Emerging Information Security Threats

NEWS: 1 - 3 of 95

	New SQL injection technique threatens Oracle databases SearchSecurity.com | 24 Apr 2008 ARTICLE - A technique called lateral SQL injection exploits PL/SQL procedures to compromise Oracle databases remotely.

	Researchers uncover tool used to infect websites, spread malware SearchSecurity.com | 16 Apr 2008 ARTICLE - An analysis conducted by the SANS Institute's Internet Storm Center uncovered a utility designed to perform automated SQL injection attacks against websites and spread malware.

	At RSA, feds seek help to close widening cybersecurity gaps SearchSecurity.com | 08 Apr 2008 ARTICLE - Michael Chertoff, secretary of the Department of Homeland Security called on the private sector to do more to secure the internet from serious attackers.

	VIEW ALL NEWS ON EMERGING INFORMATION SECURITY THREATS

EXPERT TECHNICAL ADVICE: 1 - 3 of 35

EMERGING INFORMATION SECURITY THREATS EXPERTS
			Ed Skoudis Founder and Senior Security Consultant with Intelguardians ASK A QUESTION

	What kind of data is compromised during a Google hack? 02 Apr 2008 EXPERT ANSWER - Ed Skoudis defines Google hacking, unveils the type of data that is most commonly exposed during this type of attack and offers ways to ward off Google hackers.

	Stopping malware in its tracks Submitted By: SearchSecurity.com | 11 Mar 2008 TIP - Expert Lenny Zeltser offers a malware-defense blueprint every enterprise can follow, plus plenty of free tools to help along the way.

	Social networking Web site threats manageable with good enterprise policy 14 Feb 2008 TIP - Michael Cobb reviews the risks of social network malware and demonstrates how an organizaton's security policy can be modified to account for such Web threats.

	VIEW ALL EXPERT TECHNICAL ADVICE ON EMERGING INFORMATION SECURITY THREATS

REFERENCE & LEARNING: 1 - 3 of 8

	Quiz: The threat landscape for 2008 -- Protecting your organization against next-generation threats SearchSecurity.com | 13 Mar 2008 QUIZ - Take this five-question quiz to evaluate your knowledge of the material presented by expert Lenny Zeltser in this Intrusion Defense School lesson.

	Enterprise Security 2008 Learning Guide SearchSecurity.com | 12 Feb 2008 LEARNING GUIDE - SearchSecurity.com's panel of experts look back at last year's threats and make predictions about emerging enterprise security concerns for 2008.

	Virtual Honeypots: From Botnet Tracking to Intrusion Detection SearchSecurity.com and Addison-Wesley | 09 Oct 2007 BOOK CHAPTER - In Chapter 11 of Virtual Honeypots: From Botnet Tracking to Intrusion Detection, Niels Provos and Thorsten Holz get inside the botnet and reveal some interesting conclusions.

	VIEW ALL REFERENCE & LEARNING ON EMERGING INFORMATION SECURITY THREATS

MAGAZINE CONTENT (free subscription required): 1 - 3 of 9

	So Long Script Kiddies Information Security Magazine | 01 May 2007 FEATURES - EMERGING THREATS As thrill seekers fade away, organizations must contend with skilled attackers wielding sophisticated, stealthy tools in their drive to steal data for financial gain.

	Editor's Desk Information Security Magazine | 01 Feb 2007 COLUMNS - A Bug's Life

	Mixed Signals Information Security Magazine | 12 Jan 2007 FEATURES - RFID gives businesses-and bad guys-an easy way to track and change information.

	VIEW ALL MAGAZINE CONTENT ON EMERGING INFORMATION SECURITY THREATS

DEFINITIONS: 1 - 3 of 5

	DNS rebinding attack 08 Apr 2008 WORD - DNS rebinding is an exploit in which the attacker uses JavaScript in a malicious Web page to gain control of the victim's router. The attack works on widely-used routers such as D-Link and Linksys and could, in fact, ...

	JavaScript hijacking 20 Jun 2007 WORD - JavaScript hijacking is a technique that an attacker can use to masquerade as a valid user and read sensitive data from a vulnerable Web application, particularly one using Ajax (Asynchronous JavaScript and XML). Nearly all ...

	polymorphic malware 15 Apr 2007 WORD - Polymorphic malware is harmful, destructive or intrusive computer software such as a virus, worm, Trojan or spyware that constantly changes ("morphs"), making it difficult to detect with anti-malware programs. Evolution of ...

	VIEW ALL DEFINITIONS ON EMERGING INFORMATION SECURITY THREATS

	SEE ALSO - Topics Related to Emerging Information Security Threats:  Spyware, Adware and Trojans, Web Threats, Rootkits, Email and Messaging Threats, Hacking Tools and Techniques, Identity Theft and Data Security Breaches, Viruses, Worms and Other Malware