For more information about the site, see the Site Index

• Can confidential data be accessed once it is deleted for free space?
• How to test an e-commerce Web site's security and privacy defenses
• Should confidential data be indexed or used as the index key?
• Is a 'self-defending network' possible?
• Should Apple iPhones automatically connect to Wi-Fi networks?
• Traditional single sign-on (SSO) products versus federated identities
• Using fingerprint door locks in a network environment
• Is it possible to identify a fake wireless access point?
• Server considerations for internal network application setup
• Why does Skype connect to so many servers?
• What are the dangers of Web-based remote access systems?
• Best practices for deploying enterprise single sign-on (SSO)
• Where did the biometric device come from?
• What are the best bot detection tools?
• Has ransomware made a comeback?
• What additional security protection do virtual machines offer?
• Can fuzzing identify cross-site scripting (XSS) vulnerabilities?
• Will Web browsers ever be fully equipped to detect and remove malware?
• Will Web application security vendor mergers help buyers?
• Can Snort stop application-layer attacks?
• What is an ideal patch management process for small businesses?
• Protecting consumer data with a fraud and risk assessment policy
• What types of software can help a company perform a security risk assessment?
• How can I get my CISSP certification?
• Is encrypting cookies a PCI DSS requirement?
• Can tokenization of credit card numbers satisfy PCI requirements?
• Has cross-site scripting evolved?
• How can the combination of biometrics and electrophysiological signals be used for authentication?
• Choosing from the top PKI products and vendors
• How do anonymous credentials and selective disclosure certificates affect enterprise IAM?
• Is there a way to bridge physical and logical security without using smart cards or biometrics?
• Is third-party software the only way to prevent access within a domain group?
• How should sensitive customer data, such as driver's license information, be handled?
• What are the risks of logging into a botnet control channel?
• Are iPhone security risks different than those of other mobile devices?
• Will allowing virtual machines increase risk exposure?
• Does single sign-on (SSO) improve security?
• What are the pros and cons of using keystroke dynamic-based authentication systems?
• What mistakes are made when implementing enterprise IAM systems?
• Can the symmetric encryption algorithm for S/MIME messages be changed?
• What are the best laptop data encryption options?
• How to keep personally identifiable information out of access logs
• Examining DoD-level secure erasure guidelines
• Will only allowing whitelist email messages stop image spam?
• What are the proper procedures for handling a potential insider threat?
• Can a vendor be convinced to add security to its application development process?
• Are senior level executives a target for social engineering attacks?
• What is the relationship between open port range and overall risk?
• Will iptables screen UDP traffic?
• Can reputation services be applied to network security?
• What kinds of network packet data can be extracted from Snort IDS?
• How expensive are IPsec VPN setup costs?
• Can Snort be configured with a FreeBSD router?
• How is internal mail channeled through an enterprise firewall?
• Should a router be placed between the firewall and DMZ?
• Will deploying VoIP on an 802.1x network create security problems?
• Do split-tunneling features make a VPN vulnerable?
• Defining your security certification objective
• How to migrate from SAS 70 to ISO 27001
• How to prevent audit-logging system from storing passwords?
• Should a network be regularly checked for rogue access points?
• How does SSL 'sit' between the network layer and application layer?
• Investigating phone phishing calls
• Can companies control their affiliate-based adware?
• How secure is the Windows registry?
• Does SMS spoofing require as much effort as email spoofing?
• Is it possible to detect today's peer-to-peer (P2P) botnets?
• Can an antivirus program's behavior-based functions be judged?
• Can dynamic and static verification secure a platform?
• Should third-party software tools be used to customize applications?
• Will log-in form data posted to an SSL page always be encrypted?
• Will securing a wireless LAN make the data link layer vulnerable?
• Buy vs. build: Choosing an enterprise intrusion detection system
• Do WEP weaknesses call for an upgrade to WPA2 encryption?
• Are one-time password tokens susceptible to man-in-the-middle attacks?
• What risks are associated with biometric data, and how can they be avoided?
• What are the PCI DSS compliance benefits of tokenization?
• Will fixed-mobile convergence (FMC) create more security risks?
• Is it safe to use remote access tools to grant system access?
• Do the Common Vulnerabilities and Exposures protect applications?
• Are attackers using malware to exploit service oriented architectures?
• Should PCI DSS auditors be subjective?
• Is the Storm worm virus still a serious threat?
• What are the risks of turning off pre-boot authentication?
• Will the PCI DSS require encryption over dedicated lines?
• What evaluation criteria should be used when buying a firewall?
• Is SSL no longer useful?
• Are penetration tests essential for enterprise network security?
• What are the pros and cons of outsourcing email security services?
• Best practices for implementing a retention policy
• Can database extrusion products effectively prevent data loss?
• Can DHCP be used to selectively block instant messaging clients?
• Should all members of a security staff be involved in the risk assessment process?
• Which email encryption products can be released internationally?
• How to select a penetration tester
• Strategies for landing a security management position
• What is the difference between a SAS 70 Level 1 and Level 2 audit?
• Should ISO 17799 play a role in risk assessment?
• Do personal issues within a company pose a risk to the enterprise?
• What is the best organizational model for an IT security staff?



• More