Top Five Strategies for Combating Modern Threats: Is Anti-Virus Dead?
[ Source: Sophos ]
December 2008-Today’s fast, targeted, silent threats take advantage of the open network and new technologies that support an increasingly mobile workforce. Organizations need innovative approaches to protect the Web, e-mail servers, and endpoints. This paper discusses the security implications of modern threats, analyzes where emerging technologies can add real value, and highlights five key strategies for ensuring solid protection from malware.
Web Application Security Testing
[ Source: GamaSec ]
March 2008-The need to provide web security and defend web applications from hackers due to software and hardware vulnerabilities requires remote an online web vulnerability-assessment service to combat maximum vulnerabilities. The risks must be continually updated and the tests tailor-made to provide optimal solutions.
Secure Desktop Solution: A Modern-Day Marriage of Business Benefit and Risk Reduction
[ Source: Novell ]
May 2008-Traditional security is no longer good enough because complexity is increasing significantly. Traditional IT security was formerly provided by firewalls, antivirus solutions, and other security products. Such measures worked fine when security was defined around known threats and well-defined perimeter defenses. Now, a comprehensive security strategy must deal with the increased vulnerability of mobile assets and a threat environment that is smarter and more aggressive, organized, focused, and profit oriented. Download this white paper to ....
Sophos Security Threat Report: 2010
[ Source: Sophos ]
February 2010-SophosLabs received 50,000 new malware samples every day in 2009. Malware attacks are broadening and becoming more evasive with social networking sites and new computing platforms becoming primary targets for hackers. Read the 2009 security threats trends and learn how to protect yourself in 2010.
Endpoint Security, Endpoint Management: The Cost Cutter's Case for Convergence
[ Source: Symantec ]
March 2009-Aberdeen's Research Benchmarks provide an in-depth look into process, procedure, methodologies, and technologies; identify best practices; and make actionable recommendations. This benchmark report is for any organization that relies upon end-user computing platforms (e.g., personal computers, workstations, laptops, notebooks) - and their associated applications, data, and network connectivity - to carry out strategic business objectives. It describes how the companies with top results keep these endpoints "clean and ready."
Secure Hardware For Cyber Security
[ Source: CPU Technology ]
December 2009-One of the primary objectives of a recent White House review of Internet security is to promote the user awareness of the information threats to the United States and to individual citizens. This awareness thrust is also important in demonstrating that information security is a top national priority. This, in turn, is intended to influence information systems providers to focus more on security as they develop systems. This white paper responds to that call with ....
HP OpenView Identity Management: Technical Blueprint
[ Source: Hewlett-Packard ]
January 2008-Identity management is the set of processes, tools and agreements surrounding the creation, maintenance and termination of a digital identity for people, systems and services to enable secure access to enterprise resources. HP OpenView Identity Management puts control in the hands of the business user with a suite of secure, scalable applications focused on ease of use, expedited deployment and the ability to embrace change. It also offers unparalleled breadth and depth of functionality delivered ....
Data Protection on the Move
[ Source: Dell - Migration Expert Zone ]
February 2010-The vast world outside the confines of your protective firewall poses a growing threat to the safety of your company’s sensitive information. With everyone from CEOs to carpenters taking company networks to customer locations with them, an increasing amount of business takes place in that world.
This paper explores the nature of the security problems that accompany highly mobile computing devices and the building blocks for solutions to those problems.
How Cyber Terrorists are Exploiting Digital America
[ Source: Core Security Technologies ]
February 2010-Core Security Technologies is pleased to invite you to download this on-demand webcast highlighting the continued emergence of targeted threats aimed at government IT assets and agencies.
You’ll gain insight into the rapidly changing government cyber-security landscape from Tom Kellermann, Core Security VP of security awareness; chair of the Threats Working Group on the CSIS Commission on Cyber Security for the 44th Presidency; witness for the Senate Homeland Security and Government Affairs Committee on ....
Comparing Email Management Systems: Protect Against Spam,Viruses, Malware and Phishing Attacks
[ Source: Sunbelt Software ]
July 2009-For today's organizations, email is absolutely critical to the health and efficiency of business-critical applications. Proper management and protection from the growing array of threats that impact it is an increasingly vital initiative. Systems designed to protect email systems and users from spam, viruses, malware, phishing attacks and other threats must be extremely effective. They must operate with virtually no downtime and they must be easy to manage. This Osterman Research white paper ....
Spector 360 for Call Centers
[ Source: SpectorSoft Corporation ]
June 2006-
Just like your Call Recorder does for phone activity, Spector 360 enables you to improve Call Center performance and security by centrally monitoring EVERYTHING your agents do on the computer.
Spector 360 lets you automatically RECORD all agent activity. REVIEW using high-level charts and graphs. Quickly ANALYZE trends and patterns. Drill down to INVESTIGATE unproductive behavior. SEARCH for specific details. And REPORT your findings from the convenience of your desktop.
Spector 360 ....
Secure Desktop Solution: A Modern-Day Marriage of Business Benefit and Risk Reduction
[ Source: Novell ]
May 2008-
Traditional security is no longer good enough because complexity is increasing significantly. Traditional IT security was formerly provided by firewalls, antivirus solutions, and other security products. Such measures worked fine when security was defined around known threats and well-defined perimeter defenses. Now, a comprehensive security strategy must deal with the increased vulnerability of mobile assets and a threat environment that is smarter and more aggressive, organized, focused, and profit oriented. Download this white paper to ....
PowerBroker Demo
[ Source: Symark ]
August 2008-
Symark PowerBroker is a policy-driven, root account access control application that provides granular privileged access delegation, detailed logging and reporting, and centralized administration across heterogeneous UNIX and Linux environments. It provides UNIX and Linux security and accountability by enabling system administrators to delegate administrative privileges and authorization without disclosing the root password and to grant selective access to UNIX and Linux-based corporate resources. Administrators can create powerful and granular security policies in PowerBroker to restrict ....
How to Resolve the Challenges of Biometric Technology Integration, Deployment, and Support
[ Source: M2SYS Technology ]
March 2008-
Biometric authentication components are emerging as an essential part of comprehensive business software applications and will play a central role in existing and future applications, networks, and information storage facilities. These biometric components utilize physical traits or behavioral characteristics for reliable identity authentication. Application developers, integrators and software solution providers are challenged with growing demand for biometric security features and functions. With a wide variety of biometric ....
IT Security & Authentication: Key Concerns
[ Source: PhoneFactor ]
February 2009-
As we implement this year's security initiatives amidst a steady economic downturn, it is more critical than ever to reflect on both our success and our lessons learned. This survey identifies IT professionals' key security concerns in 2008 and discusses how implementations could be simplified, particularly with the use of a phone as the second factor of authentication.
XSS (Cross-Site Scripting) Introduction
[ Source: V.A.P.T. ]
April 2008-
In this Whitepaper, we will cover the outline of how to prevent XSS attacks, how they work, and why they are so successful. Take a look at why this attack is so popular and how it affects some of the largest corporations in the world.
Coming To An Online Bank Near You
[ Source: Checco Services Inc. ]
February 2006-
The FFIEC has created an initiative where enterprise e-business is measured not simply by corporate liability but by the protection of the enterprise customer. Although the guidance may be missing a legislative bite, it is prudent for the financial institutions to plan an implementation path for multifactor online authentication within this fiscal year. The use of keystroke biometrics along with proper access control policies, logging, and auditing can create a cost-efficient and truly reasonable ....
6 Best Practices To Prevent Enterprise Data Loss
[ Source: RSA, The Security Division of EMC ]
April 2009-
More than 262 million records have been breached since January 2005 and according Ponemon Institute, data loss is costing companies an average of $6.6 million per breach. According to RSA, following these "Six Best Practices for Preventing Enterprise Data Loss" can help you save millions.
A Hidden Security Danger - Network Timing: The Role of Accurate Timing in Reducing Network Security Risk
[ Source: Symmetricom ]
October 2009-
Most anyone who uses a PC no doubt sees the little clock at the bottom of the screen, dutifully ticking off the minutes of the passing day. But chances are they don’t often think about the role that clock plays in the network to which the PC is attached. In fact, virtually every piece of equipment attached to a data network has a similar clock, although it may not actually show the time of day ....
Managing Risk For Effective Access Governance
[ Source: Aveksa ]
October 2009-
User access-related business risk comprises a broad array of potentially damaging events that may be caused or made possible by inadequate governance of access to an enterprise's information assets. Such events range from relatively minor policy and compliance violations to disastrous business losses. The stakes involved in access-related risk have risen dramatically in recent years as organizations have become thoroughly operationalized by technology.
With nearly every facet of large enterprises' operations now dependent on ....
Seven for 7: Best practices for implementing Windows 7
[ Source: Sophos ]
February 2010-
Windows 7 is here to stay. Discover how to enhance your overall enterprise security by taking advantage of its new powerful endpoint security features.
From the Field: A Hacker's Story
[ Source: ISC2 ]
February 2010-
In tough economic times, it is more important than ever to be mindful of common sense security practices. The security posture of your organization can be increased with simple to remember safety tips, inexpensive security technology solutions, and by making your employees aware of rising security threats and ways to mitigate these threats. Risk is inherent to business operations and you can not totally eliminate all types of risks; however, there are some ....
Testing Role-based Authorization Controls in Websites
[ Source: ISC2 ]
February 2010-
This whitepaper describes a practical approach on how to test Websites for flaws in role-based authorization controls. The first two sections discuss the importance of testing these controls and how this testing is tied to the business that the Website supports.
The rest of the paper outlines the general approach and some specific tools and techniques that can be used.
Securing the Cloud: Designing Security for a New Age
[ Source: eFlorida ]
December 2009-
Increasingly, businesses of all sizes are choosing to migrate their data, applications and services to the cloud. The advantages are clear--increased availability, lightweight, easily accessible applications, lower maintenance and administrative costs--but so too are the risks. As data migrates to the cloud, it becomes a tantalizing target for malicious actors all over the world. IT administrators and CEOs may love the fact that their applications are now accessible from anywhere but may not realize that ....
Protecting Your Databases From Careless End Users
[ Source: Dark Reading ]
September 2009-
While much attention is paid to outside attackers' efforts to crack enterprise databases, IT organizations often overlook an even greater threat: end users. Ignorance and disregard of company security policies may lead employees to expose their organizations' databases to compromise, often without even knowing that they’re doing so. In this report, we offer advice on how to educate users on database security, and some common-sense recommendations on how to limit the damage.
Databases at Risk: Current State of Database Security (ESG Research)
[ Source: Guardium ]
December 2009-
This recently published ESG report analyzes the current state of database security -- concluding it depends upon too many manual processes -- and also offers concrete steps to improve database security across the enterprise.
Taking Back Control of Information Flow - Why Organizations Should Implement DLP
[ Source: Symantec ]
June 2009-
Recent volatility on financial markets has raised many questions about how the global economy will recover from the downturn. Many organizations and individuals fear a deep impact on our economies, and the crisis could last longer than just a few months. In such a depressed environment, organizations and individuals must maintain key protective actions: business continuity, data security, and robust IT are the foundations of a recovering economy. No trade-off is possible on security, and ....
Symantec Report on Rogue Security Software: Executive Summary
[ Source: Symantec ]
October 2009-
New ways to conduct Internet fraud continue to be unleashed on the unsuspecting public. One of the growing trends is the use of misleading software programs. The Symantec Report on Rogue Security Software is an in-depth analysis of rogue security software programs and how they affect users. The executive summary provides readers with highlights of the report and an overview of these programs, how they work, their risk implications, various distribution methods and innovative attack ....
Symantec Intelligence Quarterly
[ Source: Symantec ]
October 2009-
Symantec Intelligence Quarterly offers analysis and discussion of threat activity over a three-month period. It covers Internet attacks, vulnerabilities, malicious code, phishing, spam and security risks. The first version of the report, released October, 2009, is now available.
Endpoint Security, Endpoint Management: The Cost Cutter's Case for Convergence
[ Source: Symantec ]
March 2009-
Aberdeen's Research Benchmarks provide an in-depth look into process, procedure, methodologies, and technologies; identify best practices; and make actionable recommendations. This benchmark report is for any organization that relies upon end-user computing platforms (e.g., personal computers, workstations, laptops, notebooks) - and their associated applications, data, and network connectivity - to carry out strategic business objectives. It describes how the companies with top results keep these endpoints "clean and ready."
Top 10 Security Rules for Today
Many of the security disasters in today’s enterprises are born not of brilliant cyber villainy, but through the sort of simple mistakes that employees...
State of Internet Security
Email only makes up about 15% of incoming malware - It's the other 85% that comes via the Web that needs your attention. Learn to effectively protect your enterprise...
