Security Experts:

Security Infrastructure
long dotted

NEWS & INDUSTRY UPDATES

Dallas, Texas-based cloud hosting provider, Firehost, announced the opening of two new European data centers located in London and Amsterdam.
AlertEnterprise Compliance Express is a NERC Critical Infrastructure Protection compliance solution designed for smaller organizations such as Cooperative and Municipal Utilities.
The 40 year old FTP protocol was not designed to encrypt its traffic, making it possible for attackers to sniff packets on the network. Should security concerns encourage us to put FTP on the shelf for good?
Security expert Brad Bowers believes Measurement and Signature Intelligence used by the military for activities could be used to detect cyber attacks on critical infrastructure with complex systems.
HBGary has partnered with HP in order to get HBGary’s Active Defense into the ArcSight platform.
As Anonymous launched the “largest attack ever on government and music industry sites” downloads of the popular LOIC DoS attack tool have spiked.
The newly enchaced FreeScan service allows SMBs to scan their web sites for malware, network and web application vulnerabilities, as well as SSL certificate validation, helping web site owners identify security risks.
General Dynamics has opened a new Cyber and Intelligence Solutions Center built to serve the needs of the U.S. Department of Defense and the intelligence community.
Oracle delivered its first Critical Patch Update of 2012, which included a total of 78 fixes across a wide range of Oracle products. The update also marked the first time the MySQL database software has been part of Oracle's CPU process.
Palo Alto Networks has released its semi-annual “Application Usage and Risk Report”, a report that digs into employee activity and the types of applications in use on corporate networks, and what it means for enterprise security.

FEATURES, INSIGHTS // Security Infrastructure

Marc Solomon's picture
Traditional security solutions are falling short of providing needed protection because they’re typically blind to changing conditions and new attacks. Simply put: you can’t protect what you can’t see.
Eric Knapp's picture
Eric shines some light on industrial control system cyber security through a story of a disgruntled control system operator with admin privileges on key systems, and with badge access to sensitive places full of buttons and levers.
Marc Solomon's picture
As vendors and customers alike refresh existing systems, they must recognize that simply upgrading to advanced functionality isn’t enough—it must be incorporated without sacrificing performance or quality.
Rod Rasmussen's picture
Following Operation 'Ghost Click', Millions of machines remain infected with "DNSChanger" malware, and there is a “deadline” looming when a judicial order that is helping keep these infected computers working runs out.
Ram Mohan's picture
Adopters of DNSSEC in the U.S. have a unique barrier to adoption: Congress. SOPA and Preventing Real Online Threats to Economic Creativity and Theft of Intellectual Property Act contain provisions that could break the functionality of DNSSEC.
Chris Poulin's picture
The concept of a data diode isn’t new, but it’s been adopted recently in the critical infrastructure sector, and in so doing limiting the visibility needed to protect against targeted attacks. Data diodes may help protect critical infrastructure from certain attacks, but are they really practical?
Johnnie Konstantas's picture
Second in a series on evaluating new firewalls. This week Johnnie explains how the highest security for your environment is to have technology that can sustain its protections through network growth and scale.
Wade Williamson's picture
As malware gets progressively more complex, it’s important to understand how the major players in the malware industry fit together and how these relationships affect the ways that malware is developed, distributed and ultimately used in attacks.
Chris Poulin's picture
Information security is scads more complicated than monitoring an animal that drags its mobile home around wherever it goes. On one hand we’re concerned about tracking the activities of the bad guys, but continuous monitoring is really about ensuring your assets are prepared, and not just at a moment in time.
Oliver Rochford's picture
Not so long ago, the problem that most security professionals had was a lack of information. Now, many of us have more information than you can throw SQL queries at. So how do you find a needle in a haystack?

Delivered Twice Each Week, the SecurityWeek Briefing Won't Flood Your InBox, But Will Keep you Well Informed on What's Happening in the Industry, Along with Insightful Columns from Industry Experts.

Privacy: We never sell or share your personal information or email address with any other company and you can unsubscribe instantly at any time.