Ensuring application security in mobile device environments [ Source: IBM ]
May 2013- In today's business environments, mobile devices make up the fastest growing segment of computing devices - outpacing desktop and laptop computers. As more employees prefer to use mobile devices in the workplace, organizations are rapidly moving towards a bring-your-owndevice (BYOD) model - allowing employees to use their own mobile devices for business purposes. This often leads to employees having a mix of corporate and personal applications on the same device, which gives the security team ...
Five Steps to Achieve Success in your Application Security Program [ Source: IBM ]
May 2013- This white paper provides a general framework your organization can use to create or build upon an application security program. It includes guidelines that can be useful at different stages of your security program's maturity. By addressing key considerations, providing clear and actionable items, and offering real-world examples, these five steps provide an adaptable strategy to help your organization get started and maintain an effective, ongoing application-security strategy.
Identity and Access Management Buyer's Guide [ Source: IBM ]
May 2013- This buyer's guide provides assistance in evaluating identity and access management solutions. It describes common identity and access management challenges and the capabilities required to address them, and it includes checklists for assessing vendors and their products.
Intelligent Role Management For Improved Security and Compliance [ Source: IBM ]
May 2013- In complex organizations with sprawling role structures, managing user access and entitlements can be overwhelming. As part of an effective strategy for identity and access management governance, role management is a powerful method with which to strengthen and streamline the management process. Although role management solutions may help, many are overly complex and are not suited for business users. To find out how the integrated Role and Policy Modeler component of IBM Security Identity Manager ...
Consolidated security management for mainframe clouds [ Source: IBM ]
May 2013- IBM Security and IBM Information Management solutions for security work with the IBM System z platform to allow the mainframe to serve as an enterprise security hub, providing comprehensive, centralized security capabilities for organizations with distributed, multiplatform IT environments.
The Evolving Landscape of Desktop Security [ Source: McAfee ]
May 2013- Over the last 20 years, as we have moved towards a knowledge-based economy, the security challenges of maintaining the fidelity of the IT infrastructure have grown dramatically. There has been a massive increase in the number of malware samples encountered by security researchers around the world, from thousands of malware samples in a year to thousands of malware samples per day. On an operational level, endpoint security (desktop/laptops) has grown more complex, and IT security ...
Managing Threats in the Digital Age [ Source: IBM ]
May 2013- Security - and security breaches - are much more than a purely technical issue that exists only in the domain of the IT organization. Rather, security is an emerging C-level priority. Read this executive report to learn why organizations need a systematic, proactive approach to addressing security threats.
Solving Today's Toughest Mainframe Security Challenges [ Source: IBM ]
April 2013- Today, large enterprises are facing a host of security challenges: a growing regulatory burden, a shrinking pool of qualified mainframe workers, budget pressures and increasingly sophisticated attacks on their IT systems. However, organizations that rely on security automation tools like IBM Security zSecure to secure their mainframe systems find it easier to achieve regulatory compliance, to simplify and consolidate security management to reduce costs, to obtain real-time secure intelligence, and to detect threats and remediate ...
Practioners Guide to SOC [ Source: Alienvault ]
April 2013- This guide is intended to provide a technical audience the core information necessary to evaluate the security controls essential to establishing a Security Operation Center (SOC).
The Forrester Wave: Email Content Security [ Source: McAfee ]
April 2013-
In Forrester's 47-criteria evaluation of email content security vendors, it identified the nine most significant vendors in the category and researched, analyzed, and scored them: Barracuda Networks, Cisco, McAfee, Proofpoint, Sophos, Symantec, Trend Micro, Trustwave, and Websense.
This report details Forrester's findings about how well each vendor fulfills the criteria and where they stand in relation to each other to help security and risk professionals select the right partner for their email content ...
Hybrid Messaging Security Solutions Enhanced Security and Business Flexibility [ Source: McAfee ]
April 2013- In this white paper, IDC provides: an overview of messaging security and its impact on enterprises, discusses IT operation challenges, and includes McAfee's answer to helping enterprise IT organizations attain increased comprehensive messaging security at a lower cost.
Email Encryption Made Simple [ Source: McAfee ]
April 2013-
This paper discusses three common approaches to email encryption:
• Organization-to-organization encryption, also known as "gateway-to-gateway"
• Secure portal-based encryption, commonly referred to as organization-to-user "pull-based" encryption
• Secure attachment, referred to as organization-to-user "push-based" encryption
All of these options are easy to implement and available using on-premises solutions or through Software-as-a-Service (SaaS). This paper provides an overview of these methods and explains their distinct advantages to help you determine which approach best ...
The 451 Group Impact Report: Skybox Enters Vulnerability Management Space [ Source: Skybox Security ]
April 2013- New vulnerabilities are discovered at a rapid rate, so in order to discover and defend against them, companies conduct vulnerability scanning. However, the frequency and coverage of scans provide increasing challenges for some organizations. Active scanning can be disruptive if conducted excessively, and there are some parts of the network that companies don't feel comfortable scanning at all. In order to address this problem, Skybox Security has introduced what it refers to as its next-generation ...
System Z: Making Great Security Even Better [ Source: IBM ]
April 2013-
If your enterprise uses System z already, it's a safe bet that you're already aware of its legendary security. Being the only commercially available server with an EAL 5 rating is just one reason why so many of the world's top banks, retailers and other businesses that conduct high volumes of critical business transactions use System z.
With features such as cryptographic co-processors and integrated Public Key Infrastructure (PKI) support, System z has arguably ...
Gartner Research Report: The Four Key Risks of Developing and Executing a Cloud Sourcing Strategy [ Source: Cornerstone Advanced Communications ]
March 2013-
In this Cornerstone newsletter featuring Gartner research, decision makers will find insights to help develop and execute successful cloud computing strategies. Organizations have embraced new ways of “consuming” cloud computing resources and are realizing the power of affordable hosted IT and communications services. Although migration to cloud-based services provides many benefits, there are inherent challenges that – with appropriate planning – can be addressed with ease.
CIOs and business decision makers will find a useful ...
McAfee Virtual Patching for Databases [ Source: McAfee ]
March 2013- Organizations store their most valuable and sensitive data in their enterprise database, yet a large number of organizations do not engage in the timely installation of vendor patches after those patches have been released by database management system (DBMS) providers, placing that sensitive data at risk. In fact, a 2010 survey by the Independent Oracle Users Group revealed that of the 430 database administrators, consultants, and developers who were surveyed, only 37 percent installed Oracle Critical Patch Updates ...
The State of APT Preparedness [ Source: Lumension ]
March 2013- Many IT security professionals recognize that advanced persistent threats (APTs) pose a growing risk to their organizations. However, recent UBM Tech research discovered that only a few are taking the necessary steps to combat APTs and protect their organizations. In fact, many appear to have a misplaced sense of confidence in their ability to detect these attacks, even though few have developed strategies for dealing with them. This gap is particularly troubling since security experts ...
Why You Need to Consider Cloud-Based Security [ Source: Proofpoint ]
February 2013-
Protecting endpoints from various threats is perhaps the single most critical function for any IT department. Given the still voluminous quantity of spam that hits corporate email servers, the growing threat from phishing and advanced persistent threats, and the increasing number of physical platforms and Web-based applications that have access to corporate data resources, protecting these critical resources and platforms should be at the top of virtually IT decision maker's "must-do" list.
Read ...
Skybox Security Survey:Next-Generation Firewall Management [ Source: Skybox Security ]
April 2013-
Organizations struggle to realize benefits of next-generation firewalls
Learn what IT professionals had to say about adopting and migrating to next-generation firewalls at their organizations, including adoption drivers, priorities, and the challenges they encounter.
The Skybox Security Next-Generation Firewall Survey 2012, conducted in conjunction with Osterman Research, polled more than 200 respondents worldwide in varying information security and C-level roles involved in the IT decision making process.
Among the findings:
<...
Rule-Driven Profiling:A Next-Generation Approach to Vulnerability Discovery [ Source: Skybox Security ]
April 2013-
Vulnerability scanning, or the process of identifying a list of known security gaps in the network environment, is the focal point for most enterprise vulnerability management programs. Before any action can be taken to assess risks or prioritize vulnerabilities for remediation – you have to know the extent of your vulnerability challenge.
The use of vulnerability scanners as security assessment tools is nearly ubiquitous in large organizations. Regular network scans are recommended by security ...
Skybox Security Vulnerability Management Survey [ Source: Skybox Security ]
April 2013-
Survey reveals pitfalls of traditional vulnerability scanners
Learn what IT professionals had to say about vulnerability management programs at their organizations, including how often and what zones they scan, and the challenges they encounter.
The Skybox Security Vulnerability Management Survey 2012, conducted in conjunction with Osterman Research, polled more than 100 IT decision makers including security managers, and network and systems engineers involved in vulnerability management processes.
Among the findings:
<...
A New Breed of Information Security Leader: The Hyper-Connected Era and What It Means for CIOs and CISOs [ Source: IBM ]
December 2012- 2011 was the year of the security breach. And while many security organizations remain in crisis response mode, some security leaders have moved to take a more proactive position, taking steps to reduce future risk. These leaders see their organizations as more mature in their security-related capabilities and better prepared to meet new threats. What have they done to create greater confidence? More importantly, can their actions show the way forward for others?
Consolidated Security Management for Mainframe Clouds [ Source: IBM ]
December 2012- IBM Security and IBM Information Management solutions for security work with the IBM System z platform to allow the mainframe to serve as an enterprise security hub, providing comprehensive, centralized security capabilities for organizations with distributed, multiplatform IT environments.
How Does IBM Deliver Cloud Security [ Source: IBM ]
December 2012- Cloud computing is changing the way we use computing and has the potential for significant economic and efficiency benefits. But the speed of adoption depends on how quickly trust in new cloud models can be established. Some of the growing cloud security concerns include: security of highly virtualised environments from targeted threats and attacks, enabling secure collaboration, protection of the data (isolation, sharing) in a rapid provisioning and deprovisioning environment while experiencing the loss of ...
Intelligent Role Management for Improved Security and Compliance [ Source: IBM ]
December 2012- In complex organizations with sprawling role structures, managing user access and entitlements can be overwhelming. As part of an effective strategy for identity and access management governance, role management is a powerful method with which to strengthen and streamline the management process. Although role management solutions may help, many are overly complex and are not suited for business users. To find out how the integrated Role and Policy Modeler component of IBM Security Identity Manager ...