Security Management Strategies for the CIO-
App store encryption: Learning from Apple's mistakes
After the Apple App Store's security mishap, expert Michael Cobb details the minimum enterprise app store encryption requirements.
-
Out of control: Tackling Java endpoint vulnerabilities
Expert Michael Cobb discusses why known Java security vulnerabilities are on so many endpoints and how to contain them -- without updating Java.
-
Weighing security controls: SANS vs. Australian DSD
Expert Michael Cobb compares the value of the SANS Top 20 Critical Security Controls with Australia's Defence Signals Directorate advice.
-
Why can't I just ignore internal app security threats?
Securing internal applications requires the same due diligence as their Web-facing counterparts. Expert Michael Cobb explains why.
-
What are the limits of free Web app scanning tools?
Expert Michael Cobb explains how free Web application security scanning tools can help secure Web apps for budget-strapped organizations.
-
Does Bit9 compromise prove ills of app whitelisting?
Expert Nick Lewis explains how Bit9 was recently compromised and the viability of application whitelisting as a result of the compromise.
-
When firewalls and AV can't stop APTs, what's next?
Firewalls and antivirus are ineffective in the face of APT attacks. Expert Nick Lewis offers suggestions for advanced persistent threat protection.
-
Comparing DNS reflection attack to standard DoS attack
A DNS reflection attack is like a regular denial-of-service attack, but much worse. Nick Lewis explains why.
-
Inside the Android lock screen bypass vulnerability
Expert Nick Lewis explains how attackers bypassed the Samsung Galaxy Note 2 lock screen and which devices may be vulnerable.
-
How the Adobe Reader sandbox was compromised
Expert Nick Lewis explains how a recent zero-day exploit escaped the Adobe Reader sandbox, and whether it's likely to happen again.
-
Disable autorun to prevent autorun malware infections
Expert Nick Lewis explains how disabling autorun prevents malware from affecting users.
-
How to ward off data-encrypting ransomware
It can be difficult to recover data that is encrypted by ransomware malware -- unless you have expert Nick Lewis' recommendations in place.
-
How to detect malware with changing file sizes
Malware authors change the size of malware files to avoid detection by antivirus software. Learn how to detect this malware from expert Nick Lewis.
-
Is Foxit Reader as flawed as Adobe Reader?
Does the latest Foxit Reader vulnerability mean it's time to find an alternative PDF reader? Expert Nick Lewis offers his advice.
-
Using Java safely outside the browser
Another Java zero-day vulnerability has a security pro asking threats expert Nick Lewis how Java can safely be used with enterprise applications.
-
How many revisions make for good code review?
Expert Michael Cobb details how to argue for a multistep secure code review process like the Microsoft SDL, and the pros of secure coding practices.
-
How to advocate for EMET amid configuration struggles
Expert Michael Cobb discusses whether EMET configuration issues should deter a security team from pushing for an enterprise EMET deployment.
-
How to test antimalware for enterprise conditions
Expert Michael Cobb discusses how to thoroughly test antimalware products before they are deployed in a potentially harsh enterprise setting.
-
Does digital watermarking improve data security?
Expert Michael Cobb explains the advantages of digital watermarking and analyzes whether improved data security is one of them.
-
Are 'self-defending' app security products effective?
Expert Michael Cobb determines whether 'self-defending' application security products actually provide something new to enterprise security.
-
Submit your questions about infosec threats
Nick Lewis is standing by to give you free, unbiased advice on information security threats.
-
Submit your questions about IAM
Randall Gamby is standing by to give you free, unbiased advice on identity and access management.
-
Submit your questions about application security
Michael Cobb is standing by to give you free, unbiased advice on application security.
Submit a question to our experts