Secure Anchor Point [ Source: CPU Technology ]
December 2009 - As the world computing infrastructure becomes likewise complicated, network and system communications have significant problems in identifying who to trust. Corporate and government personnel enter systems through a variety of methods: remote access, wireless PDAs, laptops via VPN from public access points. Establishing trust includes the identity of hardware and processor nodes, the identity and authenticity of software instructions, and the identity and authenticity of system users. Describing and categorizing all of the different types ....
A CISO's Guide to Application Security [ Source: Fortify ]
November 2009 -
Security breaches are expensive. They cost time, effort, remediation, and reputation restoration. Many IT decision-makers tend to focus their security efforts almost exclusively at the network perimeter. They overlook the software applications that run their day-to-day agencies. These applications are often packed with Social Security numbers, addresses, personal health information, or other sensitive data.
Focusing on security features at both the infrastructure and application level isn’t enough. Organizations must also consider flaws in their ....
Comprehensive Network Access Control [ Source: 3Com ]
September 2009 -
The isolated corporate network is a thing of the past. Workers armed with laptops and wireless technology means the enterprise network has no boundaries. The modern enterprise network serves not only employees but also customers, partners, contract works and guests. Each with their own role and information access requirements.
This paper outlines a solution that addresses the comprehensive requirements for identifying and controlling network users with features like host posture checking, authorization, monitoring and ....
Not Just Words: Enforce Your Email and Web Acceptable Usage Policies [ Source: MessageLabs, Symantec Hosted Services ]
November 2009 -
Unmanaged employee use of email and the web can subject any organization to potentially costly risks including litigation, regulatory investigations, security breaches, lost productivity, business interruptions, and public embarrassment.
For responsible organizations operating in the age of email and the web, Acceptable Usage Policies (AUPs) are essential business tools. Clearly written and effectively communicated email and web AUPs—supported by employee training and enforced by proven technology solutions—can help employers minimize risks, maximize compliance, ....
Employee Web Use and Misuse: Companies, Their Employees and the Internet [ Source: MessageLabs, Symantec Hosted Services ]
November 2009 - The Internet has created new opportunities for mischief and new challenges for managers. In the end, it comes down to choice. Where do you draw the line? How do you balance individual access with the overall protection and good of the business? What is the correct balance between monitoring and blocking? This white paper examines a Web security solution that gives companies the ability to monitor and enforce their Internet usage policies, bringing site monitoring ....
Virtual Applications Made Easy [ Source: Novell ]
November 2009 - Learn how application virtualization reduces the costs, complexity, and time delays associated with application compatibility testing and management while maintaining endpoint security.
Active Administrator Version 5.0.1 - Active Directory Management [ Source: ScriptLogic ]
November 2009 -
Active Directory becomes very complex to manage in Windows networks. Administrators leave, users are given elevated privileges, applications require special accounts - very soon you have an Active Directory full of security weaknesses.
Active Administrator™ is an enterprise-class Active Directory management, auditing and recovery solution that takes over where the management tools supplied with Windows leave off. Advanced management features include centralized auditing of events, real-time alerts, searching and reporting of delegations, self-healing ....
How to Defend Against New Botnets [ Source: MessageLabs, Symantec Hosted Services ]
June 2009 - In 2008 botnets were responsible for 90% of spam, according to Symantec's MessageLabs Intelligence: 2008 Annual Report; these compromised "robot" computer networks do not seem to be going away anytime soon. Download this new whitepaper and learn about the new and sophisticated botnets, how they can affect your network, and the steps you can take to protect your company from a botnet attack.
Bullet-Proofing Instant Messaging [ Source: MessageLabs, Symantec Hosted Services ]
September 2009 - Information workers on the job often turn to the same software tools they use at home for quick, unfettered communication. When that involves consumer-grade instant messaging (IM) programs, such as AIM, Yahoo! Messenger and Windows Live Messenger, your organization’s network is at risk for malware infections. You may also have to deal with the results of regulatory compliance breaches and copyright violations. Management must confront these risks squarely, or face potential losses of millions of ....
Can Heuristic Technology Help Your Company Fight Viruses [ Source: MessageLabs, Symantec Hosted Services ]
May 2009 - In the face of today’s increasingly sophisticated malware, using multiple layers of email and web protection is essential. Heuristic technology helps provide that extra layer of security by collecting ‘virus DNA’ through scanning billions of emails and using that information to identify both known threats as well as new, unknown threats. Learn more now.
Can You Get There From Here? Desktop And Application Virtualization Workshop [ Source: Interop ]
May 2009 - Many companies have already implemented server consolidation projects utilizing virtualization technologies. These projects have brought significant cost reductions to both capital and operational expenditures. Companies are now looking to leverage server, desktop, and application virtualization technologies to bring order to the long-standing chaos of enterprise desktop management. But what are desktop and application virtualization, and where do they apply in your environment? How can your IT organization leverage these technologies to deal with the unrelenting ....
Best Practices: ProveIT Case Study for U.S. Air Force Software Assurance Center of Excellence [ Source: Fortify ]
October 2009 -
ProveIT case studies provide government end users with assessments of IT solutions. This ProveIT case study examines a U.S. Air Force initiative to implement application security/software assurance practices following the massive breach of an Air Force information system.
The U.S. Air Force began realizing that it had been losing unknown quantities of data and information. These data losses came about as the Air Force moved from using closed systems or ....
A Hidden Security Danger - Network Timing: The Role of Accurate Timing in Reducing Network Security Risk [ Source: Symmetricom ]
October 2009 - Most anyone who uses a PC no doubt sees the little clock at the bottom of the screen, dutifully ticking off the minutes of the passing day. But chances are they don’t often think about the role that clock plays in the network to which the PC is attached. In fact, virtually every piece of equipment attached to a data network has a similar clock, although it may not actually show the time of day ....
From Trust to Process: Closing the Risk Gap in Privileged Access Control [ Source: BeyondTrust ]
October 2009 - In this whitepaper, Enterprise Management Associates (EMA) examines this critical issue in IT security administration in light of the BeyondTrust approach to helping businesses move from a trust-based system to a secure, auditable process in order to provide a higher standard of control and better support for regulatory compliance.
Root Access Risk Control for the Enterprise [ Source: BeyondTrust ]
October 2009 - Compliance efforts and security concerns have driven businesses to make substantial investments in threat control. Too often, however, these efforts pay far too little heed to the risks posed by poorly controlled access to administrative privilege in IT, which can have a hugely disproportionate impact on the business. In this paper, EMA analysts examine BeyondTrust PowerBroker, a comprehensive solution designed to close these gaps for the enterprise with provable control.
Improving Efficiency in IT Administration by Implementing Policy Automation [ Source: BeyondTrust ]
October 2009 - Privileged access is critical for smooth ongoing administration of IT assets. At the same time, this access exposes an organization to security risks, especially regarding insiders. The right solution will provide centralized visibility into policies as well as actions taken related to privileged access control. This will ensure that there is complete awareness of the security posture at each stage of the Privilege Access Lifecycle Management process.
Privileged Access Lifecycle Management: How PALM Enables Security, Compliance, And Efficiency For Enterprise IT [ Source: BeyondTrust ]
October 2009 - Strengthening security, maintaining compliance, and achieving efficiencies and economies of scale are top-of-mind issues for enterprise IT executives. In this paper, IDC analysts examine the role of identity and access management (IAM) solutions in addressing these needs and specifically looks at the role privileged access lifecycle management (PALM) can play in helping heterogeneous organizations proactively refine their strategies regarding privileged access management controls, cross-platform monitoring, and automated workflow capabilities.
Security: The Central Focus on Red Hat Enterprise Linux 5 [ Source: Red Hat ]
October 2009 -
Red Hat Enterprise Linux has been designed by, and for, the most security-conscious organizations in the world. Accordingly, security has always been a central focus of the Red Hat Enterprise Linux platform. This paper describes how Red Hat has led the way in developing new security technology, making a secure operating system architecture an affordable, mainstream solution. This paper will explain how Red Hat:
● Lowers the cost of security maintenance
● Continually ....
WANdisco MultiSite Replicator Tops Among MultiSite Solutions [ Source: WANdisco ]
January 2009 - As software development has gone decisively global, IT focus has shifted from software tools and techniques to the processes by which software is developed. One key to greater efficiency in process execution is strong software configuration management (SCM). Strong SCM requires a bulletproof multi-site solution, to ensure that changes anywhere in the world are propagated without delay or loss of source code. Multi-site solutions broadly fall into three categories, in order of least to most ....
To Increase Downloads, Instill Trust First [ Source: VeriSign ]
October 2009 -
No matter how exciting your new functionality or the promise of your latest application, individuals and companies are concerned that they may be putting viruses or malware on their machines. Before potential customers can feel comfortable downloading your code, and before most platform and network providers will run it, they need to know two things: Who you are and that your code hasn’t been changed since you published it.
Learn how code signing protects ....
The Critical Need for Encrypted Email and File Transfer Solutions [ Source: Webroot ]
October 2009 - Email has become more than a means of communication. It has also become the default file transport mechanism within your organization. Its ease of use has made it simple to transfer files both within and outside the enterprise. As the value of the information contained in email attachments grows in importance, so does the need to effectively secure that information. A dedicated file transfer system can address many of the issues associated with email attachments ....
State of Internet Security [ Source: Webroot ]
October 2009 - Marketing. Advertising. Research. The Web has become the center of many fundamental business activities. Not coincidentally, it has also become the main source of malware. However, many businesses have not recognized this fact. They continue to dedicate most of their security resources to email defenses. Yet, email only makes up about 15% of incoming malware. It's the other 85% that comes via the Web that needs your attention. A robust Software-as-a-Security perimeter solution, together with ....
Disaster Recovery Planning with Virtualization Technologies [ Source: Double-Take Software ]
October 2009 - Leveraging real-time replication and application availability for disaster recovery using solutions from Double-Take Software is a cost-effective way to ensure that a mission-critical application’s RPO and RTO goals are adequately met. Discover how combining Double-Take Software’s replication solutions with virtualization technologies, organizations can achieve additional flexibility and cost-efficiency while not sacrificing capabilities.
Pumping Up IT Muscle Helps Nautilus Gain PCI Strength [ Source: Tripwire ]
September 2009 - Nautilus needed an automated method for meting regulatory compliance. With Tripwire Enterprise, the company could close the loop on change management processes, gain complete visibility of all changes, and had increased confidence and efficiency in its change management processes.
Unraveling Web Malware [ Source: FireEye ]
September 2009 -
There has been a rapid rise in the use of web blended threats to exploit client browsers and operating systems. These can lead to infection by bots which can be controlled remotely. Eleven percent of the world’s computers are enmeshed in at least one botnet and 72% of corporate networks with more than 100 computers have an infection.
Obfuscated code and encrypted exploits are increasing in prevalence. The point of these exploits is to ....
Top 5 NAC Challenges and How to Tackle Them
Business trends like mobility and outsourcing present IT with the challenging task of opening the network to a dynamic workforce, while...
State of Internet Security
Email only makes up about 15% of incoming malware - It's the other 85% that comes via the Web that needs your attention. Learn to effectively protect your enterprise...
|
|
InformationWeek Business Technology Network
|
 |
|
TechWeb
Events Network |
|
