Vulnerability Risk Assessment

MUST READ Can threat modeling help enterprises? EXPERT ANSWER - Is threat modeling a useful defense mechanism? Is it really possible to think like an attacker? Five ways to simplify the vulnerability management lifecycle TIP - Learn how to quickly and accurately quantify your exposure, communicate that exposure and deploy resources to remediate.

NEWS: 1 - 3 of 54

	McAfee to acquire Solidcore Systems for whitelisting SearchSecurity.com | 15 May 2009 ARTICLE - The $47 million deal adds Solidcore's whitelisting technology to McAfee's product line up.

	Free HP SWFScan tool detects Adobe Flash flaws SearchSecurity.com | 23 Mar 2009 ARTICLE - SWFScan analyzes Adobe Flash to identify dozens of source code errors.

	PCI QSA assurance program penalizes assessors SearchSecurity.com | 05 Mar 2009 ARTICLE - Two firms certified to conduct PCI assessments have been placed into the PCI Council's remediation program for violating the QSA Validation Requirements.

	VIEW ALL NEWS ON VULNERABILITY RISK ASSESSMENT

EXPERT TECHNICAL ADVICE: 1 - 3 of 45

VULNERABILITY RISK ASSESSMENT EXPERTS
			Michael Cobb, featured expert Founder and Managing Director, Cobweb Applications Ltd. ASK A QUESTION

	Are Web application penetration tests still important? 05 Jun 2009 EXPERT ANSWER - Web application penetration tests continue to be an important part of the secure software development lifecycle process in order to reduce the number and severity of security-related design and coding errors.

	Vulnerability test methods for application security assessments 25 Mar 2009 TIP - Learn what to do when you have a huge portfolio of potentially insecure applications, limited resources and an overwhelming sense of urgency.

	Screencast: How to use Wikto for Web server assessment 26 Aug 2008 TIP - Peter Giannoulis demonstrates what kinds of website and Web server information can be found using the free Wikto tool.

	VIEW ALL EXPERT TECHNICAL ADVICE ON VULNERABILITY RISK ASSESSMENT

REFERENCE & LEARNING: 1 - 3 of 10

	Information security book excerpts and reviews SearchSecurity.com | 19 Feb 2009 INFORMATION SECURITY BOOKSHELF - Visit the Information Security Bookshelf for book reviews and free chapter downloads.

	CISSP Essentials training: Domain 10, Operations Security SearchSecurity.com | 12 Sep 2008 SECURITY SCHOOL - Prepare for the final segment of the CISSP exam by learning about operations security.

	Spotlight article: Domain 10, Operations Security SearchSecurity.com | 12 Sep 2008 SECURITY SCHOOL - Get a detailed introduction to CISSP exam Domain 10, Operations Security.

	VIEW ALL REFERENCE & LEARNING ON VULNERABILITY RISK ASSESSMENT

MAGAZINE CONTENT (free subscription required): 1 - 3 of 18

	The Pipe Dream of No More Free Bugs Information Security Magazine | 07 May 2009 COLUMNS - Security researchers have declared they want vendors to compensate them for their independent search for vulnerabilities.

	Security services: Fiberlink's MaaS360 Mobility Platform Information Security Magazine | 28 Nov 2008 HOT PICK & PRODUCT REVIEWS - The MaaS360 Mobility Platform service handles remote device updates, such as OS patches.

	Product Review: Shavlik's NetChk Compliance Information Security Magazine | 28 Nov 2008 HOT PICK & PRODUCT REVIEWS - Shavlik's NetChk Compliance automates compliance and provides control by actively managing system and security settings and allows the IT manager to identify and mitigate risks.

	VIEW ALL MAGAZINE CONTENT ON VULNERABILITY RISK ASSESSMENT

WEBCASTS: 1 - 2 of 2

	Comprehensive threat management: Helping you navigate the data security quagmire - Vendor Webcast VIEW WEBCAST PREMIERED:   27 APR 2006, 14:00 EDT (18:00, GMT) SUMMARY:   Outside attacks continue to threaten your network and drain valuable company resources. This webcast examines how you can protect your network from cyber attacks with an approach that anticipates known and unknown threats.

Solving the Internal Threat - Vendor Webcast VIEW WEBCAST PREMIERED:   17 NOV 2005, 14:00 EST (19:00, GMT) SUMMARY:   Established information security vendors avoid claims of protecting companies from the internal or insider security threat. In today's high-tech world, organizations need a new approach to internal IT security which enables them to detect when their IT infrastructure, enterprise data, corporate policy and government regulations have been compromised. Discover new security solutions in this webcast.

	VIEW ALL WEBCASTS ON VULNERABILITY RISK ASSESSMENT

WHITE PAPERS

Preventing common application-level hack attacks Published by: Gulf Business Machines (GBM) L.L.C. | 26 Jun 2009 WHITE PAPER - Organizations are more dependent on online software and the risk of malicious attacks is more serious. Such attacks can bring business to a standstill, cost a company millions, and potentially tarnish its brand image. This paper describes 12 of the most common hacker attacks and provides basic rules for creating hack-resistant Web applications.

Achieving Federal Desktop Core Configuration Compliance with Lumension Solutions Published by: Lumension | 18 Jun 2009 WHITE PAPER - The Federal Desktop Core Configuration (FDCC) is an OMB mandated security configuration set applicable within United States Federal Government agencies. The FDCC v1.2.1.0 can be grouped into several categories, each addressing a different area of security. Read on to learn more about these categories and what they entail.

The Top Five Virtualization Mistakes Published by: Vyatta Inc. | 17 Jun 2009 WHITE PAPER - This paper describes five mistakes common to many implementations of enterprise virtualization. Most of these mistakes relate to virtualization and networking infrastructure. Ideally, after reading this paper, you'll be sensitized to these issues so that you can plan for them and make your virtualization projects more successful.

	VIEW ALL WHITE PAPERS IN THIS TOPIC

DEFINITIONS: 1 - 1 of 1

	gray hat 01 Jun 2001 WORD - Gray hat describes a cracker (or, if you prefer, hacker) who exploits a security weakness in a computer system or product in order to bring the weakness to the attention of the owners. Unlike a black hat, a gray hat acts ...

	VIEW ALL DEFINITIONS ON VULNERABILITY RISK ASSESSMENT

	SEE ALSO - Topics Related to Vulnerability Risk Assessment:  Configuration Management Planning, Security Testing and Ethical Hacking, Security Patch Management