Internet Security Alliance October Events
From The Internet Security Alliance
ISAlliance President Larry Clinton, in Estonia by request of the US State Department; Critical Infrastructure Protection (CIP) Congress; ISAlliance/CyLab Webinar; CMU Software Engineering Institute one day course: Creating a Computer Security Incident Response Team; ISAlliance/AIA Webinar; NIST 5th Annual IT Security Automation Conference; Illinois Institute of Technology 5th Annual VoIP Conference & Expo…
Privacy and Security Top Cloud Concerns
By Satish Das of the CTO Forum Team
Today, most of our contracts are jurisdiction-based and mostly relate to the location of data. With cloud computing, this is something which can’t be defined. Until laws evolve to accommodate these technological issues in contractual terms, large corporations will find it difficult to migrate quickly to clouds.
Fighting DDoS Attacks at the ISP Level
By John M. Salomon, Information Security Consultant
I asked one of the sales guys from a major international backbone provider why they didn’t allocate a small portion of these IPs as tarpits? His response: ”Our mission isn’t to save the Internet.” Honestly though, it should be, it’d be in everyone’s interest to minimize capacity used by worms and bots and free bandwidth that could be used productively for other purposes.
Forgotten Security Defenses Pose Threat
By Simon Heron, CISSP Internet Security Analyst
Companies are protecting themselves from high-profile threats such as malware attacks, but are often leaving themselves vulnerable from the forgotten security defenses. In the first of our advisory notices on forgotten security, we advise companies to examine their applications, hardware and security systems to protect against vulnerabilities resulting from insufficient monitoring.
Top Ten Smart Grid Privacy Concerns
By Rebecca Herold (The Privacy Professor) CIPP, CISSP, CISM, CISA, FLMI
Establish energy industry standards that require each utility to perform at least annual PIAs for their area of responsibility on the Smart Grid, in addition to performing PIAs when significant operations changes occur, to show the privacy vulnerabilities and threats for consumer meter and power collection points.
Mobile Cloud Users Exceeds One Billion
By Kevin L. Jackson, Vice President at Dataline
One has to wonder as application architectures adjust to cloud computing, at what point will it no longer be advantageous for application owners to define infrastructure in terms of servers, storage, and security devices?
Idaho Tops The Most Spammed States Report
By Cara Garretson, Veteran Business and Technology Journalist
Residents in states with a high concentration of small and medium-sized businesses are targeted most by spammers, according to a recent report by e-mail security vendor MessageLabs, a Symantec subsidiary that analyzes billions of inbound messages collected by its data centers around the world.
What Are You Worth On The Black Market?
From The CCCNews Team
Ever wondered how much your online identity is worth to a cyber criminal? Cyber crime is now larger than the international drug trade. Nearly 10 million people have reported identity theft in the U.S. over the last 12 months and one in four households have already been victimized.
Industry Should Share Data Loss Information
By Danny Lieberman, Security Expert and Founder of Software Associates
People and their employers are unwilling to discuss the details of security events that happened, their security vulnerabilities, the damage in dollars was actually caused, how the events were discovered, how the threats that exploited the vulnerabilities were mitigated and most importantly – how well their current security products perform.
Seven Ways to Avoid Silos in the Cloud
Coby Royer, Technical Product Manager for Symplified
As you consider the PaaS and IaaS for hosting and deploying new apps, remember that you are not alone. Your app will be one of many for your customers; and collaboration and integration require identity management and access control solutions.
