The Daily Tip
by ITworld tips
RSS

Recent blog posts

5 often-overlooked security settings for iPhone and iPad

While the popularity of Apple's iOS devices increases, many don't understand the basic security features that Apple makes …
The Tao of Steve: 5 leadership lessons from Steve Jobs

In his own words: Steve Jobs on hiring, motivating employees, and the pursuit of excellence.
3 security acronyms to avoid (and 3 to embrace)

Today's security trends are the usual acronym soup. Here are 3 you'd do well to avoid and 3 worth your attention.
Why you should sweat the small stuff

Small wins at regular intervals will keep your team motiviated.
Software code audit: Know what's in your software

If you’re planning a specific transaction involving software assets, whether it’s an M&A, equity investment, product introduction, …
Project management: Learning from experience

As more and more organizations turn to project management best practices to increase efficiency and productivity in the workplace, …
Injecting shellcode into processes with Syringe

One feature that I believe would greatly complement ShellCodeExec is the ability to inject the shellcode into a process ID of the user’s …
4 tips for a happier project team

Lessons on work-life balance from the Millennial generation.
8 innovation lessons you won't learn from Steve Jobs
10 essential tips for using your new iPad 2

Get up to speed on social engineering

By ITworld tips Add a new comment

August 06, 2010, 8:09 AM — by Brent Huston, Microsolved, Inc. - Social Engineering is a bustling enterprise. There are plenty of books and websites that can help you formulate a strategy. The more you learn, the stronger your defense. Make sure you check it out!

Hacking the Human
by Ian Mann

No Tech Hacking: A Guide to Social Engineering, Dumpster Diving, and Shoulder Surfing
by Johnny Long, Jack Wiles, and Scott Pinzon

The Art of Deception: Controlling the Human Element of Security
by Kevin D. Mitnick, William L. Simon, and Steve Wozniak

The Art of Intrusion: The Real Stories Behind the Exploits of Hackers, Intruders and Deceivers
by Kevin D. Mitnick and William L. Simon

SANS InfoSec Reading Room - Social Engineering website (with a Wiki Framework)

Social Engineering: The Basics (CSO Online)

With a bit of self-study, you'll be able to further educate your own staff on how to be on the alert for suspicious characters and potentially dangerous websites. They'll know who to call when something doesn't "seem right." Good luck!

Brent Huston is CEO and Security Evangelist for Microsolved, Inc., a leading provider of security assessments and penetration testing, as well as, the developer of the HoneyPoint line of security software products.

Quick, practical advice for IT pros. Tips, shortcuts, how-tos, and advice to help IT pros of all stripes work smarter and more efficiently. The Tip may be as simple as a time-saver that helps streamline a common task, a quick start on a hot technology, or part of a longer series of advice that focuses on a specific problem such as how to install a wireless network, troubleshooting Windows, BlackBerry support, or even favorite social networking techniques.

View Profile

iPhone 5 growing up, but not out, this fall

10 comments
Java creator unhappy with Oracle trial outcome

5 comments
Easy fixes using perl

2 comments
Does this mean someday we'll be able to store digital porn in our DNA?

2 comments
MIT scientists solve the Ketchup Bottle Dilemma

2 comments

Older
|
Newer

ITworld LIVE

haiken88 has just joined ITworld
The White Paper IT Managers Face Security, Management Challenges with Proliferating Mobile Devices was viewed
The White Paper ESG Lab Review: HP 3PAR Peer Motion Software was viewed
KenzieL has just joined ITworld
The White Paper Unified IT Monitoring & Management in Your Environment was viewed
The White Paper 2011 Application & Service Delivery Handbook was viewed
The White Paper BYOD: How to Design Secure Usage was viewed
The White Paper Best Practices Guide: Microsoft Exchange 2010 on VMware was viewed
The Webcast Reduced TCO for Communications Applications with New Oracle SPARC Servers was viewed
The White Paper ESG Lab Validation Report: HP Data Protector & Deduplication Solutions was viewed
The Webcast Enterprise Ready Tablet Security was viewed
dlgmex@gmail.com has just joined ITworld
CubeLaboratories has just joined ITworld
Catalyst1 has just joined ITworld
The Webcast PlayBook Video about two Grade 6 classrooms that are using PlayBook tablets was viewed
The Webcast Making Information Matter was viewed
janeandrew01 has just joined ITworld
fholahan has just joined ITworld
The Webcast Preparing your Business: BlackBerry(R) Mobile Fusion was viewed
The White Paper ESG: Oracle Database Appliance: A Simple, Economical Option for SMBs and Independent Software Vendors was viewed
The White Paper CI for Dummies eBook was viewed
The White Paper Smarter Commerce for Consumer Products was viewed
The White Paper Gaining Momentum for Requirements Improvement was viewed
The White Paper Cloud Computing in the Midmarket: Assessing the Options was viewed
imcdnzl has just joined ITworld
The White Paper Gaining Momentum for Requirements Improvement was viewed
janeandrew01 has just joined ITworld
=Jay has just joined ITworld
smartuser1 has just joined ITworld
fholahan has just joined ITworld

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper