Security

Find network and information security news, reviews and analysis, covering data protection, privacy, endpoint security, and security management.

Question

Are you going to block Siri on your network over security concerns?

Posted May 23, 2012 - 11:33 am

I just read about IBM deciding to block Siri on its networks because of the way Siri uses data. When you ask a question, the data obviously goes back to Apple's servers so it can be processed and responded to.
- Quick Read
- 2 comments
- Like
- Tweet
Question

What are the advantages and drawbacks of using OpenDNS?

Posted May 4, 2012 - 12:07 pm

I've been thinking about signing up for OpenDNS for a while, and a friend just told me that if I was using OpenDNS I wouldn't have to even think of Flashback. Is that true? I thought OpenDNS was mostly for filtering web sites, which is significant issue with two 14 year old boys in my house. I never considered it as a security tool per se.
- Quick Read
- 3 comments
- Like
- Tweet
Question

What is the best choice for Mac anti-virus?

Posted April 27, 2012 - 1:31 pm

Ok, I'm convinced. I'm finally going to add anti-virus software to my Mac. It seems like there are more and more events where attacks are targeting Macs, and I guess that it is the prudent thing to do. The thing is, I've been using Macs without anti-virus software for well over a decade, so I don't even know who to look at.
- Quick Read
- 3 comments
- Like
- Tweet
Question

What steps are you taking to address DNSChanger concerns?

Posted April 26, 2012 - 2:16 pm

Most of us have been aware of DNSChanger malware for quite a while, but apparently it has just entered the mainstream consciousness. I say this because we have been getting request after request to "check my computer for the DNS virus".
- Quick Read
- Like
- Tweet
Question

How to Audit VOIP and VC?

Posted April 18, 2012 - 8:23 am

I have to audit VOIP and VC, Please explain in detail every point which should be considered during auditing of VOIP and VC.
- Quick Read
- Like
- Tweet
Question

Does the common attitude that "Macs don't get viruses" make them vulnerable to malware?

Posted April 17, 2012 - 1:19 pm

I've spend a lot of time over the past week dealing with Flashback problems. Ugh. I like Macs generally, but I don't get emotionally attached to machines, unlike a few (but by no means all) of the Mac owners I've dealt with.
- Quick Read
- Like
- Tweet
Question

Have you had problems with the Flashback trojan on Macs?

Posted April 9, 2012 - 11:27 am

We only have a few people that bring their own Macs to my office, and as far as I know, it hasn't been a problem for any of them. Then again, they are all pretty much convinced that "Macs don't get viruses." �I'm not a Mac user personally, and we don't really support their use, but employees can use their personal Macs to access our WiFi.
- Quick Read
- Like
- Tweet
Question

Has spam become a problem of the past?

Posted March 16, 2012 - 1:58 pm

I was going through my email this morning and was shocked to see a spam email. I just looked at my gmail, and there were 418 messages in my spam folder, which is pretty much the same to me as if they don't exist. Spam filters have gotten so good that it makes me wonder why spammers bother to still spam.
- Quick Read
- Like
- Tweet
Question

How often do you experience DOS attacks?

Posted March 12, 2012 - 11:50 am

I recently changed positions, going from a relatively small, regional company to a working for a nationally known university. I almost never experienced DOS (denial of service) attempts before, but I sure do now. They rarely cause any problems, but the increase in frequency is amazing compared to what I was used to.
- Quick Read
- Like
- Tweet
Question

How was Google able to create and push out an update for Chrome security hole in 24 hours?

Posted March 9, 2012 - 10:55 am

Yesterday I read about the critical security vulnerability that had been found in Chrome. Today there was an update that removed the threat. One day. It sometimes takes me longer than that to go through all of my emails after a long weekend. Seriously.
- Quick Read
- Like
- Tweet
Question

How well does facial recognition work for device security?

Posted February 15, 2012 - 1:27 pm

Some of the laptops around the office as well as some new Androids have facial recognition software that can be used in lieu of a pin or swipe pattern to unlock the device. I haven't taken the time to really test it out since neither my Android or laptops has the feature, and I've had enough other stuff to keep me busy lately.
- Quick Read
- Like
- Tweet
Question

How much will the security flaws in Google Wallet set back the transition to "digital wallets"?

Posted February 14, 2012 - 3:05 pm

The security flaw in Google Wallet apparently would allow pretty much anyone with access to your phone, once they got through the screen lock (if it is even used), to gain access to the contents of your prepaid Google card.
- Quick Read
- Like
- Tweet
Question

Which is better for password security, length or complexity?

Posted February 10, 2012 - 2:10 pm

Debate over coffee this morning was which is superior, a password that is very lengthy (15+ characters) or very complex (use of symbols like #,$,%,^)? �I realize that either are far superior to the average password, but which would be the more secure choice? �
- Quick Read
- 4 comments
- Like
- Tweet
Question

Mobile apps uploading personal information

Posted February 8, 2012 - 8:06 pm

Path.com was slammed for uploading users' mobile address books. What other apps have been caught doing that or something similar, and how can users protect themselves - before the download?
http://www.wired.com/gadgetlab/2012/02/path-dave-morin-explains-data/
- Quick Read
- Like
- Tweet
Question

How much do you trust the security of third-party vendors' remote access/VPN?

Posted February 7, 2012 - 11:24 am

I read the results of a study by Trustwave that said 75% of data breaches were the result of security deficiencies introduced by thrid-party vendors responsible for system support, development or maintenance. Also disturbing was the fact that only 16% of companies manages to detect breaches on their own.
- Quick Read
- Like
- Tweet
Question

How will DMARC stop phishing?

Posted January 30, 2012 - 1:07 pm

It's not often that Facebook, Microsoft, Yahoo, Google, et. al team up to do anything together, but apparently they are going to turn their collective attention to stopping phishing. I just looked at my spam folder, and there were dozen of phishing attempts in there, which is a testament to Gmail's spam filter.
- Quick Read
- Like
- Tweet
Question

Best antivirus software for the Mac

Posted January 26, 2012 - 11:01 am

And if not, what's the best anti-virus software out there for the Mac and do I need it?
- Quick Read
- Like
- Tweet
Question

How well does Microsoft Security Essentials work as primary anti-malware/virus protection?

Posted January 18, 2012 - 11:28 am

Over lunch a friend of mine and I were debating this issue. We both have small businesses, and that means keeping a close eye on expenditures, including software. He uses Microsoft Security Essentials for anti-malware/virus protection, primarily because it is free.
- Quick Read
- Like
- Tweet
Question

How do you use a smartphone for two-step verification to log in to your Google accounts?

Posted January 17, 2012 - 1:41 pm

I've heard about Google offering a two-step verification process for log-in. Perhaps I'm being paranoid, but it seems as if there is a significant data breach every few days, and I want to find the right balance of security and convenience, and the security part of that equation has been growing in importance to me.
- Quick Read
- Like
- Tweet
Question

What do you do to minimize the security risks created by Java?

Posted January 16, 2012 - 11:55 am

In my experience, two of the greatest risks to system security are Flash and Java. Flash has a pretty central place in web design, as those of use who have used iPads, iPhones and Android 2.1 or earlier are well aware.
- Quick Read
- Like
- Tweet
Question

How much of a problem has Ramnit malware caused for your company?

Posted January 13, 2012 - 2:50 pm

I haven't seen any examples of Ramnit, the malware that is the current Facebook spread virus/worm, infecting our machines, but given the number of people who use Facebook and the number of those who are shockingly careless, I assume it is a matter of time. How much of a serious threat has Ramnit proved to be so far?
- Quick Read
- Like
- Tweet
Question

What's the best way to monitor PCs to ensure software is up to date?

Posted January 11, 2012 - 5:59 pm

Is there a good way to monitor my laptop to make sure that I haven't left myself vulnerable to malware by neglecting to update/patch installed software?
- Quick Read
- Like
- Tweet
Question

What's the craziest device your IT department has been asked to support?

Posted January 11, 2012 - 11:16 am

The consumerization of IT trend got me thinking that end users are likely to ask the IT department to support all sorts of devices. What's the craziest or most absurd thing you've been asked to support, or connect to the corporate network?
- Quick Read
- Like
- Tweet
Question

How serious of a security risk does the theft of Norton Antivirus source code create?

Posted January 6, 2012 - 1:31 pm

I heard today that hackers have stolen the source code for Norton Antivirus, which is what I use at my (small) office. I'm thinking of switching to a different anti-malware/virus program to be safe. Am I overreacting, or is this putting Norton users at risk?
- Quick Read
- Like
- Tweet
Question

How good of an idea is it to create a "good virus" to defend against viruses and cyberattacks?

Posted January 4, 2012 - 4:41 pm

To combat DDoS attacks, the Japanese government is apparently working on a "virus" that can trace back to an attacking resource, then disable it. I can't help but wonder how good of an idea it is to install a "good" piece of malware (or should I call it posiware?) as a preventative measure?
- Quick Read
- Like
- Tweet

SecurityWhite Papers & Webcasts

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

White Paper

Cloud Security Insights for IT Strategic Planning

The survey results of 200 IT professionals highlights the key business and technology drivers behind implementation plans, the importance of security, and the level of investment in security required. This benchmark data can be used for your own cloud security planning.

See more White Papers | Webcasts