Enterprise Network Security

Targeted attack protection: Step-by-step preparation and mitigation

Targeted attacks can be stopped with a defense-in-depth strategy. Michael Cobb explains how to implement a targeted attack prevention plan.Tip

Prioritizing the need to update Cisco routers: Is it urgent?

Matthew Pascucci discusses how to prioritize the need to update Cisco routers, and offers patch management tips for enterprises.Answer

Software-defined networking: Exploring SDN security pros and cons

Matthew Pascucci offers an intro to software-defined networking and explains why SDN security relies on securing the SDN controller at all costs.Tip

security information and event management (SIEM)

Security information and event management (SIEM) is an approach to security management that seeks to provide a holistic view of organization’s information technology (IT) security. Definition

Network Security Technologies

This section of our Eye On IT Security Series examines the latest in network security appliances, including the latest features finding their way into intrusion prevention and intrusion detection systems, unified threat management, and network monitoring and forensics technology.partOfGuideSeries

Cisco SecureX strategy gets boost with application-aware firewall

Under new leadership, the networking giant's security group relaunched Cisco SecureX with several new products, including an application-aware firewall.News | 28 Feb 2012

Defense in Depth 2.0

This video will offer an executive overview of not only the key business and technical issues that have necessitated a dramatic change in defense in depth design, but also how to develop a strategy that can be used to drive an organization’s layered defense tactics amid a threat landscape that has evolved rapidly in the last 1-2 years.Video

Lumension adds to its endpoint security products with EIC

Lumension announced the Endpoint Intelligence Center to protect endpoint computers from threats, malware and third-party software vulnerabilities.Article | 14 Feb 2011

Gauging UPnP security risks: Is UPnP secure enough for enterprise use?

Is UPnP secure enough for enterprise use? Network security expert Brad Casey assesses UPnP security risks and offers advice for mitigating the threat.Tip

Address IPv6 security before your time runs out

Most networks have partial deployment of IPv6 often without IT realizing it. It’s time to take stock of the security implications before attackers do.Feature

Address IPv6 security before your time runs out

Targeted attack protection: Step-by-step preparation and mitigation

Targeted attacks can be stopped with a defense-in-depth strategy. Michael Cobb explains how to implement a targeted attack prevention plan.Tip

IPv6 security risks: How a teenager can hack IPv6 security

Video: Wolfgang Kandek discusses key IPv6 security risks, as well as how his teenage son was able to inadvertently hack IPv6 on his home network.Video

What will the HSTS protocol mean for Web security?

Matthew Pascucci discusses what effect the new HSTS protocol could have on Web security and on preventing man-in-the-middle attacks.Answer

Low-cost methods for secure, large file transfer

Transferring large files safely can be a costly process. Matt Pascucci offers low-cost options for secure, large file transfers in the enterprise.Tip

The critical risks surrounding smart grid security: RSA 2013

Video: Robert Hinden of Check Point discusses the state of smart grid security and why it's so important to keep the critical infrastructure running.Video

The body count is new, but UPnP security issues are embarrassingly old

HD Moore unveiled research showing wide-scale UPnP security issues last week, but some of the problems have been known for years.News | 06 Feb 2013

How to implement firewall policy management with a 5-tuple firewall

Matt Pascucci explains how to implement firewall policy management for 5-tuple firewalls when ports must be kept open for business reasons.Answer

wildcard certificate

A wildcard certificate is a digital certificate that is applied to a domain and all its subdomains.Definition

Targeted attack protection: Step-by-step preparation and mitigation

Targeted attacks can be stopped with a defense-in-depth strategy. Michael Cobb explains how to implement a targeted attack prevention plan.Tip

IPv6 security risks: How a teenager can hack IPv6 security

Video: Wolfgang Kandek discusses key IPv6 security risks, as well as how his teenage son was able to inadvertently hack IPv6 on his home network.Video

The new era of big data security analytics

The information security industry needs to shift its focus to data-driven security.Feature

The new era of big data security analytics

The information security industry needs to shift its focus to data-driven security.

Best intrusion detection/prevention products 2011

PDF download: Information Security magazine October 2012

In this issue, find out who won this year's Readers' Choice Awards. Also learn about threat management best practices and how hacktivists are impacting the threat landscape.Magazine

security event (security incident)

A security event is a change in the everyday operations of a network or IT service, indicating that an security policy may have been violated or a security safeguard may have failed.Definition

security information and event management (SIEM)

Security information and event management (SIEM) is an approach to security management that seeks to provide a holistic view of organization’s information technology (IT) security. Definition

Computer Security Incident Response Team (CSIRT)

A Computer Security Incident Response Team (CSIRT) is a group of professionals that receives reports of security breaches, conducts analyses of  the reports and responds to the senders.Definition

Cisco SecureX strategy gets boost with application-aware firewall

Under new leadership, the networking giant's security group relaunched Cisco SecureX with several new products, including an application-aware firewall.News | 28 Feb 2012

BYOD (bring your own device)

BYOD (bring your own device) is the increasing trend of employees bringing their own devices to work. Smartphones are the most common example but employees also take tablets, laptops and USB drives into the workplace. BYOD is part of the larger trend of IT consumerization, in which consumer software and hardware are being brought into the enterprise.Definition

How can solution providers augment BlackBerry PlayBook security?

Expert Lisa Phifer explains how to help customers with PlayBook Security, and reveals future PlayBook enterprise features.Tip

Quiz: Endpoint security pitfalls to avoid

This quiz tests your ability to avoid common endpoint control pitfalls that many others have learned to hard way. Type: QUIZQuiz

Securing Android devices with a mobile device security policy

Secure employee-liable Android devices with workable security policies that discover, enroll, protect and monitor all Android endpoints.Tip

Smartphone encryption, authentication ease mobile management

New security tools allow companies to extend encryption and authentication to mobile devices.Magazine

Microsoft security proposal is noble, but no way

Best antimalware products 2011

Antimalware product suites: Understanding capabilities and limitations

Network Security Technologies

This section of our Eye On IT Security Series examines the latest in network security appliances, including the latest features finding their way into intrusion prevention and intrusion detection systems, unified threat management, and network monitoring and forensics technology.partOfGuideSeries

Quiz: Endpoint security pitfalls to avoid

This quiz tests your ability to avoid common endpoint control pitfalls that many others have learned to hard way.Quiz

Securing Android devices with a mobile device security policy

Secure employee-liable Android devices with workable security policies that discover, enroll, protect and monitor all Android endpoints.Tip

Antimalware product suites: Understanding capabilities and limitations

Traditional antivirus tools have matured into multi-featured antimalware suites. Here’s what you should know when shopping for endpoint protection.Magazine