Home > Information Security Magazine
EMAIL THIS
Information Security Magazine

  CURRENT ISSUE  

  FEATURES  

  COLUMNS  

  HOT PICK & PRODUCT REVIEWS  

  ARCHIVES  

  SUBSCRIBE/RENEW  
 
Information Security Magazine
This Month
Sign up for Information Security RSS feeds
JUNE 2008
FEATURES

Five Server Virtualization Security Do's and Don'ts

GRC Tools Help Manage Regulations

Security Awareness Training Essential Part of Infosec Program

VIEW FEATURES FOR ALL MONTHS
COLUMNS

CISOs Must Innovate to Enable Business

Architect Security and Compliance Programs to Be Complementary

Address Authentication and Transaction Validation Protocols to Stem Identity Theft

VIEW COLUMNS FOR ALL MONTHS
HOT PICK & PRODUCT REVIEWS

Product review: Credant Mobile Guardian 6.0

Product review: Mu-4000 Security Analyzer

Product review: Klocwork Insight 8.0

VIEW HOT PICK & PRODUCT REVIEWS FOR ALL MONTHS

HOW WE GRADE PRODUCTS
Read more from Information Security magazine in our back issues.

May 2008

April 2008

March 2008

February 2008

January 2008

November 2007

October 2007

VIEW ALL BACK ISSUES

2005 Features

VIEW FEATURES FROM PREVIOUS YEARS::  

2008   |   2007   |   2006   |   2005
December 2005

To Catch a Thief
by Shon Harris
Forensics tools aren't only used in high-profile cases.

Thinking Ahead
by Michael S. Mimoso
Information Security's 2006 Priorities Survey signals a transition for security managers from an operational to a more strategic stance.

The Weakest Link
by Michael Cobb
Despite perimeter defenses, application code is precariously insecure. Application-layer firewalls, when carefully deployed, can help block attacks.

On the Mend
by Adam Stone
Health care giant Novartis AG got a much-needed shot in the arm with a comprehensive risk assessment and revamped security management system.

Controlling the Uncontrollable
by Sandra Kay Miller
Organizations must leverage policy, and harness new protocols and technology to tame wild WLANs.
November 2005

On the Line
by Ed Skoudis & Mike Poor
See how five IPS appliances match up against attacks.

E-mail Security Guide for Managers
by George V. Hulme
Staying on top of the latest e-mail threats.

Aerial View
by Diana Kelley & Ed Moyle
Vulnerability tools provide a realistic view of the enterprise, where vulnerabilities are viewed in the context of the IT landscape.

Mixed Signals
by Eric Cole
Conflicting firewall rule sets can make policing your network a nightmare. Here's how to keep traffic flowing smoothly.
October 2005

Security Seven Awards
by Information Security Editors
Seven winners. Seven verticals. Countless achievements.
Education: Dave Dittrich
Financial Services: Christofer Hoff
Telecommunications: Edward Amoroso
Government: Charles McGann
Energy: Richard Jackson
Manufacturing: Hans-Ottmar Beckmann
Health Care: Patrick Heim
Profiles by Michael S. Mimoso, Bill Brenner, Herman Mehling, Susan Hildreth, Mark Baard

Security Hang-ups
by Jeff Stutzman
Will VoIP's shortcomings give businesses a wake-up call?

SQL Server 2005 Premieres
Next month, Microsoft adds a star-studded cast of security features to its database system.
September 2005

Sizing Up E-mail Appliances
by Tom Bowers
Is your organization inching along because of spam, malware and phishing attacks? We tested four e-mail appliances designed to clear the way for safe messaging. Here's how they measured up.

Best Advice
by Michael S. Mimoso
In this must-read compilation, we asked security luminaries to share their anecdotes, professional wisdom and success stories.

5 Must-Have Hacker Tools Revealed
by Ed Skoudis
The bad guys use them to steal info and wreak havoc. You should use them to find the holes before they do.
August 2005

A Safe Bet?
by Paul Proctor
Network anomaly detection is the newest player at the security table.

Proving Grounds
by Joel Snyder
Test labs are the ideal place to check theory against reality.

Boot Camp
by David Bianco
Whip your users into shape with security awareness training.

Paper or PKI?
by George V. Hulme
SAFE is a biopharmaceutical industry initiative to standardize credentials for drug discovery. It could save the industry billions.

Switching Lanes
by Joel Snyder
Learn how to leverage the VLAN as a security tool.
July 2005

Meet the New Champions
by Michael S. Mimoso
CIGNA makes business managers responsible for security.

Mission Impossible
by Ed Skoudis
Seven ways to leverage your infrastructure against spyware.

Amazing Access
by Jon Oltsik
Finding a comprehensive identity and access management architecture requires leadership to navigate the technology and implementation labyrinth.

All Aboard!
by Charles Cresson Wood
To gain buy-in and support for your security policies, it's best to start at the top.

Linux's Best Friend
by Brett D. Hall
Thanks to YUM, Linux updates are as reliable as Old Yeller.
June 2005

Nothing But 'Net
by Michael S. Mimoso
SSL VPNs provide The Sports Authority, and a growing number of enterprises, with cheaper secure remote connectivity. Will they eventually slam dunk IPSec?

Patch Tuesday
by Michael Mimoso and Bill Brenner
Microsoft's regular patch release cycle is a combination of information, process and automated tools that makes updates go more smoothly.

Sploit!
by Ed Skoudis
Exploit frameworks are the machine guns of automated attacks. Don't get caught on the wrong end of the barrel.

Unwelcome Callers
by Eric Cole
Unsecured RPCs can leave you open to attack. Take steps to secure your networks.
May 2005

Keeping the Data & Oil Flowing
by Michael S. Mimoso
When ChevronTexaco puts a drill in the ground, it must live with that decision for decades. Risk management and data integrity are essential.

Trust Us
by Richard Mackey Jr.
It doesn't come easy when you federate identity management.

Big Brother's Watchful Eye
by Lawrence M. Walsh and David Taylor
Our survey finds that enterprises are spending big on management systems to meet regulatory requirements.

Snapping on SNMPv3
by Eric Cole
The ubiquitous management protocol is more secure, but upgrading isn't simple.
April 2005

Damage Control
by Michael S. Mimoso
ChoicePoint's Rich Baich faced the perfect storm: a huge security breach, intense media attention and a shareholder revolt. What he needed was an incident response plan to get him out of the hot seat.

Warning Lights
by Tony Bradley
Evolving risk dashboards will tell how secure you are and when something's wrong.

Rights of Passage
by Tom Bowers
Our tests found that most endpoint security products will enforce policy and network access. Their differences are in the details.

Ready For Takeoff
by Adam Cole
Cutting costs was the only way to keep United Airlines flying high. Rich Perez's answer was to rebuild the network.
March 2005

Invasion Force
by David Dittrich

Crypto Hazard
by Lawrence M. Walsh
Could cryptography be the next destructive malware payload?

Guardians of the Crown Jewels
by James C. Foster
Database security products promise an extra measure of security for your most valuable assets. Are they worth the price?

Double-Check with Routers
by Eric Cole
Conventional routers are the perfect network security auditing device. Take advantage of what they see.
February 2005

On the Job
by Anish Bhimani
12 lessons they don't teach you in security school about being a CISO.

In MSSPs We Trust
by Adam Stone
Regulatory and cost-cutting pressures are forcing enterprises to reexamine the value of managed security services.

Security: Measuring Up
by Pete Lindstrom
Metrics are the key to measuring security. These frameworks will help you gather data and calculate the answers you need.

SSHv2: Safe & Secure
by Eric Cole
The overhauled encryption protocol helps harden networks.
January 2005

Peer-to-Peer
by Erik Sherman
Seattle CISOs Ernie Hayden and Kirk Bailey are pioneering a new level of trust and cooperation to secure their enterprises.

Vulnerability Mismanagement
by Shon Harris
You're just plugging holes if you don't have the right processes and policies.

The Myths of Security
by Andrew Briney
The ancient Greeks spun myths to explain the unexplainable. Modern enterprises use commonly held myths as a foundation for security.

The Sky's the Limit
by Lawrence M. Walsh
What security technology do you need that you can't get today? Here's your wish list.

Key to the World
by Brian Cincera
SAML's portable trust makes federated identity work.




TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineWebcastsWhite PapersLearningAdviceTopicsEventsAbout Us