Security Management Strategies for the CIOEmail Alerts
-
Quiz: Reinventing defense in depth
This quiz is part of SearchSecurity.com’s Intrusion Defense Security School lesson, Reinventing defense in depth. Reinforce your knowledge of the key concepts of this lesson by taking the five-question quiz below. Quiz
-
Quiz: Application and network log management program planning
Find out how much you've retained from the Application and log management program planning Security School lesson. Quiz
-
Quiz: Securing the converged infrastructure
A five-question multiple-choice quiz to test your understanding of the content presented by expert John Burke in this lesson of SearchSecurity.com's Integration of Networking and Security School. Quiz
-
Quiz: Using the network to secure the application layer
A five-question multiple-choice quiz to test your understanding of the content presented by expert Michael Cobb in this lesson of SearchSecurity.com's Integration of Networking and Security School. Quiz
-
ISM landing page mock up
Windows IT management tip
-
Answer page: Integrating security into the network quiz
SearchSecurity Retention
-
Integrating security into the network quiz
Find out how much you've learned about integrating security into the network in Identity and Access Management Security School. Identity and Access Manag
-
The Architectural Model
This security architecture clickable diagram depicts the elements of organizational security architecture and how they interact with each other. The presentation here is slanted toward a corporate view in terms of the usage, but essentially all eleme... Enterprise Information Se
-
Snort Intrusion Detection and Prevention Guide
Answers to frequently asked questions related to the open source Snort intrusion detection and prevention system. SearchSecurity Technical
-
SecurityEXPERT eases device configuration but requires the UpdateEXPERT patching tool
Learn how St. Bernard's SecurityEXPERT automates deployment and enforcement of strong security configurations across Windows and Unix devices, based on industry best practices. However, it lacks customized reporting and requires the UpdateEXPERT patc... Review
- See More: Essential Knowledge on Network Device Management
-
HP printer vulnerabilities leave millions of printers susceptible to attack
Researchers at Columbia University have discovered a vulnerability in HP’s LaserJet printers that could allow attackers to gain complete remote control. News | 30 Nov 2011
-
Eye On: Network security management
This special report examines fundamental issues key to successful enterprise network security management. News | 02 Nov 2011
-
Better methods needed to discover network configuration flaws
Many network security professionals take the wrong approach when testing their networks, according to one prominent security expert. Article | 15 Feb 2011
-
Researchers uncover Cisco firewall vulnerabilities, McAfee console flaws
While the vendors have released patches, SecureWorks researchers told Black Hat 2010 attendees that many enterprises place too much trust in their security systems and fail to check them for basic vulnerabilities. Article | 28 Jul 2010
-
Researchers find thousands of flawed embedded devices
Columbia University researchers found thousands of devices, from home routers to video conferencing units at risk. They say their research has implications for enterprises. Article | 28 Oct 2009
-
SIEM: Not for small business, nor the faint of heart
Technologists say security information and event management success depends not on the product, but on the risk and information management program implemented with it. Also, small businesses lack the resources to get much value from SIEM systems. Article | 22 Apr 2009
-
Ixia network security tool exposes problems
IxDefend from Ixia addresses network device and application flaws by fuzzing them to expose flaws and trigger problems. Article | 02 Dec 2008
-
Virtual network tool gives firm view into virtualized environment
Nielsen Mobile uses Altor Networks' security analyzer to gain insight into virtual network activity Article | 06 Nov 2008
-
Cisco warns of security appliance flaws
Cisco Systems warned customers Wednesday that its Adaptive Security and PIX Security appliances contained flaws affecting the security of VoIP and VPN connections. Article | 23 Oct 2008
-
Kaminsky: DNS issue still major threat
Dan Kaminsky, discoverer of a severe DNS vulnerability, says there are a number of complicated systems still vulnerable to attack. Article | 29 Sep 2008
- See More: News on Network Device Management
-
VoIP eavesdropping: Hardening network security to contain VoIP risks
Mike Chapple analyzes the VoIP risks posed by implementing a VoIP network and exposes the reality of telephone eavesdropping. Tip
-
Log Parser examples: Using the free log analysis tool
Log analysis is an essential security function for almost all enterprises, and, with Log Parser, much of it can be done for free. Learn how to use Microsoft's free Log Parser in this expert tip. Tip
-
SOC 2.0: Three key steps toward the next-generation security operations center
According to Forrester Research, traditional security operations are no longer practical. Forrester's John Kindervag discusses the new model, SOC 2.0, why it's important, and how to make it happen. Tip
-
Creating a network endpoint security policy for hostile endpoints
The plethora of IP-enabled devices available today makes it harder to discern a friendly endpoint from a hostile one. Learn how to create an endpoint security policy for non-corporate-owned devices. Tip
-
Log management best practices: Five tips for success
The right log management tool can quickly seem like the wrong one without advance planning on how to make the most of it. Diana Kelley offers six log management best practices to help do just that. Tip
-
Endpoint fingerprinting: How to improve NAC security for 'dumb devices'
Many enterprises underestimate the potential security problems posed by "dumb devices" like network printers or IP phones. Forrester Research analyst Usman Sindhu explains how endpoint fingerprinting can be used as a NAC add-on to identify and monito... Tip
-
Database activity monitoring (DAM) software deployment issues to avoid
Database activity monitoring software deployments can have their shortcomings. For example, issues with network monitoring and policy overload can impact compliance audits and database performance. Tip
-
Analyzing MSSP providers' log files for IT security events
Analyzing firewall, Windows server and antivirus log files can seem like an endless and tedious task, especially for an understaffed security team, but it's extremely important for detecting IT security events. Read more in this network security expe... Tip
-
Portable USB thumb drive encryption: Software and security policy
If you allow USB flash drives at your enterprise, encryption software and policy are a must. In this tip, learn about the best USB encryption options and how to choose one for your organization. Tip
-
Five endpoint DLP deployment data security tips
Deploying data loss prevention technology on endpoints requires a careful roll-out. Expert Rich Mogull offers five tips, including the need to start slowly with a set of power users and how to manage endpoint discovery. Tip
- See More: Tips on Network Device Management
-
Print-management software security starts with a private IP address
Print-management software shouldn’t provide a great risk to a company provided it uses a private IP address, says expert Mike Chapple. Answer
-
Network topology mapping: How to automate network documentation
Network topology mapping to boost security can be time-consuming. Learn how to automate network documentation with network management tools. Answer
-
Can Android virtual patching thwart Android malware attacks?
Application security expert Mike Cobb weighs the pros and cons of Android virtual patching to thwart Android malware attacks. Answer
-
Next-gen firewall vs. UTM device: Which is better for Web 2.0 risks?
How does a next-gen firewall differ from a UTM device, and how does each stack up against Web 2.0 risks? Answer
-
Network security metrics: Basic network security controls assessment
Get advice on how to devise appropriate network security metrics for your enterprise from expert Mike Chapple. Answer
-
Guidance on dual-homed server security
Learn more about how a dual-homed server operates, and what security restrictions it entails in this expert response from Anand Sastry. Ask the Expert
-
Do gigabyte converter and SPF records present a security threat?
Do gigabyte interface converters or sender policy framework transceivers retain any of the information that passes through them? Network security expert Anand Sastry explains. Ask the Expert
-
How to monitor network traffic: Appliance placement and choke points
Monitoring network traffic is crucial, but where's the best place to put network monitoring tools? Expert Anand Sastry gives advice. Ask the Expert
-
Cisco network appliance security: Does 'self-defending' network stack up?
Cisco has for years touted its concept of a "self-defending" network, but what does it actually entail? In this expert response, Anand Sastry explains what "self-defending" means (at least, according to vendors), and whether it's really possible. Ask the Expert
-
Will biometric authentication devices integrate with in-house software?
Biometric devices may provide an added level of security, but how much effort is required to integrate them with existing software and systems, particularly those systems custom made for an organization? Learn more in this expert response from Randal... Ask the Expert
- See More: Expert Advice on Network Device Management
-
OCSP (Online Certificate Status Protocol)
OCSP (Online Certificate Status Protocol) is one of two common schemes for maintaining the security of a server and other network resources. Definition
-
trusted computing base (TCB)
The trusted computing base (TCB) is everything in a computing system that provides a secure environment. Definition
-
VeriSign on DNSSEC support
Joe Waldron, a product manager in VeriSign's Naming (DNS) Group, said engineers are testing and upgrading systems to support security extensions for DNS (DNSSEC). Video
-
Print-management software security starts with a private IP address
Print-management software shouldn’t provide a great risk to a company provided it uses a private IP address, says expert Mike Chapple. Answer
-
Network topology mapping: How to automate network documentation
Network topology mapping to boost security can be time-consuming. Learn how to automate network documentation with network management tools. Answer
-
Can Android virtual patching thwart Android malware attacks?
Application security expert Mike Cobb weighs the pros and cons of Android virtual patching to thwart Android malware attacks. Answer
-
VoIP eavesdropping: Hardening network security to contain VoIP risks
Mike Chapple analyzes the VoIP risks posed by implementing a VoIP network and exposes the reality of telephone eavesdropping. Tip
-
HP printer vulnerabilities leave millions of printers susceptible to attack
Researchers at Columbia University have discovered a vulnerability in HP’s LaserJet printers that could allow attackers to gain complete remote control. News
-
Eye On: Network security management
This special report examines fundamental issues key to successful enterprise network security management. News
-
Next-gen firewall vs. UTM device: Which is better for Web 2.0 risks?
How does a next-gen firewall differ from a UTM device, and how does each stack up against Web 2.0 risks? Answer
-
Network security metrics: Basic network security controls assessment
Get advice on how to devise appropriate network security metrics for your enterprise from expert Mike Chapple. Answer
-
Quiz: Reinventing defense in depth
This quiz is part of SearchSecurity.com’s Intrusion Defense Security School lesson, Reinventing defense in depth. Reinforce your knowledge of the key concepts of this lesson by taking the five-question quiz below. Quiz
-
Log Parser examples: Using the free log analysis tool
Log analysis is an essential security function for almost all enterprises, and, with Log Parser, much of it can be done for free. Learn how to use Microsoft's free Log Parser in this expert tip. Tip
- See More: All on Network Device Management
About Network Device Management
Get tips on network device management, security for network appliances, products and systems and how to ensure security devices work properly.