Download - Help Net Security

More documents

Recommendations

Info

SmartWorkflow: New security management software blade Check Point announced SmartWorkflow, a new security management software blade that provides customers the option of extending their security infrastructure with policy change management functionality. It enables an automated process of tracking, approving and auditing policy changes within the security management console, minimizing configuration errors and optimizing the integrity of network security. SmartWorkflow includes reporting and auditing capabilities that help customers ensure compliance with corporate policies and regulations. (www.checkpoint.com) Juniper's adaptive threat management solutions for distributed enterprises Juniper Networks Adaptive Threat Management Solutions, based on a dynamic security infrastructure, deliver security at scale that is identity aware and application aware, enabling consistent application delivery and performance across the distributed enterprise - including data center, campus, branch, remote and partner/extranet locations. (www.juniper.com) Trend Micro's protection for virtual machines Security code review service for threat identification Trend Micro is expanding its virtualization security portfolio with a content security solution to protect VMware ESX/ESXi environments. Core Protection for Virtual Machines is designed to secure VMware virtual machines, both active and dormant. The product leverages the VMsafe APIs from VMware to offer layered protection through the use of dedicated scanning VMs coordinated with real-time agents within the VM. (www.trendmicro.com) Comsec Consulting launched CODEFEND, a new application security service which combines technology and expert human analysis, for Outsourced Security Code Review and Threat Identification. CODEFEND is an on-demand service allowing developers to securely send their non-compiled code to Comsec, where it is analysed for security vulnerabilities and threats. Fusing the latest generation of code analysis tools, customised rules and Comsec's proprietary methodologies, the service delivers more accurate reporting and identifies vulnerabilities not routinely picked up when using a "tool only" approach. (www.comsecglobal.com) www.insecuremag.com ! ! 6
Splunk 4 supercharges IT search Splunk 4 improves an organization's ability to manage, secure and audit their entire IT infrastructure. Rearchitected and supercharged, Splunk 4 has infused IT search with speed and a customizable user interface. It offers users the ability to create custom dashboards for anyone in fewer than five clicks. The release also shatters the speed of previous releases with up to 10x faster search and 2x faster indexing, radically enhancing IT issue resolution times and incident investigations, giving users the power to index terabytes per day and search on massive amounts of IT data to deliver results in seconds on low-cost commodity server hardware. (bit.ly/17x8jx) RSA SecurID software token for iPhone RSA released the RSA SecurID Software Token for iPhone Devices that enables an iPhone to be used as an RSA SecurID authenticator, providing convenient and cost-effective two-factor authentication to enterprise applications and resources. The app is now available on the App Store at no charge. The required RSA SecurID software token seed as well as RSA Authentication Manager - the software that powers the RSA SecurID system - are both available for purchase worldwide. (www.rsa.com) Sourcefire and Qualys deliver real-time risk analysis Sourcefire and Qualys announced that Sourcefire has become a Qualys Solution Partner and the companies have integrated the Sourcefire 3D System with QualysGuard. The combination of Sourcefire and Qualys enables organizations to reduce the number of actionable network threats by leveraging Sourcefire Defense Center to correlate threats detected by Sourcefire's intrusion prevention system (IPS) against host vulnerabilities identified by QualysGuard. (www.qualys.com) Open source project to secure the Domain Name System The OpenDNSSEC project announces the development of open source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security. Industry leaders including .SE, NLNetLabs, Nominet, Kirei, SURFnet, SIDN and John Dickinson have come together to create open source software that promises to make it easier to deploy DNSSEC. The group's primary aim is to further protect the Internet by increasing the security for end-users. (www.opendnssec.org) www.insecuremag.com ! ! 7
Page 5: VPN management for Linux networks N
Page 9 and 10: Mobile Guardian Enterprise Edition
Page 12 and 13: Integrating the results from a vuln
Page 14 and 15: continuous scans are expensive, the
Page 16 and 17: The fine folks at Origin Storage sh
Page 18 and 19: Further customization There is an a
Page 21 and 22: When you think about celebrities, y
Page 23 and 24: The ultimate guide to Nmap Besides
Page 25 and 26: information wherever it is or where
Page 27 and 28: to externally hosted services that
Page 29 and 30: Practical Intrusion Analysis By Rya
Page 31 and 32: Information Security Management Met
Page 34 and 35: On a daily basis, online spammers a
Page 36 and 37: arranged in the same manner that ot
Page 38 and 39: Have you ever left the light, radio
Page 40: With some imagination, they create
Page 43 and 44: The work “Above the Clouds,” pu
Page 45 and 46: Second, using cloud services betwee
Page 47 and 48: "My IT department came to me with a
Page 49: As expected, cybercrime is soaring
Page 52 and 53: Authors: Felicia Donovan, Kristyn B
Page 55 and 56: In light of recent wireless breache
Page 57 and 58:
Myth #4 - We have upgraded all of o
Page 59 and 60:
Recent studies show that securing t
Page 61:
Another best practice to protect an
Page 64 and 65:
malicious users. Other attacks exis
Page 66 and 67:
Web Application Frameworks An ideal
Page 68:
IT Showcase Asia 2009 6 October-7 O
Page 71 and 72:
model (80 percent) for the creation
Page 73 and 74:
The case for authentication The rea
Page 75 and 76:
In a least privilege computing envi
Page 77 and 78:
seriousness of the security threat
Page 80 and 81:
Today!s IT security professionals e
Page 82 and 83:
sensitive customer data, such as e-
Page 84 and 85:
Whether driven by data security man
Page 86 and 87:
Intelligent routing also includes a
Page 89 and 90:
PE Explorer (www.net-security.org/s
Page 91 and 92:
Policy Policy is an overused word,
Page 93 and 94:
with insiders. With malware, at lea
Page 96 and 97:
This article discusses the impact o
Page 98 and 99:
According to the Californian law, p
Page 100 and 101:
lost or stolen, but also for import
Page 103 and 104:
It!s a common scenario right now, p
Page 105:
3. How quickly can you and your IT
Page 108 and 109:
Manage network security Attacks on
Page 110 and 111:
Endpoint or host security is critic
show all

Download - Help Net Security

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?