Security

Find network and information security news, reviews and analysis, covering data protection, privacy, endpoint security, and security management.

What would a post-e-mail world look like?

Posted May 29, 2012 - 11:39 am

E-mail may be on the decline, but its archival abilities can't be matched by any current contender.
- Quick Read
- 1 comment
- Like
- Tweet
5 outsourcing trends to watch

Posted May 10, 2012 - 3:30 pm

The deals are getting smaller, with new pricing models, while security and cloud computing become hot topics.
- Quick Read
- Like
- Tweet
Is your cloud provider exposing remnants of your data?

Posted May 10, 2012 - 11:36 am

Security researchers report that incorrectly configured hypervisors can lead to a separation of data issue in multi-tenant environments that can expose data remnants. However, you can prevent hosting your data on 'dirty disks.'
- Quick Read
- Like
- Tweet
Security concerns over a data center in the cloud

Posted May 7, 2012 - 11:46 am

When the company data center moves to various cloud configurations, the provisioning of servers will need to be addressed.
- Quick Read
- Like
- Tweet
Ten commandments for effective security training

Posted May 7, 2012 - 7:51 am

Information security people think that simply making users aware of security issues will make them change their behavior. But security pros are learning the hard way that awareness rarely equals change.
- Quick Read
- Like
- Tweet
How to fight back against privacy pirates

Posted May 7, 2012 - 7:27 am

Have you Googled yourself lately? Is the information about you accurate or full of inconsistencies, both of which can be devastating?
- Quick Read
- Like
- Tweet
Google Drive begs the question: Who owns your data in the cloud?

Posted May 3, 2012 - 7:26 am

Google Drive raises several concerns about cloud storage. Many of these consumer-level questions -- who owns your data, how data can be used and what happens if the data is lost or stolen -- are ones enterprise IT executives should be asking, too.
- Quick Read
- 2 comments
- Like
- Tweet
How secure are your Facebook apps?

Posted April 28, 2012 - 7:00 am

How well do Facebook apps protect your privacy? Before you download something new and agree to share information, check out how Privacyscore rates its first.
- Quick Read
- Like
- Tweet
World's most dangerous hackers want to steal how you make money

Posted April 26, 2012 - 7:47 am

Black hat hackers that penetrate your organization and steal sensitive information like customers' credit card data are a serious threat. But nation-state-sponsored hackers after the intellectual property that makes your business competitive could be an even larger threat.
- Quick Read
- Like
- Tweet
PHI security demands leave life coach feeling doomed

Posted April 26, 2012 - 7:10 am

Thriveworks CEO says technology hasn't kept pace with laws demanding eternal security of digital data.
- Quick Read
- Like
- Tweet
Grading the tech policy makers: A first quarter recap

Posted April 18, 2012 - 7:33 am

It's been a busy 2012 on the Hill. As legislators and policymakers grapple with an array of issues central to the policy agendas of companies in the technology industry, CIO.com takes stock of how Washington has moved on intellectual property, cybersecurity, privacy and spectrum in the first quarter of 2012.
- Quick Read
- Like
- Tweet
How the cloud democratizes and complicates disaster recovery

Posted April 11, 2012 - 12:02 pm

When it comes to disaster recovery, the cloud is showing itself to be a mixed bag. CIO.com's Jeff Vance explains how the great shift in technology has both lowered the entry barriers for DR technology and given smaller businesses what could be a dangerous sense of false security.
- Quick Read
- Like
- Tweet
Windows 7 security deep dive: The expert guide

Posted March 29, 2012 - 10:35 am

Get the lowdown on Windows 7's key new security features and how to use them.
- Quick Read
- Like
- Tweet
Is application security the glaring hole in your defense?

Posted March 26, 2012 - 2:24 pm

Organizations on average spend one-tenth as much on application security as they do on network security, even though SQL injection attacks are the highest root cause of data breaches. Experts say educating developers in writing secure code is the answer.
- Quick Read
- Like
- Tweet
Mobile malware: Beware drive-by downloads on your smartphone

Posted March 23, 2012 - 7:31 am

While Jeff Schmidt, the CEO of JAS Global Advisors, was surfing the Web on his new Android smartphone (his first Android phone) earlier this year, what appeared to be an ad popped up on his screen. The "ad" looked like the prompt that appears when his phone rings. He clicked the button on the ad to pick up the putative call, and the ad began downloading a binary file--malware--onto his Android phone. Schmidt had been hit by a drive-by download, a program that automatically installs malicious software on end-users' computers--and increasingly, smartphones--without them knowing.
- Quick Read
- Like
- Tweet
How CIOs can learn to catch insider crime

Posted March 20, 2012 - 7:34 am

Research shows that CIOs rarely discover the internal security threats that can ruin companies, even though it frequently involves IT systems. Here's what needs to change.
- Quick Read
- Like
- Tweet
MDM: Part of the mobile security solution?

Posted March 19, 2012 - 11:27 am

The good news for enterprises: Mobile devices are packed with power. A new iPhone is 100 times lighter, 100 times faster, and 10 times less expensive than the luggable notebooks of the early 1980s.
- Quick Read
- Like
- Tweet
Plugging a SaaS access hole

Posted March 12, 2012 - 6:07 am

Our manager's company has a lot of sensitive data on Salesforce.com servers, and until now, we could access it from any device.
- Quick Read
- Like
- Tweet
IT service providers and customers battle over data breaches

Posted March 11, 2012 - 8:26 am

IT outsourcing providers and their customers are fighting hard over data security liability limits at the negotiating table, and the issue is going to get more contentious in the cloud.
- Quick Read
- 2 comments
- Like
- Tweet
Making sense of mobile device, app, and information management

Posted February 29, 2012 - 10:46 am

As BYOD moves out of basic email access, IT seeks control over apps and data on users' devices. What can IT actually get?
- Quick Read
- Like
- Tweet
Security in the cloud is all about visibility and control

Posted February 19, 2012 - 8:49 am

When it comes to security in the cloud, organizations are confident in their cloud providers, but also and reluctant to expose certain types of data and applications, according to IT industry association CompTIA. Security vendors maintain the problem is one of visibility and control, and each has a solution.
- Quick Read
- 2 comments
- Like
- Tweet
How to protect your intellectual property in the cloud

Posted February 6, 2012 - 4:39 pm

IT professionals know that handing data over to a third-party is always risky, but cloud computing creates unique concerns for IP. Here are nine tips to protect critical corporate data wherever it goes
- Quick Read
- Like
- Tweet
The in-depth guide to data destruction

Posted February 6, 2012 - 3:21 pm

A key part of any information security strategy is disposing of data once it's no longer needed. Failure to do so can lead to serious breaches of data-protection and privacy policies, compliance problems and added costs.
- Quick Read
- Like
- Tweet
What is deep packet inspection?

Posted February 1, 2012 - 4:40 pm

It's easy to turn a deaf ear to the controversy surrounding recent copyright protection bills like the Stop Online Piracy Act (SOPA) or the PROTECT IP Act, which threatened to curtail free speech on the Internet by allowing the U.S. Department of Justice to blacklist and block access to websites suspected of copyright infringement. Most of us don't visit websites suspected of illegally distributing copyrighted material, so blocking us from accessing them seems harmless. But should your ISP ever be legally obligated to prevent you from accessing restricted websites, it will have to find a way to monitor your online activity, and that could cause your
- Quick Read
- Like
- Tweet
Many pcAnywhere systems still sitting ducks

Posted January 31, 2012 - 7:15 am

Symantec warns that its product should not be connected directly to the Internet, yet an estimated 140,000 computers are configured to allow direct external access
- Quick Read
- Like
- Tweet

SecurityWhite Papers & Webcasts

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

White Paper

Cloud Security Insights for IT Strategic Planning

The survey results of 200 IT professionals highlights the key business and technology drivers behind implementation plans, the importance of security, and the level of investment in security required. This benchmark data can be used for your own cloud security planning.

See more White Papers | Webcasts