Two Vulnerability Scanning Tools Evaluated
By Bozidar Spirovski, CISSP, MCSA, MCP
In terms of speed, Retina performed much faster. In terms of scan depth, Nessus has a small advantage, since it includes a web mirroring tool that is very helpful in HTTP. In a direct comparison, Nessus wins simply because Retina manifested erroneous results on repeat scans.
A Process Checklist for System Hardening
By Bozidar Spirovski, CISSP, MCSA, MCP
Most administrators and security officers are well aware of the necessity of system hardening for corporate systems. Hardening is the process of securing a system by reducing its surface of vulnerability. By the nature of operation, the more functions a system performs, the larger the vulnerability surface. Here is a checklist and diagram by which you can perform your hardening activities.
Securing Hardware for Storage and Disposal
By Bozidar Spirovski, CISSP, MCSA, MCP
Any organization should have a simple and brief procedure to treat information carriers for systems that are to be discarded. All that hardware contains a lot of confidential information, and it is essential that such data is properly erased so it cannot be recovered. Here is a brief summary of the crucial information disposal procedure elements.
5 Minute Security Assessment for Businesses
By Bozidar Spirovski, CISSP, MCSA, MCP
While the real thing may take time, some budget lobbying, and the guts to admit that you are not perfect, here instead is a very fast security self-assessment which will give you a rough idea of where you stand.
Sound Advice for Evaluating SIEM Systems
By Bozidar Spirovski, CISSP, MCSA, MCP
Evaluating Security Information Event Management (SIEM) solutions is important, as they come in a lot of different flavours. So, in order to sift through the multitude of solutions, the buyer needs to ask the hard questions. Here are some of the key questions that need to be taken into consideration:
Tools for Detecting Spoofed Email Headers
By Bozidar Spirovski, CISSP, MCSA, MCP
In the age where a huge percentage of all attacks are done through e-mail, very few of us know how to analyze where this e-mail was sent from. This analysis must go beyond the sender e-mail displayed in your e-mail client (which are easily spoofed). Here is a simple tutorial on analyzing Internet headers.
Conducting Dbase Corruption Investigations
By Bozidar Spirovski, CISSP, MCSA, MCP
Analyzing an incident when the manufacturer claims that it’s an operator error and the operator claims that it is an application error is one of the most daunting tasks of a security officer. And this is a type of incident that the security officer will be called upon to investigate simply because the management needs an independent observer and has doubts both in the operator as well as the manufacturer. Here is what to do when thrown into the fire…
A Computer Forensics Process Tutorial
By Bozidar Spirovski, CISSP, MCSA, MCP
In reality, the computer forensics job is a standard process and every one of us does parts of the process when we debug our computers. Here is a simple tutorial on what is involved in performing more thorough computer forensics.
Security Information Event Management
By Bozidar Spirovski, CISSP, MCSA, MCP
Banking, Telecommunications, Power and Energy - anyone and everyone is under internal audit and regulator scrutiny to implement a Security Information Event Management system. But most Security Information Event Management implementations are rushed and placed only to shut up the auditors and to go on as usual. Since it’s a compliance requirement, the Security Information Event Management salespeople very rarely address whether the customer makes proper use of the solution, and whether this solution brings benefits to the company.
Top 5 Mistakes in Information Security
By Bozidar Spirovski
Does your information security implementation suffer from mistakes in approach? Everyone is focused on information security, and security is a constant addition into every corporate mission statement. And yet in nearly every security implementation there is a recurring range of mistakes in information security. Here are the most common five.
