasingly ubiquitous but also increasingly heterogeneous in nature as organizations deploy bare-metal hypervisors from vendors such as VMware and Citrix.
What security professionals can learn from real-world network data
Internet traffic and applications now account for more than 50% of the total traffic on today’s corporate networks. Here’s your chance to learn more about these specific applications – and the risk they pose to your business.
What security professionals can learn from real-world network data
Internet traffic and applications now account for more than 50% of the total traffic on today’s corporate networks. Here’s your chance to learn more about these specific applications – and the risk they pose to your business.
Tapping into the power of Unified Communications securely
Unified Communications has become a powerful mainstream business resource, permitting rapid and cost-effective communication between internal and external staff alike. But, along with improved productivity, the use of Unified Communications software such as Microsoft Office Communications Server (OCS) has brought with it a new range of security threats that few conventional IT security products can completely counter.

The PCI Paradox - why PCI DSS isn't preventing data breaches
PCI DSS has been criticized as being both too prescriptive and too vague. The standard’s effectiveness has come under scrutiny once again as PCI compliant organizations have suffered huge data breaches in recent times. Danny Bradbury looks at the standard to find the root of the problem
Members' Content
Using Information Security to Protect Critical National Infrastructure: Energy Sector is Hackers’ Biggest Target
The oil and gas industries are natural targets for cyber-criminals due to sensitive data and very deep pockets. With the introduction of newer IT technologies, such as wireless and even social networking, the jobs of the information security teams are not getting any easier. John Sterlicchi reports
Members' Content
Information security goes green Information security goes green
Green IT has gone mainstream. The last year has seen corporations such as Citigroup establishing their environmental credentials by opening green data centers. But how do the separate disciplines of green IT and information security come together? Robin Arnfield reports
Members' Content
New Data Integrity Attacks on the Block
While the information security world has had its attention fixed on data loss prevention since the TJX breach in early 2007, it has failed to acknowledge the rising issue of data integrity attacks. Sarb Sembhi investigates a threat that he predicts will soon take the industry by storm.
Members' Content

Tokenless Two-Factor Authentication: It Finally Adds Up
For most companies, information security is a top priority. Demand for protecting data and employee confidentiality is continuing to grow, especially in industries that require a regulatory-compliant environment. However, applying user names and passwords for authentication is insufficient.
From Trust to Process: Closing the Risk Gap in Privileged Access Control
High-privilege administrative accounts hold the keys to the most sensitive IT functionality and information resources—yet paradoxically, this level of access is far too often based on little more than trust alone.
State of Resilience & Optimization on IBM Power Systems
This report includes the input of over 2,000 companies running AIX and IBM i (i5/OS) environments regarding their data protection, recovery and optimization technologies and strategies.
10 Things You Really Wished You had Known about PDF Security
Is the PDF security software you are looking to purchase really secure? If the PDF security software you are evaluating can be simply broken, then you might as well save your money.
Achieving Compliance with PCI DSS v1.2
White paper reports on solutions for addressing compliance challenges.