IT Security Audits: A Necessary Evil…
As I prepare to conduct my next IT security audit at a client’s site, I realize some things have not changed in the past few years. The client’s reaction towards the security audit is always amazing the day before the on-site visit as they exhibit a sense of fear. For the most part, it has […]
SANS WhatWorks in Virtualization and Cloud Computing Summit with Tom Liston, Washington DC, August 19-20
As security professionals, we work in an environment that never stops changing. New technologies and innovative new uses for old technologies seem to appear every day. Unfortunately, along with the benefits that every new technology brings, there are new and novel security challenges that need to be addressed. We're forced to constantly learn just to […]
(IN)SECURE Magazine Issue 26 released
(IN)SECURE Magazine is a freely available digital security magazine discussing some of the hottest information security topics. Issue 26 has just been released. Download it from: http://www.insecuremag.com The covered topics include: - PCI: Security's lowest common denominator - Analyzing Flash-based RIA components and discovering vulnerabilities - Logs: Can we finally tame the beast? - Launch […]
Digital Forensic Acquisition
One of the key aspects of conducting digital forensics pertains with the proper collection and authentication of the evidence. If the evidence is not collected properly, there is a very good chance the results of the examination will be questioned. Following digital forensic best practices, we typically conduct our examination on copies, often referred to as "forensic images" of the original evidence.
Types of Wireless Attacks
Standard wireless communication occurs when the end user and the wireless access point are able to communication on a point-to-point basis without interruptions. There are many attack variations in existence against wireless networks that breaks the standard communication format. These attacks includes the denial of service attacks, the man in the middle attacks and the WEP key-cracking attack to name a few and are described below.
The Types of Hackers: Black Hat, White Hat or a Gray Hat Hacker, Which Type are you?
A white hat hacker is a computer and network expert who attacks a security system on behalf of its owners or as a hobby, seeking vulnerabilities that a malicious hacker could exploit. Instead of taking malicious advantage of exploits, a white hat hacker notifies the system's owners to fix the breach before it is can […]
Cloud Computing and Security Concerns
Cloud computing has been receiving a lot of press in the IT mainstream media lately and all indications points to it continuing to be a hot topic for some time.
Computer Malware and Preventive Recommendations: Botnets
Botnets are one of the fastest growing and the most dangerous threat on the Internet today. “Bot” stands for robot, which is a piece of software with some intelligence to perform a task and the “net” stands for network which is the collection of these individual bots under one controlling person called a bot herder.
File Sharing Applications: Another way to be a victim of identity theft…
If you are using a peer-to-peer file-sharing program to download music and videos, you may be a prime candidate for Identity Theft. Applications such as Limewire, Edonkey and numerous others on the Internet may also allow individuals to download personal documents from your computer at will.
VMware’s 3rd Annual Federal Technical Conference in DC
VMware, Inc. makes virtualization software that runs on Microsoft Windows, Linux and Mac OS X as well as directly on server hardware without requiring an installed operating system call VMware ESX. The VMware 3rd annual federal technical conference will be in Washington DC on Tuesday, June 15, 2010 between 8:30am - 4:00pm at the Grand […]