Enterprise Data Protection

DLP management tools and reporting: Key considerations

When it comes to DLP management tools, installation and maintenance of a single centralized management console to house all rules and alerts are key.Tip

With DLP, encryption and integration strengthen security policies

Encryption and DLP integration can be used to enhance and strengthen security policies for sensitive data, and for blocking and enforcement actions.Tip

Using DLP tools for data leakage alerting and preventive actions

When evaluating DLP tools, it's important to determine data leakage alerting and preventive action needs for potential violations and blocking.Tip

DLP monitoring: Defining policies to monitor data

DLP monitoring policies help define what data to evaluate, how data monitoring processes should occur, and what enforcement and alerting actions to take.Tip

Effective DLP products need data discovery and data fingerprinting

Effective DLP products must be able to handle data discovery to identify and monitor sensitive data. Learn why these features matter.Tip

Choosing security products: DLP technology

Data loss prevention technology remains critical in preventing data leakage. In this guide, learn what to consider when evaluating DLP products.guide

The pros and cons of SSL decryption for enterprise network monitoring

Expert Brad Casey discusses the pros and cons of SSL decryption to determine its viability as an enterprise network monitoring method.Answer

Assumption of breach: How a new mindset can help protect critical data

By adopting the assumption-of-breach security model, CISOs and security pros can better protect critical data. Expert Ernie Hayden explains.Tip

International data protection: 'Evil maid' attacks, HDD cloning risks

Video: Cryptoseal CEO Ryan Lackey details the threats associated with international data protection, from cloned hard drives to evil maid attacks.Video

Improving enterprise email security: Systems and tips

Enterprise email security has become more vital than ever due to increased attacks and threats. This tip details systems that can improve protection.Tip

Bruce Schneier explains why there is no privacy on the Internet

Video: Bruce Schneier provides three examples to prove there is no privacy on the Internet. Is government regulation needed?Video

RSA 2013: More from Coviello on big data analytics in the security industry

RSA's Art Coviello explains why the shortcomings of current mainstream security products are part of what's driving enterprise interest in big data.News | 28 Feb 2013

Big data 2.0: CISOs push need to identify attack campaigns

CISOs at RSA Conference 2013 say identifying attack campaigns means taking security big data to the next level. The hard part? Finding data analysts.News | 27 Feb 2013

Managing big data privacy concerns: Tactics for proactive enterprises

The growing use of big data analytics has created big data privacy concerns, yet viable tactics exist for proactive enterprises to help enterprises get smarter while keeping consumers happy.Feature

Managing big data privacy concerns: Tactics for proactive enterprises

What is 'big data'? Understanding big data security issues

In this Ask the Expert video, Ernie Hayden answers the question of what 'big data' is and outlines big data security issues in this video.Answer

Verizon DBIR: Identify insider threat warning signs, safeguard IP

Trusted insiders often play a role in IP theft, according to a new report. Spot the warning signs and apply the right data protection, say experts.News | 24 Oct 2012

Product review: Workshare Professional 5

Product review: Titus Labs' Message Classification

''Data classification best practices: Techniques, methods and projects''

What you need to know about containerized data center security

Part of the draw of containerized data centers is ease and speed of deployment, but these features also pose security risks.Answer

Readers' Choice Awards 2012

For the seventh consecutive year, Information Security readers voted to determine the best security products. More than 2,000 voters participated this year, rating products in 14 different categories.guideSeries

FFIEC statement on cloud risk misses the mark

Bank regulators provide few details on managing cloud risks.News | 26 Jul 2012

Do you need virtual firewalls? What to consider first

With virtual firewalls, you can avoid routing traffic out of the virtual environment to pass through a physical firewall. But there are challenges to consider in going virtual.Tip

Cloud endpoint security: Considerations for cloud security services

Mike Chapple details discuses considerations for using cloud security services, specifically cloud endpoint security.Answer

Monitor outbound traffic: Full-packet capture or only capture network flow data?

If an enterprise can't afford to implement full-packet capture, expert Mike Chapple recommends trying to capture network flow data instead.Answer

DHS cloud computing: Homeland Security’s model private cloud strategy

Using private cloud at separate data centers has allowed the Department of Homeland Security to strike a balance between security and cost savings.News | 05 Oct 2011

Breach fears push federal cloud computing initiative to private cloud

Trapped between budget constraints and security fears, government agencies are increasingly opting for private clouds.News | 20 Sep 2011

XACML tutorial: Using XACML as a foundation for entitlement management

Learn how to use XACML to externalize fine-grained authorization from application logic and support cloud-based IAM initiatives.Tip

homomorphic encryption

Homomorphic encryption is the conversion of data into ciphertext that can be analyzed and worked with as if it were still in its original form.  Homomorphic encryptions allow complex mathematical operations to be performed on encrypted data without compromising the encryption.Definition

Verizon DBIR 2013: Damage caused by simple attacks, slow detection

Verizon's 2013 breach report shows most breaches are caused by a select few attack types, and the majority of breaches aren't detected for months.News | 22 Apr 2013

Verizon data breach report 2013: Data shows need for risk awareness

Verizon's annual breach report indicates outsiders still cause most breaches, and despite no one-size-fits-all defense, better risk awareness can help.News | 22 Apr 2013

DLP management tools and reporting: Key considerations

When it comes to DLP management tools, installation and maintenance of a single centralized management console to house all rules and alerts are key.Tip

With DLP, encryption and integration strengthen security policies

Encryption and DLP integration can be used to enhance and strengthen security policies for sensitive data, and for blocking and enforcement actions.Tip

Using DLP tools for data leakage alerting and preventive actions

When evaluating DLP tools, it's important to determine data leakage alerting and preventive action needs for potential violations and blocking.Tip

DLP monitoring: Defining policies to monitor data

DLP monitoring policies help define what data to evaluate, how data monitoring processes should occur, and what enforcement and alerting actions to take.Tip

Effective DLP products need data discovery and data fingerprinting

Effective DLP products must be able to handle data discovery to identify and monitor sensitive data. Learn why these features matter.Tip

Choosing security products: DLP technology

Data loss prevention technology remains critical in preventing data leakage. In this guide, learn what to consider when evaluating DLP products.guide

Assumption of breach: How a new mindset can help protect critical data

By adopting the assumption-of-breach security model, CISOs and security pros can better protect critical data. Expert Ernie Hayden explains.Tip

Protect intellectual property with data breach prep, cost analysis

Heidi Shey of Forrester Research says enterprises must protect intellectual property better or else face 'death by 1,000 cuts.'Tip

For CISOs, California Right to Know Act would raise privacy emphasis

The proposed California Right to Know Act may compel CISOs to develop additional privacy policies or create new privacy officer roles.News | 09 Apr 2013

ISM January 2003 Konstantaras

enhanced driver's license (EDL)

An enhanced driver's license (EDL) is a government-issued permit that, in addition to the standard features of a driver's license, includes an RFID tag that allows officials to pull up the owner's biographical and biometric data.Definition

Logging in the cloud: Assessing the options and key considerations

Expert Dave Shackleford considers a variety of options for logging in the cloud and determines which choice works best for enterprises.Tip

Protecting Intellectual Property: Best Practices

Organizations need to implement best practices to protect their trade secrets from both internal and external threats.Column

Protecting Intellectual Property: Best Practices

Organizations need to implement best practices to protect their trade secrets from both internal and external threats.

E-discovery forces security organizations to prepare for eventual litigation

Layoffs, Mergers Put Focus on Data Protection

Using a managed file transfer for secure data transmission, exchange

Product Review: GuardianEdge Data Protection Platform

DLP management tools and reporting: Key considerations

When it comes to DLP management tools, installation and maintenance of a single centralized management console to house all rules and alerts are key.Tip

With DLP, encryption and integration strengthen security policies

Encryption and DLP integration can be used to enhance and strengthen security policies for sensitive data, and for blocking and enforcement actions.Tip

Using DLP tools for data leakage alerting and preventive actions

When evaluating DLP tools, it's important to determine data leakage alerting and preventive action needs for potential violations and blocking.Tip

DLP monitoring: Defining policies to monitor data

DLP monitoring policies help define what data to evaluate, how data monitoring processes should occur, and what enforcement and alerting actions to take.Tip

Effective DLP products need data discovery and data fingerprinting

Effective DLP products must be able to handle data discovery to identify and monitor sensitive data. Learn why these features matter.Tip

Choosing security products: DLP technology

Data loss prevention technology remains critical in preventing data leakage. In this guide, learn what to consider when evaluating DLP products.guide

Certain Cisco IOS, IOS XE devices susceptible to brute-force attacks

Cisco has issued a security advisory after Hashcat researchers disclosed a password flaw in IOS and IOS XE devices that enable brute-force attacks.News | 20 Mar 2013

NIST picks Keccak: How enterprises can prepare for the SHA-3 algorithm

Expert Michael Cobb digs into Keccak, the winner of NIST's SHA-3 algorithm competition, to guide infosec teams on how to prepare for its arrival.Tip

ISM January 2003 Smith

Dell acquires Credant Technologies for device encryption

Dell said the addition of Credant bolsters its data protection strategy by adding encryption capabilities for laptops and mobile devices.News | 19 Dec 2012

Privileged user management a must for DBAs

Trust, but verify. Ronald Reagan made it popular, and it's certainly relevant for DBAs in today's consolidated, virtualized IT world.Oracle Revelations | 15 May 2013

DLP management tools and reporting: Key considerations

When it comes to DLP management tools, installation and maintenance of a single centralized management console to house all rules and alerts are key.Tip

With DLP, encryption and integration strengthen security policies

Encryption and DLP integration can be used to enhance and strengthen security policies for sensitive data, and for blocking and enforcement actions.Tip

Using DLP tools for data leakage alerting and preventive actions

When evaluating DLP tools, it's important to determine data leakage alerting and preventive action needs for potential violations and blocking.Tip

DLP monitoring: Defining policies to monitor data

DLP monitoring policies help define what data to evaluate, how data monitoring processes should occur, and what enforcement and alerting actions to take.Tip

Effective DLP products need data discovery and data fingerprinting

Effective DLP products must be able to handle data discovery to identify and monitor sensitive data. Learn why these features matter.Tip

Choosing security products: DLP technology

Data loss prevention technology remains critical in preventing data leakage. In this guide, learn what to consider when evaluating DLP products.guide

Physical and IT Security: Overcoming Security Convergence Challenges

Readers' Choice Awards 2012

For the seventh consecutive year, Information Security readers voted to determine the best security products. More than 2,000 voters participated this year, rating products in 14 different categories.guideSeries

Log management and analysis: How, when and why

In this presentation, John Burke discusses how to make the most of logs to augment an organization’s overall security posture.Video