Information Security magazine - July-August issue PDF - Information Security Magazine

Home
Topics
Enterprise Data Protection
Identity Theft and Data Security Breaches
Information Security magazine - July-August issue PDF

Information Security magazine - July-August issue PDF

Information Security magazine online July-August 2010

Download the July-August issue of Information Security magazine here in PDF format.

Requires Free Membership to View

Login

SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

Michael S. Mimoso, Editorial Director

By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

In this issue of Information Security, we define the advanced persistent threat (APT) and dispel some myths and misunderstandings about a not-so-new attack trend threatening enterprise data and systems. Information security expert Richard Bejtlich, a former military expert, provides a short history and explains the military origins of the term APT. He also dives into some of the misconceptions circulating about APT because of misleading vendor marketing and product promotion, and provides actionable advice that you need to share with operations people and senior management.

In addition, we feature these articles:

► Security SaaS pros and cons
► Building a security careers skill matrix
► Cloud computing and incident response

Remember: As an Information Security subscriber, you can access past features, columns and product reviews. Visit Information Security's archives section, which is available 24/7 (log-in required).

Dig Deeper

People who read this also read...

Related glossary terms

Terms for Whatis.com - the technology online dictionary

Show me more

This was first published in July 2010

More from Related TechTarget Sites

Security Channel
Cloud Security
SMB Security
Financial Security
Security UK
Security AU
Security IN

Security Channel
- HIPAA security checklist: 10 services your customers need
  
  HIPAA compliance services can lead to solid business growth for solution providers. Kevin McDonald's HIPAA security checklist has 10 ways to begin.
- Survey results: VARs report customers’ IT spending 2012 expectations
  
  VARs expect customers to increase spending on security more than any other IT area in 2012. See which security segments will grow the most.
- Create a computer security blog to attract and retain customers
  
  Blogging can produce new leads for security solution providers. Focus on content in your computer security blog that connects with customers.
Cloud Security
- Massachusetts 201 CMR 17.00 and cloud services
  
  Organizations face a March 1 deadline for ensuring their cloud and other service providers comply with Massachusetts’ data protection regulation.
- Are cloud providers HIPAA business associates?
  
  Deciding whether your cloud provider is a business associate comes down to a judgment call based on the type of cloud usage.
- SaaS security: Weighing SaaS encryption options
  
  A look at SaaS encryption techniques and challenges.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchFinancialSecurity
- Web application threats: What you really need to know
  
  In this special presentation, Mike Rothman details today's top Web application threats and pragmatic methods to integrate security into the Web application development process.
- Ramnit worm variant now dangerous banking malware
  
  The Ramnit worm now supports man-in-the-middle attacks, giving cybercriminals the ability to drain a victim’s bank account.
- SIEM vendors make the case for extending SIEM product capabilities
  
  Advanced features can reduce the threat of wire fraud. New rule sets can be shared among banks and credit unions.
Security UK
- Open source software security issues: How to review OSS for security
  
  A reader asks how to judge the security of open source software products. Expert Michael Cobb lists three areas to check.
- Study finds attacks slip past spotty patch management policies
  
  A study finds attackers targeting firms with poor patch management policies, exploiting vulnerabilities that should have been patched years ago.
- Survey: Types of DDoS attacks on the rise due to hacktivist groups
  
  New DDoS statistics suggest hactivist groups are to blame for an increase in the number and types of DDoS attacks across the Internet.
searchSecurityAU
- AISA launches new website
  
  With a reinvigorated look and feel, improved back-end infrastructure, and regularly updated information about the association the Australian Information Security Association website has been re-launched for the benefit of its members and the Australian IT Security industry.
- Cisco hardening guides for IOS, IOS-XR and NX-OS devices
  
  Patching routing and switching infrastructure in any organisation is often delayed, sometimes due to the potential impact on production systems and sometimes because the IT resources are simply too busy fighting fires.
- Cloud providers and data sovereignty issues
  
  Australian cloud provider Ninefold warn that understanding who has legal access to company and personal private data is not as simple as checking a box and selecting the 'in-country' option.
Information Security
- Participate in our InfoSec Priorities survey 2012
  
  Our Information Security Priorities Survey is a comprehensive attempt to look at enterprise security priorities in India for 2012 .
- February 2012 Patch Tuesday: Critical IE, Windows kernel flaws fixed
  
  Flaws in Internet Explorer and the Windows C Runtime library could be used to gain access to system files and download additional malware onto a victim’s machine.
- Burp Suite training tutorial: Part 3 – Sequencer, decoder and composer
  
  In the third installment of our Burp Suite training tutorial, learn how to analyze tokens, decode requests and compare responses using Burp Suite tools.

All Rights Reserved, Copyright 2000 - 2012, TechTarget