Mission critical defense
Attackers don't work in silos. To defend against them, your defenses can't be siloed either. The teams, tools, and solutions you use in the response ......

Case Study: LivePerson Secures Robust Static Code Analysis Security Solution [ Source: Checkmarx ]
April 2013- With more than 1million Lines of Code (LOC), LivePerson, an industry leader and provider of chat-based services, was committed to finding the most commercially available Static Code Analysis Security solution on the market. Due to the size and complexity of the codes written by LivePerson’s 150+ developers, their code analysis requirements were extensive - resulting in the investigation of many Static Code Analysis solutions including open source applications. Download, “Case Study: LivePerson” to gain a ...
The 451 Group Impact Report: Skybox Enters Vulnerability Management Space [ Source: Skybox Security ]
April 2013- New vulnerabilities are discovered at a rapid rate, so in order to discover and defend against them, companies conduct vulnerability scanning. However, the frequency and coverage of scans provide increasing challenges for some organizations. Active scanning can be disruptive if conducted excessively, and there are some parts of the network that companies don't feel comfortable scanning at all. In order to address this problem, Skybox Security has introduced what it refers to as its next-generation ...
Organizations Remain Unprepared for DDoS Attacks [ Source: Neustar ]
April 2013- DDoS attacks have become highly organized and more complex, which makes them harder and more dangerous to fight than ever. Unfortunately, according to recent UBM Tech research, many companies remain at risk because they rely on inadequate defenses.
The Business Value of Hybrid Cloud -Based Compromise Intelligence Monitoring and Threat Mitigation [ Source: Neustar ]
April 2013- There are now millions of malware variations to defend against and hundreds of perpetrators of DDoS attacks. Given the complex nature of today's threats, enterprises can achieve a strategic advantage by employing a new layer of security that is services based. Cloud-based services are an important aspect of this approach to security and provide always-on monitoring without the added expense of buying and maintaining on-premise equipment. Early detection can help manage breach notification and remediation ...
Advanced Threat Landscape: What Organizations Need to Know [ Source: Bit9 ]
April 2013-
In the wake of the numerous server data breaches reported this year, it is clear that traditional signature-based blacklisting security strategies are inadequate in addressing today's sophisticated cyber threats. Advanced threats are targeting servers to steal valuable corporate intellectual property. These attacks happen fast - in less than 15-20 minutes - and are bypassing traditional security tools.
In this whitepaper, Industry Analyst Frost and Sullivan examines today's advanced threat landscape and recommends that ...
Realistic Security, Realistically Deployed: Today's Application Control and Whitelisting [ Source: Bit9 ]
April 2013-
Historically, IT defense has focused largely on the threat. So-called "blacklist" technologies maintain an inventory of specific attack types, and provide defense against each. Today, the volume, variety and sophistication of attacks highlights the limitations of such approaches, as signature databases approach their upper limits and leave exploitable gaps in defense.
These changes in the threat landscape have led many organizations to consider the alternative to a blacklist approach. In contrast to blacklisting ...
Detecting and Stopping Advanced Attacks [ Source: Bit9 ]
April 2013-
Every enterprise has high-value information that is vital to its success. As cyber-attack techniques become more sophisticated your "digital gold" is increasingly vulnerable. Today's cyber threats have changed in sophistication, in focus, and in their potential impact on your business.
Download this eBook to learn:
•??What cybercriminals are doing to target you and your business
•??Why today's advanced attacks require real-time detection
•??The steps you can take to effectively ...
Advanced Protection Against Advanced Threats [ Source: Bit9 ]
April 2013-
Security-conscious organizations are increasingly asking themselves the following questions:
Do we know what's running on our machines - right now?
Do we trust it?
How can we stop untrusted software from executing?
If you see yourself in this scenario or have engaged in these types of discussions, download this whitepaper and learn how to use a progressive approach to build trust, monitor activity, tailor protection to your enterprise and ...
Getting (and Staying) Ahead of Advanced Threats [ Source: Bit9 ]
April 2013-
Download this workbook to create a personalized scorecard that assesses the effectiveness of your current security strategy and shows you why a trust-based security solution is your best defense against advanced malware. This workbook will:
Show you why traditional antivirus solutions are no longer effective against today's advanced threats
Offer tools to measure how your current security posture affects the productivity of your IT and operations staff and end users
<...
A Guide to Implementing a Successful SAST Tool and Solving Developer Security Issues [ Source: Checkmarx ]
April 2013-
Recognizing security defects early in the development cycle have traditionally posed real challenges for developers as current static analysis tools often generate significant false positive results and other major issues. Next generation tools address these issues by integrating static analysis as part of development teams’ normal ‘design, code, test and analysis’ processes. Download, “A Successful SAST Tool Implementation” to learn how these tools can:
Integrate with normal software engineering workflows
Accurately report ...
Enterprise Application Security: A Guide to Choosing Between Binary and Source Code Analysis [ Source: Checkmarx ]
April 2013- Software security is a top priority for many organizations with many considering how they should integrate security earlier on in the software development lifecycle. A process change like this would benefit organizations in the form of reduction in costs and increased productivity as a result of minimizing flaws and removing defects via software patches. Download, “Enterprise Application Security: Source vs. Binary Code Analysis” to learn about the benefits of Source Code Analysis (SCA) and how ...
System Z: Making Great Security Even Better [ Source: IBM ]
April 2013-
If your enterprise uses System z already, it's a safe bet that you're already aware of its legendary security. Being the only commercially available server with an EAL 5 rating is just one reason why so many of the world's top banks, retailers and other businesses that conduct high volumes of critical business transactions use System z.
With features such as cryptographic co-processors and integrated Public Key Infrastructure (PKI) support, System z has arguably ...
Database Security in Virtualization & Cloud Computing Environments [ Source: McAfee ]
March 2013- Many organizations have found themselves drawn to virtualization and cloud computing architectures for the many benefits, only to find that the complexity of ensuring adequate data security was simply too great an obstacle. But the adoption of these technologies is inevitable. By deploying memory-based solutions for distributed database monitoring, enterprises will find that it is not only possible to protect sensitive information in these emerging computing models, but that the same architecture also provides both ...
McAfee Virtual Patching for Databases [ Source: McAfee ]
March 2013- Organizations store their most valuable and sensitive data in their enterprise database, yet a large number of organizations do not engage in the timely installation of vendor patches after those patches have been released by database management system (DBMS) providers, placing that sensitive data at risk. In fact, a 2010 survey by the Independent Oracle Users Group revealed that of the 430 database administrators, consultants, and developers who were surveyed, only 37 percent installed Oracle Critical Patch Updates ...
A Practical Guide to Database Security [ Source: McAfee ]
March 2013- A serious data breach brings monetary damage in its many forms: business disruption, bad publicity, stiff ones for noncompliance, and undermined customer confidence. But most damaging of all is the trouble that it creates when it comes to signing up new customers. A tarnished reputation is a big objection for sales and business development to overcome. That's why data security in general and database security in particular are a crucial part of any company's overall ...
The State of APT Preparedness [ Source: Lumension ]
March 2013- Many IT security professionals recognize that advanced persistent threats (APTs) pose a growing risk to their organizations. However, recent UBM Tech research discovered that only a few are taking the necessary steps to combat APTs and protect their organizations. In fact, many appear to have a misplaced sense of confidence in their ability to detect these attacks, even though few have developed strategies for dealing with them. This gap is particularly troubling since security experts ...
Securing Big Data: Recommendations for Hadoop and NoSQL Environments [ Source: Vormetric ]
March 2013-
Big Data repositories enable enterprises to use large volumes of varied data to make more rapid decisions, but repositories frequently include sensitive data that must be secured. Most Hadoop and NoSQL environments that manipulate Big Data have little to no integrated security.
This technical paper provides an overview of NoSQL Big Data security issues and includes security recommendations that enterprises should consider when securing Big Data environments.
Securing and Controlling Data in the Cloud [ Source: Vormetric ]
March 2013- The Securing and Controlling Data in the Cloud white paper describes the various cloud formations (Private Cloud, Public Cloud, SaaS, PaaS, IaaS), the new security challenges posed by the cloud and solutions that enterprises can bring to bear for securing and controlling sensitive data in cloud environments.
Protecting Sensitive Data In and Around an IBM DB2 Database [ Source: Vormetric ]
March 2013- The Protecting Sensitive Data In and Around an IBM DB2 Database technical white paper provides an overview of the sensitive files in and around the IBM DB2 database that enterprises need to secure to achieve optimal database security.
Protecting Sensitive Data In and Around an Oracle Database [ Source: Vormetric ]
March 2013- The Protecting Sensitive Data In and Around an Oracle Database technical white paper provides an overview of the sensitive files in and around the Oracle database that enterprises need to secure in order to achieve optimal database security.
Protecting Sensitive Data In and Around a Microsoft SQL Server Database [ Source: Vormetric ]
March 2013- The Protecting Sensitive Data In and Around a SQL Server Database technical white paper provides an overview of the sensitive files in and around the Microsoft SQL Server database that enterprises need to secure in order to achieve optimal database security.
Longline Phishing: The Rise of Email-Borne Threats and the Cloud [ Source: Proofpoint ]
March 2013-
The last few years have seen a dramatic increase in the use of email as a vehicle for cyberattacks on organizations and large corporations.
Such attacks have evolved from the simple inclusion of malware as a non-disguised executable file, to more socially engineered "phishing"style attacks, which attempt to persuade the recipient voluntarily provide valid security credentials-often simply by clicking a link that leads to a malicious or fraudulent website.
But how can ...
Five Critical Components Of An Information Security Program [ Source: TraceSecurity, Inc ]
February 2013- Current market solutions are built to protect the enterprise and are too resource intensive for most organizations to manage. Learn about five key components that any risk-based information security solution must include to cost effectively and efficiently protect information and meet regulatory requirements - regardless of industry, organization size or security skill set.
Transforming IT GRC into a Mainstream Business Application [ Source: TraceSecurity, Inc ]
February 2013-
Coping with the complexities of IT GRC is a growing market dilemma for small and medium organizations (SMEs) and a new IT GRC prescription is well overdue - one that provides true enterprise-class capabilities, but without the enterprise burden on resources.
This paper explains the SME information security landscape and how to best leverage an integrated, cloud-based approach to adopt an IT GRC strategy that reveals your organization's risk posture, enforces security policies, ...
Using the Cloud to Avoid Mobile App Data Leakage [ Source: Framehawk ]
February 2013-
Download this white paper to learn how you can use cloud computing to improve your mobile data security. The paper features in-depth details about cloud computing as a surprisingly effective technique to solve the security, performance, user experience, and cost issues plaguing enterprises looking to provide mobile access to enterprise applications today.
In “How to Avoid Data Leakage from Mobile Enterprise Apps: Use the Cloud,” you will learn:
A new architecture ...
When 'Secure Enough' Isn't Enough - Defining the Difference Between Compliance and Protection [ Source: IronKey by Imation ]
February 2013-
We've all seen the reports about what goes wrong when proper controls are not implemented while storing and transferring data. Large enterprises face messy notifications, customer dissatisfaction and, in many cases large fines. In fact, a data breach in the U.S. comes with an average price tag of $5.5 million, according to a 2011 Ponemon Institute study.
This paper from Imation Mobile Security explains when compliance alone may not offer the protection enterprises need ...
View All Categories
Business Intelligence : Analytics, Business Process Management, Content management, Dashboards, Data Mining, Performance Management, Databases, Datamarts/Data Warehouses, Information Management, Knowledge Management, Data Quality
Development : Open Source, Windows/.NET, Web Development, Security, Mobility, Java, High Performance Computing, Embedded Systems, Development Tools, Database, Architecture & Design, C/C++
Government : Cloud/SaaS, Leadership, Information Management, Federal, Mobile & Wireless, State & Local, Enterprise Applications, Security, Policy & Regulation, Enterprise Architecture
Hardware : Virtualization Hardware, Windows Servers, Utility/On-demand Computing, Unix/Linux servers, Supercomputers, Peripherals, Macintosh, Handhelds/PDAs, Grid/Cluster Computing, Desktops/PCs, Data centers, Blades, Processors
Healthcare : Interoperability, Administration systems, Clinical information systems, Electronic medical records, The Patient, Security & Privacy, Leadership, Policy & Regulation, Mobile & Wireless
Infrastructure : ATM, Ethernet/Gigabit Ethernet, Frame relay, IPv6, Traffic Management, Network/Systems Management, PBXs, Printers, Remote Access, Routers, Switches, UPS, VPNs, WAN Optimization/Acceleration, Wide Area File Services
Internet : B2B, B2C, Browsers, E-Business/E-Commerce, E-retail, Google, Social Business, Internet Security, Search, Social Networks, Traffic Reporting/Monitoring, Web 2.0, Web Development, Internet Policy
Management : Career Development, Training, Small-Medium Business, Salary/Compensation, ROI/TCO, Regulation/Compliance, Recruiting, Personnel Management, Outsourcing, Legal, H-1B, Executive Insights/Interviews, Workplace Trends
Mobility : WLAN, Wireless Security, Wi-Fi/WiMax, Wi-Fi VOIP, Smartphones, 3G Wireless/Broadband, Muni Wireless, Mobile Messaging, Mobile Business, Fixed Mobile Convergence, 802.11x, RFID
Personal Tech : Blackberry, Bluetooth, Bluray, Digital Cameras, Digital Music, Digital Rights Management, Virtual worlds, iPhone, iPod, Peripherals, Smartphones, TVs/Home Theater, Global Positioning Systems
Security : Security Administration, End user/Client Security, Encryption, Cyberterror, Attacks/Breaches, Application Security, Antivirus, NAC, Perimeter Security, Privacy, Vulnerabilities and Threats, Storage Security, Intrusion Prevention
Services : Telecom/Voice Services, Business Process Outsourcing, Business Services, Disaster Recovery, Systems Integration, Hosted Storage, Internet/Data Services, Outsourcing, Software as a Service, Hosted Applications
Software : Web Services, Service Oriented Architecture, Server Virtualization, Productivity Applications, Operating Systems, Open Source, Linux, Hosted Software/Applications, ERP, Development Tools, Databases, Database Applications, CRM, Business Systems Management, Integration, Application Optimization
Storage : Data protection, Disaster Recovery, Removable/Portable Storage, Security, Storage Fabrics, Storage Systems, Virtualization
Telecom : VOIP, Unified Communications, Voice services, PBXs, Internet policy, Presence, Collaboration Systems, Business, Regulation, Call Centers
Windows/Microsoft : Applications, Internet Explorer, Microsoft Company News, Security, Open Source, Operating system, Office Suite
