• Login
  • Become a member
  • RSS
  • Part of the TechTarget network
SearchSecurity.com
  • News
    • Latest Headlines
      • Patch Tuesday September 2013: Critical bulletins for Office, SharePoint, IE
      • Damballa adds HTTP request profiling to its ATP platform
      • NYT cyberattack neatly sidestepped by big data
      • View All News
    • Featured
      • Information Security Magazine

        The information security pro’s resource for keeping corporate data, applications and devices secure

        Download Now!
  • Premium
    Editorial
    • E-Books
      • Technical guide to secure collaboration software
      • Technical guide on PCI: Global compliance trends
      • Technical guide to Web security gateways
      • View All E-Books
    • E-Zines
      • Information Security magazine
      • Information Security magazine archives
      • Information Security magazine subscription/renewal
      • Information Security magazine calendar
      • View All E-Zines
    • E-Handbooks
      • Developing your endpoint security management transition plan
      • Emerging threat detection techniques and products
      • Enterprise network security visibility: Beyond traditional defenses
      • View All E-Handbooks
  • Multimedia
      • Videos
      • Gary McGraw Silver Bullet Podcast
      • Screencasts
      • Webcasts
      • Podcasts
      • Slideshows
  • Security
    Topics
    • Topics
      • Enterprise Data Protection
      • Application and Platform Security
      • Enterprise Identity and Access Management
      • Government IT Security Management
      • Information Security Threats
      • Information Security Careers, Training and Certifications
      • Security Audit, Compliance and Standards
      • Security for the Channel
      • Enterprise Network Security
      • Information Security Management
    • Hot Topics
      • Security Management Strategies for the CIO
      • Security patch management and Windows Patch Tuesday news
      • PCI Data Security Standard
      • Disk Encryption and File Encryption
  • Tutorials
    • Advice & Tutorials
      • Security School Course Catalog from SearchSecurity.com
      • Information Security Learning Guides
      • Information security book excerpts and reviews
      • Wireless Security Lunchtime Learning with Lisa Phifer
      • Information security podcasts
      • Screencasts: On-screen demonstrations of security tools
      • View All Tutorials
    • Technology Dictionary
      • Find definitions and links to technical resources
      • Powered by WhatIs.com
  • Expert
    Advice
    • Tips
      • A decade later: SOX program management best practices
      • Using a next-gen firewall to determine application access policies
      • IT security frameworks and standards: Choosing the right one
      • View All Tips
    • Answers
      • The 2013 OWASP Top 10 list: What's changed and how to respond
      • Does Content-Agnostic Malware Protection improve Chrome security?
      • Do two-factor authentication vulnerabilities outweigh the benefits?
      • View All Answers
    • Ask a Question
      • Get help from our technical community
      • Powered By ITKnowledgeExchange.com
  • White
    Papers
    • Research Library
      • White Papers
      • Business Webcasts
      • Downloads
      • Powered by Bitpipe.com
    • Product Demos
      • Try out software demos
      • Powered By 2020Software.com
    • Resource Centers
      • View All Resource Centers
  • Blogs
    • Blogs
      • More Security Blogs
      • Security Corner with Ken Harthun
      • Security Wire Weekly
      • More Security Blogs
      • Powered By ITKnowledgeExchange.com
  • Certification
    Central
      • CISSP Practice Test
      • Earn CPE Credit
  • Home
  • Ask the Experts
  • Submit your questions about infosec threats

    Nick Lewis is standing by to give you free, unbiased advice on information security threats.

  • Submit your questions about IAM

    Randall Gamby is standing by to give you free, unbiased advice on identity and access management.

  • Submit your questions about application security

    Michael Cobb is standing by to give you free, unbiased advice on application security.

  • Meet All Experts

Submit a question to our experts

Expert Answers

  • Understanding certificates and keys in C2B transactions

    Expert Michael Cobb details the SSL handshake and the role of public and private keys in a C2B transaction.

  • The costs and benefits of Android GMA

    Expert Michael Cobb details the costs and benefits of Android GMA, which raises the bar for mobile browser security.

  • When should you enable or block silent updates?

    In light of the increasing popularity of silent updates, expert Michael Cobb examines their security and application-compatibility implications.

  • Tips on good Android lock patterns

    Get advice from expert Michael Cobb on how to secure your Android device with good Android lock patterns.

  • Sharing security intelligence: Where to begin

    Expert Nick Lewis explains how enterprises can forge strong security networks that support sharing security intelligence.

  • How to measure AV vendors' research teams

    Is your enterprise conducting an anti-malware comparison? Expert Nick Lewis provides metrics to find the best fit for your enterprise's needs.

  • Security criteria for third-party data recovery

    Expert Nick Lewis discusses the security requirements enterprises should establish when selecting a third-party data recovery services provider.

  • Should enterprises help users find secure mobile apps?

    Expert Nick Lewis explains the role enterprises should play in helping BYOD users define malware and identify secure mobile apps.

  • Avoid joining DDoS attacks via the Low Orbit Ion Cannon

    Recent DDoS attacks by Anonymous show why enterprises must avoid the Low Orbit Ion Cannon tool and other Web-based malware. Expert Nick Lewis explains.

  • The Global Payments data breach: What went wrong?

    Expert Nick Lewis discusses the Global Payments data breach, focusing on lessons to be learned for PCI DSS-compliant enterprises.

  • Auditing remote desktop access software

    Is your remote desktop access software really secure? Randall Gamby offers advice for conducting a remote access audit to validate security.

  • Has risk-based authentication finally matured?

    Expert Randall Gamby discusses risk-based authentication, and whether that type of user identification system is right for the enterprise.

  • Types of SSO: Comparing two vendors' SSO approaches

    Expert Randall Gamby discusses various types of single sign-on, specifically the approaches of Ping Identity's SSO and Symplified SSO.

  • Using IDaaS and XACML for a hybrid IdM system

    Is IDaaS a wise choice for managing access to cloud and on-premise systems? Randall Gamby discusses hybrid identity management systems.

  • Streamlining the compliance review process

    The compliance review process can be complicated, especially when getting input from others. Mike Chapple offers advice to streamline the process.

  • Security vs. compliance: Is 'checkbox security' OK?

    Mike Chapple discusses the compliance vs. security challenge and why a "checkbox security" mentality may actually be a good thing.

  • How do I know if I need a GRC product?

    Is it necessary to purchase pricey GRC or compliance management software to meet PCI DSS and HIPAA compliance requirements? Mike Chapple discusses.

  • Monitoring P2P activity by IP address

    Mike Chapple discusses whether you should be monitoring P2P activity with site crawling and info gathering websites like YouHaveDownloaded.com.

  • Patent-infringing products: Too risky to purchase?

    Mike Chapple discusses whether enterprises should purchase next-gen firewall products from allegedly patent-infringing vendors.

  • Protecting your database with a triple-homed firewall

    Mike Chapple discusses database security best practices and how to protect against unauthorized Web access by using a triple-homed firewall.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
More from Related TechTarget Sites
  • Cloud Security
  • Consumerization
  • Financial Security
  • SMB Security
  • Security AU
  • Security IN
  • Computer Weekly
  • Cloud Security
    • Echopass achieves PCI Level 1 certification; CISO offers PCI guidance

      On the heels of Echopass achieving PCI Level 1 certification, CISO Dennis Empey offers PCI guidance for other cloud providers navigating the process.

    • SearchCloudSecurity's Cloud computing security certification guide

      Certification expert Ed Tittel examines the growing number of cloud computing security certifications, both vendor-neutral and vendor-specific.

    • CSA exec: Cloud defense demands intelligent security strategy

      Video: Cloud Security Alliance COO John Howie discusses the 'intelligent security' strategy necessary for cloud providers to defeat targeted attacks.

  • Consumerization
    • Apple's free iWork suite provides alternative to Office for iOS

      Apple's free iWork is considered a Trojan horse, since it gives new iOS device users an office productivity suite ahead of Microsoft Office for iOS.

    • Consumer cloud services: Friend or foe?

      IT and workers alike can reap benefits from using the consumer cloud, but admins have to get past the concerns over data security first.

    • Notebooks or tablets: Which to choose for mobile workers

      A mobile workforce that uses the cloud needs their company to think about end-user segmentation to determine the best devices for their needs.

  • searchFinancialSecurity
    • PayPal CISO: Laws must foster better cybersecurity information sharing

      PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.

    • Cybergang plans to use Trojan against U.S. banks

      A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.

    • Improved Shylock Trojan targets banking users

      The latest variant of the banking Trojan is causing numerous problems, Symantec said.

  • searchMidmarketSecurity
    • Windows Phone 7 security: Assessing WP7 security features

      Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.

    • Choosing the best security certifications for your career

      Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.

    • Midmarket security tutorials

      SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.

  • searchSecurityAU
    • NYT cyberattack neatly sidestepped by big data

      Big data analysis of IP addresses performed by OpenDNS kept some 50 million users from falling prey to the hijacking of The New York Times website.

    • How to assess cloud risk tolerance

      Assessing risk tolerance is a key part of a cloud risk management strategy. In this tip expert Ed Moyle explains how to assess cloud risk tolerance.

    • TPM security overview: Defining the benefits of TPM devices

      The nearly ubiquitous TPM device is an often-overlooked tool in an infosec pro's arsenal. Expert Michael Cobb details the benefits of TPM security.

  • Information Security
    • Android-based mobile malware rises – but what is the risk to Indian businesses?

      Mobile-dependent Indian businesses must secure networks against viruses as McAfee reports a large jump in Android-based malware

    • Dropbox can be hacked, say security researchers

      Security researchers say they bypassed the security of cloud-based storage service Dropbox and gained access to private user files

    • Android mobile malware rebounds in Q2, reports McAfee

      Android-based malware has grown 35% in the second quarter, according to the latest threat report from security firm McAfee

  • Computer Weekly
    • Cyber insurance: Understanding the legal language

      CIOs worried about cyber risk are increasingly turning to cyber insurance to offset risk. But is the cover as black and white as it first seems?

    • After virtualising IT estate, Jaguar Land Rover now eyes cloud computing

      Jaguar Land Rover's IT team takes its newly virtualised infrastructure to the next stage of IT evolution by adopting cloud-based services

    • Will the iPhone 5S’s fingerprint technology help enterprise security?

      A fingerprint sensor has been built into Apple's latest iPhones. Computer Weekly looks at what this means for enterprise security

All Rights Reserved,Copyright 2000 - 2013, TechTarget
  • About Us
  • Contact Us
  • Site Index
  • Privacy policy
  • Advertisers
  • Business partners
  • Events
  • Media kit
  • TechTarget Corporate site
  • Reprints
  • Archive
  • Site map