Security Management Strategies for the CIO-
Social engineering testing improves training
Worried your users could easily be pwned? Learn about improving social engineering testing to foster anti-social engineering training.
-
Mitigate Poison Ivy RAT malware-style attacks
Learn how to prevent malcode like the Poison Ivy RAT malware, sophisticated malware that has been crafted especially for an enterprise take-down.
-
Does 'pressure chamber improve malware containment?
Infosec threats expert Nick Lewis discusses the viability of an antimalware "pressure chamber: to help bolster enterprise malware containment.
-
How to improve enterprise BYOD security with AUAs
Is your organization facing BYOD security issues? Learn how the implementation of acceptable use agreements can help contain these issues.
-
Does .cc domain malware demand domain blocking?
Learn how to deal with .cc domain malware threats found within DNS traffic. Is domain blocking at the perimeter the best defense strategy?
-
Print-management software security risks
Print-management software shouldn’t provide a great risk to a company provided it uses a private IP address, says expert Mike Chapple.
-
Network topology best practices for security
Network topology mapping to boost security can be time-consuming. Learn how to automate network documentation with network management tools.
-
UTMs: Security efficiency or a failure risk?
UTM devices provide more protection than a simple firewall, but do they increase the risk of an enterprise firewall failure?
-
Will Microsoft's IE automatic updates cause problems?
Expert Michael Cobb deciphers the reasons behind Microsoft's new IE automatic updates. Will they combat update fatigue, or risk breaking Web apps?
-
Does Firefox security now lag behind other browsers?
Expert Mike Cobb reacts to a Google-funded Web browser security comparison and whether it highlights legitimate enterprise Firefox security issues.
-
Enterprise DAM implementation best practices
Mike Cobb analyzes the differences between a SIEM and DAM implementation and how to successfully configure an enterprise DAM.
-
Understanding the benefits and limitations of HTTPS
Expert Mike Cobb explains the value and limitations of HTTPS, and why making the switch to HTTPS may be easier than it seems.
-
Investigating issues with email forwarding security
Expert Mike Cobb discusses webmail forensics possibilities for dealing with the aftermath of an issue involving an email forwarding security breach.
-
Web security standards to prevent cross-site scripting
Expert Mike Cobb details the W3C Web security standards designed to foster a content security policy and help prevent cross-site scripting attacks.
-
Tools for enterprise Windows security log analysis
Expert Mike Cobb provides some of the best Windows security log tools available for the enterprise.
-
Mobile device protection: How to thwart SMS Trojans
Expert Nick Lewis explains how to properly secure a smartphone in order to thwart Trojans that steal SMS messages.
-
Are BIOS attacks worth defending against?
Expert Nick Lewis analyzes the risk of a BIOS attack in juxtaposition to the irritation and expense of securing a network against this threat.
-
Exploring Google Chrome Frame security
Can legacy Web applications benefit from the Google Chrome Frame security and interoperability capabilities? Nick Lewis gives his take.
-
How to protect a website from malware redirects
Malware redirects are a serious hazard in the jungle of infiltration exploits; Nick Lewis explains how they can be avoided.
-
RTP attacks: Prevent enterprise data exfiltration
How big of an issue are RTP attacks in the context of all attacks via covert channels? Nick Lewis looks at tunneling for enterprise data exfiltration.
-
Submit your questions about infosec threats
Nick Lewis is standing by to give you free, unbiased advice on information security threats.
-
Submit your questions about IAM
Randall Gamby is standing by to give you free, unbiased advice on identity and access management.
-
Submit your questions about application security
Michael Cobb is standing by to give you free, unbiased advice on application security.
Submit a question to our experts