Search

The article provides five steps on how to install a continuous data protection (CDP) system. It mentions about the first step which is information technology (IT) managers need to plan CDP strategies around staff and in accordance with the policies of the company. After the stage of planning, determining what data and applications are needed to protect the system follows, evaluating technological requirements comes after. When developing a CDP plan, it is best to use the state, federal and industry regulations in which the company must comply with as guidelines. As for the final step, testing the system is frequently done to make sure there are no holes in coverage.

The article offers computer technology related news briefs for 2008 in the U.S. Network access control (NAC), identity management and provisioning and auditing will be the three important areas of access control for 2008. Solid-state drives, a hard drive for notebooks, desktops or servers will begin shipping more often in 2008. Adoption and acceleration of the Semantic Web technologies is expected in 2008.

The article revisits a series of articles on information technology security published by eWeek Labs entitled 'Five steps to enterprise security.' According to the series, the five elements of security are assessment, prevention, detection, response and vigilance. In the post-9/11 world, the National Security Agency (NSA) is being seen as a center for excellence for security technique and frameworks such as Infosec Assessment Methodology (IAM) are widely published and taught. The IAM guide suggests such relevant attributes as: accountability, nonrepudiation, authorization, audit and access control.

The article discusses how thinking like a hacker can be an effective method in warding off attacks from malware writers. Chief security officer Jeremy Poteet of AppDefense was able to protect the site of 2004 Presidential election candidate by anticipating the attacks and becuase he himself was a type of hacker commonly referred as white-hat hacker or security researcher. Key information about the commonly attacked systems and applications is provided. The use of data in error messages in accessing systems is taken into account. INSET: A homegrown defense team.

The article discusses the implications of radio frequency identification (RFID) chip in the manufactured technologies to the supply chain in the U.S. It is stated that the RFID tags are moving along items including pharmaceutical, aerospace, consumer goods, automotive, livestock or even human identification. The joint project of Massachusetts Institute of Technology and SAP evaluates the sustainability of proposed network architectures towards the use of RFID in the collaborative fashion of the supply chain. The study emphasized that the people and the industry have not yet thought through the bigger issue because the whole concept of RFID-tagged goods throughout the world is unfamiliar.

The article reports on the growth of profits generated by information technology (IT) security vendors in providing security products to customers. It reveals that the data security industry has recorded an increase of 18 percent to $32 billion in 2005 compared to 2004. There is also the emergence of high margin security products including the software as a service (SAAS) that meets the security demands of customers. These products assist the security requirements of companies. INSET: Locking up Vista: Is it working?.

The article discusses the problems in computer system lockdown and its protection methods. As corporate IT managers evaluate products and technologies designed to protect corporate Windows-based computers against the ever-present tide of spyware, worms and Trojans, they should also consider a more proactive solution--locking down end-user computers by restricting rights and permissions and, consequently, users' ability to compromise their systems. Sony's root-kit/DRM software--discovered, to many users' horror--needed administrative control over the local desktop to install. eWEEK Labs performed a series of tests to gauge the differences in the severity of spyware infection among various users with different permissions. lockdown can be accomplished by changing a user's membership in Windows' built-in local groups. Further lockdown may be accomplished through intelligent use of the Windows Group Policy capabilities, which can severely restrict a user's ability to perform certain tasks. The successfully locking down desktop computers across a large network requires that administrators provide a well-designed and highly functional software and patch delivery system that meets the needs of both internal and remote work stations.

Delves into the laboratory tests made on four SSL-based VPNs available in the U.S. Provision of better and more granular controls as well as comprehensive insight into insight patterns; Identification of the products being reviewed for their performance; Analysis of each of the products.

cloud is a big part of Symantec's business model, as the company provides many of its core capabilities -- message filtering, data loss prevention, backup, recovery and encryption -- as cloud-based services. Since it acquired VeriSign's security business, Symantec has offered a hosted authentication service that verifies users' identities before giving them access to computer systems. Intended for public, private and hybrid cloud

The article offers information on the cyber-security infrastructures and the amount of money spent on security by organizations. The report by the PricewaterhouseCoopers LLP (PwC) 2010 reveals that security spending is not changing even though threats exists. Furthermore, it notes that as the computer crime goes on, the effect of recession on security budgets and the development of Web 2.0 site had emphasized the anti-malware, patch management, data loss prevention, and safer social networking.

eWEEK DATA POINTS: Respond Software co-founder offers five questions to consider when evaluating whether eXtended Detection and Response (XDR) would be a useful addition to an enterprise's security system. [ABSTRACT FROM AUTHOR]

The article reports that Computer Associates International Inc.'s Business Protection Suite r2 merges security with backup management in a neat suite--soughtafter functionality that should help IT managers at small and midsize businesses handle day-to-day management of servers and clients. Business Protection Suite r2, which shipped last month, does a good job of bundling CA's BrightStor ARCserve Backup management tools, eTrust PestPatrol Anti-Spyware and eTrust EZ Antivirus in a single product. Business Protection Suite r2 has a low entry price of $1,099 for a five-user license and ranges up to $6,995 for 50 users. The Business Protection Suite r2's installation disk installs all three components simultaneously and also launches a checklist applet to help guide IT managers through the configuration process. Business Protection Suite r2 ably guided us through the installation of the security components as well as basic backup configuration steps such as setting up media pools and setting up schedules and policies for backups.

The article reports on the new use of the automated Internet protocol (IP) address management. The automated IP address management has discovered to create an extra layer of endpoint security and access control. MetaInfo Inc. is working with customers and partners to use the point at which users are given access to the corporate network as a mechanics to stop and frisk the machine. Through this the company ensures that the device is legitimate and complies with corporate security policies. The need for the access control is because of the rise of the mobile worker, the increasing use of outside contractors who bring in their own laptops and access on the corporate network and rise of malware.

Aside from "the hypervisor has never been compromised," virtualization platform makers aren't likely to talk too much about security concerns. Impediments to selling lots of licenses fast-such as questions about […]

The buzz about the need for virtualization security products is getting louder, with several vendors showcasing approaches to securing virtual environments at the VMworld conference in Las Vegas. VMworld kicked […]

Checkpoint Systems security vendor is adding two new modules to its CheckPro suite of shrink management software solutions. CheckPro IncidentReporter and CaseManager are designed to offer greater visibility into store […]

Microsoft on April 8 announced that it expects to bring a new level of consistency and integration to its disparate security tools when it takes the wraps off its "Stirling" […]

Businesses need to be ready to bring IT and OT together, but they also need the right tools to do so. [ABSTRACT FROM AUTHOR]

The article offers information on the purpose of DevSecOps (development of security operations) which is to build on the mindset with the goal of safely distributing security decisions at speed and scale to those who hold the highest level of context without sacrificing the safety required. It mentions DevSecOps originally focused primarily on automating code security and testing, but now it also encompasses more operations-centric controls.

The article offers information on the open-source Kubernetes 1.12 container orchestration system unveiled by the Cloud Native Computing Foundation.

The article focuses on American technology company Cloudfare. Topics discussed include efforts of the company for growth and improve internet security, by announcing various services such as Encrypted Server Name Indication (ESNI) to increase internet privacy, content delivery network to support Quick User Datagram Protocol (UDP) Internet Connection (QUIC), and Bandwidth Alliance .

The article reports on the announcement of the security solutions provider Proofpoint Inc. regarding the release of its Closed-Loop Email Analysis and Response (CLEAR) technology through its partnership with Okta. It offers brief overview of the capabilities of the solution enables organizations to automatically report, analyze and remediate potential threats. It also notes that the solutions allows users to easily report suspicious message with single click using PhisAlarm email.

The article focuses on the State of the Firewall report by network security management solutions provider FireMon, which reveals that network firewalls are still important part of business enterprise security. Topics mentioned include the insights of Dan Lamorena, chief marketing officer at FireMon, on the increase of firewalls to be managed every year, the investment in firewall technologies, and the challenges in firewall management.

The article reports on the NIST Small Business Cybersecurity Act signed into law by U.S. President Donald Trump. Topics mentioned include the law that requires the National Institute of Standards and Technology (NIST) to help small and medium businesses (SMB) to meet cyber-security objectives, the importance of the law to SMB, and the enforcement of the law.

The article reports on the panel of election officials from across the country who spoke at the Defcon hacking conference in Las Vegas on August 10, 2018 to discuss voting system security to include the California State Secretary Alex Padilla. [ABSTRACT FROM PUBLISHER]

The article reports that the potential risk of multiple systems on modern airliners to vulnerabilities is discussed at Black Hat USA and Defcon events by researchers from security firm IOActive. Topics include the vulnerabilities of supply chain and embedded software technology, the underlying operating system in wireless fidelity (WiFi) access, and research Ruben Santamarta and colleague Josep Rodriguez.

The article offers information on the features of network analytics and virtual machines threat detection framework Chiron by software company Jask.

The article offers information on the details given by information technology services company IOActive related to the vulnerabilities in the desktop and mobile stock trading applications of financial institutions at information technology security event Black Hat USA. It also includes the views of senior consultant at IOActive Alejandro Hernandez.

The article reports on the expansion of IBM's X-Force Red security testing business, particularly the opening of four physical lab branches and the launching of a new service for testing the security of automated teller machine (ATM) banking systems. Also cited are the factors that boost demand for ATM research like major global sporting events, the various risks related to ATMs like physical security, and the comment of IBM X-Force Red's Charles Henderson on the development.

The article reports that HP is teaming up with Bugcrowd on a bug bounty program that will award selected researchers for finding security flaws in a range of printers and Microsoft will raise the prices of the upcoming Office 2019 suite for enterprise customers. Topics discussed include Bug bounty and vulnerability disclosure programs, on-premises and online services for government customers and private program will have to report the vulnerabilities to Bugcrowd.

The article discusses the bug bounty program launched by personal computer and printer manufacturer HP Inc. in partnership with Bugcrowd to discover security flaws in its printers in the U.S. in 2018. Topics include the amount of money to be given to researchers depending on the severity of the discovered vulnerabilities, the report on the increase of vulnerabilities and the threats of internet of things (IoT) devices against cyber attacks.

The article offers information about the move of Pulse Secure to launch its new Pulse Policy Secure 9.0 network access control technology, which provides organizations and businesses with enhanced network access control capabilities. Other information about the company's new Pulse Secure update is presented.

The article informs that Barcelona-based survey and form building service, Typeform has suffered a data breach on June 29, 2018 after an attacker downloaded a backup file from the company's server that contained sensitive customer data. It informs that company is takeing comprehensive review of its security system; along with statement of Ticketmaster that the breach was due to single piece of JavaScript code.

The article reports on the event ticket retailer Ticketmaster which has publicly disclosed a data breach at its division in Great Britain on June 27, 2018 that involved a subset of its global customer base.

The article reports that Apple has renews mobile operating system iOS 12 regarding data security to protect the privacy information of its customers and law enforcement. It mentions Apple's effort is to make encryption of the data on iPhones the default setting and law enforcement agencies expressed concern that this investigative tool will soon be unavailable. It also mentions iPhone was unlocked and then access via the Lightening Port.

The article offers information on the Windows Defender Browser Protection extension for Google Chrome for Anti-Phishing Extension from Microsoft.

The article reports that Facebook is making it easier for its users to control privacy settings with new menu item that says "Privacy Shortcuts." It mentions there is no change in privacy policies of Facebook and Apple also releases iOS 11.3 and macOS 10.13.4 updates to improve security. It presents views of Erin Egan and Ashlie Beringer, Chief Privacy Officer and Deputy General Counsel at Facebook respectively, on transparency in updates.

The article offers brief information on Aqua Security 3.0 container security platform by Aqua Security.

The article reports on the use of blockchain's digital ledger which is a growing trend that offers a new level of security in business transactions and has caused a lot of interest in a short period of time.

The article offers information on the container security startup Deepfence which has developed Security as a Microservice technology for container security. It mentions that Deepfence approach uses lightweight sidecar container and also makes use of artificial intelligence (AI) to help detect potential threats and enforce workload isolation. It presents views of Sandeep Lahan, chief executive officer (CEO) at Deepfence, on developing Security-as-a-Microservice solution.

The article reports on container security technology firm Layered Insight and its efforts in aiding companies in gaining control and visibility of their containers under chief executive officer (CEO) Sachin Aggarwal.

The article reports that the IBM Security study focused on increased use of biometrics for authentication. It states that 70 percent of respondents ranked security over convenience, with priority for financial applications. It states that 44 percent of respondents mentions fingerprint biometrics as the secure method of authentication.

The article reports that Apple addresses multiple security vulnerabilities across its desktop and mobile operating systems by providing security updates in the macOS High Sierra 10.13.3 desktop operating system and the iOS 11.2.5 mobile operating system. It mentions systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

The article focuses on the findings of a report from IOActive and Embedi which shows that flaws in mobile industrial control system applications could be exposing industrial IT systems to risks. According to the report, the security of mobile applications used to help monitor industrial control system (ICS) technology is critically lacking. Jason Larsen, principal security consultant for IOActive, adds that ICS Mobile is mostly being used for testing and edge cases.

The article reports on several new attacks against cryptocurrencies and major vulnerability, and other technology news. It discusses topics the discovery by security firm Alien Vault of an attempt to mine the Monero cryptocurrency with proceeds being sent to Kim Il Sung University in North Korea, the vulnerabilities of two central processing unit (CPU) affecting processors from Intel Corp., AMD, and Microsoft, and the appeal of Broadcom Corp. to shareholders over its bid to aquire Qualcomm Inc.

The article reports that Microsoft Corp. blocks Windows security updates on devices operating antivirus software that is not compatible with the emergency patches issued by the computer technology company for Meltdown & Spectre central processing unit (CPU) vulnerabilities. Topics discussed include blue screen errors caused by incompatible antivirus software, requirement for third-party antivirus vendors to establish a registry key, and system performance issues after patching vulnerabilities.

The article reports on the keynote address delivered by Intel chief executive officer Brian Krzanich at the Consumer Electronics Show in Las Vegas, Nevada on January 2018. Topics include the development of the company's autonomous multi-rotor helicopter, the response of Intel to the Meltdown and Spectre vulnerabilities that affect its central processing units and the superconducting quantum test chip as part of Intel's goal to develop a complete quantum computer system.

The article offers information on efforts of Microsoft to protect its Windows 10 users along with its cloud servers from flaws. Topics discussed include severe memory-isolation flaw in Intel processors called Meltdown by the information technology professionals; need to develop and test mitigations to protect our customers; and company's chip architectures lessen the risk to systems running on Advanced Micro Devices processors.

The article reports that telecommunications company BlackBerry Ltd. has ended software security updates for its PRIV smartphone and decided to close its BlackBerry World app store on December 31, 2019 to focus on mobile security software. It mentions that the company will close its BlackBerry Travel site in February 2018 and Playbook video calling service in March 2018. Moreover, the company will provide support for BB10 device and network access for BBOS devices.

The article reports on the data breach of PayPal Holdings' TIO Networks payment processing service which affect its customers. It cites on the suspension of the TIO operation to protect its customers in which an investigation has identified evidence of unauthorized access to the services of the system. The article also reports on the safe browsing tool of Google will be available to the users as a warning for any application that collects personal data without consent.