RSS Alerts

Latest News

view more

Podcasts

view more

Webinars

  • Networking Data Archiving – it’s a whole new data retention ballgame
    Organizations around the world are using social networking to better their customer relationships (Facebook), prospect for new business (LinkedIn) and promote their events (Twitter) but what about the archiving and retention of these business communications? You don’t archive? So why bother archiving your email? It’s all about legal and regulatory issues. And then there’s the problem of litigation.
  • Social Networking: Roadblocks, Risks, Rewards
    Facebook and Twitter usage in the workplace is going through the roof, causing major security headaches at all levels, both inside and outside the boardroom. The security issues that Web 2.0 services create are far from simple - managers need to understand not just the IT risks of data leakage, malware propagation, but also the compliance and legislative requirements.
  • How email archiving ‘in-the-cloud’ can benefit your organisation: The evolution of the archiving market
    Email use has exploded and is now the primary means of communication for organisations. Vital documents and information are passed to and from employees and the current regulatory environment means that this content needs to be archived.
  • Solving the PCI Security Puzzle: Putting the Access Control, Privilege Management, and Server Protection Pieces Together
    Complying with PCI regulations in heterogeneous environments can be a complex and costly initiative. Leveraging your existing IT infrastructure offers a simpler and cost-effective way to address the sections of the Payment Card Industry’s Data Security Standard (PCI DSS) that matter most to IT managers – and without sacrificing manageability and productivity. Join our panel of experts for an informative webinar to learn how you can address the regulatory requirements of the PCI standards by linking all your access rights, privileges, and audit logs into a single, definitive Active Directory identity.
view more

Blogs

  • PCI, AV and a life vest
    Posted by Geoff Webb • 25 August 2010
    A good friend of mine over at NetIQ, Todd Tucker, recently blogged about some of the frustrations he sees when looking at the failure of PCI as a security standard (or rather, the failure of thos...
    tags: PCI DSS, anti-virus, malware
    rated:
  • Should RIM hold its line on the BlackBerry?
    Posted by Drew Amorosi • 18 August 2010
    Encryption is the sort of topic that rarely makes it into the mainstream media, but the recent hoopla over BlackBerry security, namely its encryption procedures, has drawn the ire of governments throu...
    tags: encryption, BlackBerry, compliance & policy
    rated:
  • I-Coverage
    Posted by Geoff Webb • 13 August 2010
    I wanted to comment a little on the recent stir concerning the vulnerabilities on the iPhone (iPad, iTouch, I-Robot.  No, wait, that's a movie.) I think the level of interest in this vulnerabili...
    tags: Security, iPhone, Android, Blackberry
    rated:
  • Adobe CS7 Searches Saturated With Dangerous Results
    Posted by Patrick Walsh  • 30 July 2010
    Looking to save a few bucks on software will almost always lead users down a dangerous path. Users either end up at “OEM Software” sites offering unlicensed and illegal software, or t...
    tags: oem software, malware, blackhat seo, pagerank bomb, adobe, microsoft
    rated:
  • Microsoft and Adobe: Collaboration Against Threats
    Posted by Roger Halbheer • 28 July 2010
    You know my opinion on collaboration between countries, on public-private-partnerships, as well as on collaboration between companies. For quite a while we have been running a program calle...
    tags: Vulnerabilities
    rated:
view more

Features

  • Interview: Charles Palmer Interview: Charles Palmer
    No shortage of attention has been paid to the topic of cybersecurity as of late, especially with respect to the role of government. All talk aside, what is being done to address the threats, and how real are they? Drew Amorosi sits down with Charles Palmer, the director of IBM’s Institute for Advanced Security, and learned that although the US may have cybersecurity challenges, the first step toward recovery is admitting that we have a problem
    Members' Content
  • Securing the Friendly Skies Securing the Friendly Skies
    Aviation security and information security are inextricably linked. So much of what makes up aviation security depends on sound information security; encompassing the protection of intelligence, procedural, systems, and network data. For all-too-obvious reasons, much of what goes on behind the scenes at airports with respect to information security is a closely guarded secret, whether it is the alphabet soup of governmental agencies in play or the airlines themselves. Drew Amorosi reports
    Members' Content
  • Grading Obama on Cybersecurity Grading Obama on Cybersecurity
    Early in his term, President Obama promised to address the issue of cybersecurity by continuing and even expanding upon the efforts of the previous administration. Lauren Moraski surveys experts in the field, providing an assessment of the job the new president is doing so far to address this issue
  • Editorial: Sometimes Honesty Doesn’t Pay Editorial: Sometimes Honesty Doesn’t Pay
    Infosecurity’s Drew Amorosi shares his opinions on the recent dismissal of Pennsylvania’s CISO and the role that open dialogue played in the decision
view more

Downloads

  • Application Whitelisting Puts HIPS in the Recycle Bin
    This analyst-authored whitepaper outlines how Application Whitelisting protects against new advanced persistent threats, automates real-time visibility of actual application usage and more.
  • Desktop Software Lockdown: Prevent Targeted Attacks
    Preventing the installation and execution of unauthorized software should be a high priority for any IT security conscious organization. Allowing users to install or execute unauthorized software can expose an organization to a variety of security and legal risks, not to mention the burden of increased support costs. This paper will compare and contrast a variety of techniques for detecting and preventing unauthorized code.
  • Cloud Application Security
    Cloud computing promises to deliver IT infrastructure services via the Internet on an “as-needed, pay-per-use” basis. Cloud resources can be provisioned on-the-fly to support specific project needs, or they can be leveraged on a longer-term basis to add capability to an existing IT infrastructure. For some companies, cloud resources even serve as the entire IT infrastructure because of the ease and speed of deployment and cost-effectiveness compared to deploying an in-house infrastructure.
  • The Challenges of Automated Application Assessments in a Web 2.0 World
    This white paper, written by two security experts from Stach & Liu, Rob Ragan and Vincent Liu, describes the challenges of automated penetration testing or application scanning of Web 2.0 applications.
  • Database Security and Compliance - Preparing for 2010 (Annual Study)
    This study reveals some eye-opening database security and compliance trends based on research from 175 enterprise organizations.
view more
Copyright © 2010
Elsevier Ltd. All rights reserved.
Terms & Conditions | Privacy | Website Design Working with water