Category Archives: Security

Stop Listening to Security People: Focus On The Why Rather Than The What

There, I said it: stop listening to information security people. Before you fire your security vendors, disable those perimeter defenses and toss your security development processes to the fire there’s more to this story you should know. On the front page of MSN.com this morning, there was an article entitled “Stop Listening to Suze Orman” and it reminded [...]

The Dangers of Online Banking: How to Separate the Wheat from the Chaff

I opened up my Web browser this morning and on the front page of MSN.com (yes, yes … I confess my default homepage is still set to MSN) was this article about the dangers of online banking. The article was pretty well written, and it brought to light some very practical things people can do to better protect [...]

Effective Malicious Hacking: Another Case for People, Process, Technology (But Not in the Way You Would Think)

My friend emailed me today and said that her company’s IT department was warning users about a phishing email that was circulating around supposedly from IKEA. (This by the way is an example of a great IT department: they don’t rely on just technology – people and process are also part of their security solution, kudos to them!) [...]

A Tip for Getting the Assessing Network Security Book

Hey everyone, I got several emails recently (in response to this blog posting) regarding how you can get a hold of a copy of Assessing Network Security (ISBN: 9780735620339, Microsoft Press) that myself, David LeBlanc and Ben Smith co-authored a few years back in 2004.  Amazon. Amazon.com has some pretty great reviews of it, however I don’t [...]

Security: The Number One Technology Failure of All Time

I was reading through an article last night about the 25 greatest blunders in technology history and was happily strolling through memory lane (what are Palm Pilots, PS/2s and Apple Newtons anyways? :p) and then got quite a surprise at the very end of the article.  The number one technology failure of all time according to the [...]

“That would require me to actually care about security …”: Inspiring Words From My Developer Friend

At Impacta, one of the core values we have is to always innovate.  Find new, better and more creative ways to solve today and tomorrow’s online risk (security, privacy, etc.) problems. In fact, our company motto is literally ”Innovations that Inpsire” to speak to that core value. I just had one of those unexpected moments today that [...]

Pick the Right Tool for the Job: Penetration Tests, Vulnerability Assessment and IT Security Audits

I had a meeting with a potential Impacta client the other day and they were inquiring about getting a ‘penetration test’ performed against their network.  Upon talking more and more with them, turns out that they needed something much different than a penetration test and I told them this openly. Sure, I could have sold them [...]

How NOT to Conduct a Penetration Test: Recent Rises in a Disturbing Trend

I wanted to blog about a disturbing trend that I’ve been seeing recently. I might be slightly biased here, actually I know I am, but hear me out on this one for just a moment and I think you’ll agree with what I have to say.  I had the chance recently to review the results [...]

Don’t Get Too Caught Up in the Patch Game: How to Tell if a System is “Secure”

An article from Webuser online magazine in the United Kingdom today reported that 98% of home PCs are not secure.  I don’t doubt that number, in fact I am surprised that it’s not higher. What I do disagree with is the definition of ”secure”.  In this report, secure is defined by measuring whether or not the system was up-to-date [...]

Secure Operating System Challenges

I am a big fan of innovation and according to an article from the WSJ at http://blogs.wsj.com/biztech/2008/11/19/making-pcs-as-reliable-as-brakes/, Green Hills, a software company that makes operating systems for medicial equipment and brakes, is planning to develop a “secure layer” for Windows operating systems, particularily the desktop environment.  While I think what Green Hills is trying to do is great, [...]

Follow

Get every new post delivered to your Inbox.