July 2006

Advance Host Intrusion Prevention with CSA: Advanced Custom Policy

Examine two key processes for administrators who need to adjust or change Cisco Security Agent default policies. Learn about the normal tuning process and writing application control policies in this excerpt from Chapter 9: Advanced Custom Policy of...  Continue Reading

password synchronization

Password synchronization is an authentication process that coordinates user passwords across various computers and computing devices so a user only has to remember a single password instead of multiple passwords for different machines or devices.  Continue Reading

Report: Web applications caught in a storm of attacks

A new survey shows not only how attackers are pummeling Web applications using bots, Google and other tools, but also why targeted attacks are getting tougher to trace.  Continue Reading

Microsoft plans PowerPoint zero-day patch

Microsoft will have a patch ready by Aug. 8, if not sooner. Since some PowerPoint flaws have already been attacked, Microsoft strongly discourages opening untrusted attachments.  Continue Reading

Automated provisioning quiz

Take this five-question quiz to see how much you've learned about automated provisioning.  Continue Reading

Endpoint security quiz

Take this five-question quiz to see how much you've learned about endpoint security.  Continue Reading

VPNs and remote access quiz

Take this five-question quiz to see how much you've learned about VPNs and remote access.  Continue Reading

Utilizing Active Directory to automate provisioning

This article focuses on utilizing Active Directory and Group Policy to automate provisioning.  Continue Reading

Oracle owns up to patching problems

Database giant Oracle Corp. has faced mounting criticism of its security patching process during the last two years.

Its quarterly Critical Patch Updates (CPUs) are ...  Continue Reading

Keeping pace with emerging endpoint security technologies

Vendors have responded to the de-perimeterization of corporate networks with products designed to perform "health checks" of connecting devices, permitting access based on the security status of the endpoint. This article provides an overview of ...  Continue Reading

Security Bytes: Microsoft pulls back user-based encryption

In other news, McAfee unwittingly fixes an ePolicy Orchestrator security flaw and multiple vulnerabilities surface in Microsoft Works.  Continue Reading

Answers: Compliance All-in-One Guide quiz

 Continue Reading

Security Blog Log: Was the analyst a VA scapegoat?

A scathing report on May's massive Veterans Affairs data theft causes some to ask who deserves the most blame: the analyst or his supervisors?  Continue Reading

Identity and Access Management Services, Systems and Technologies

Government regulations and the convenience of federated identities have made identity management and access control a priority for many enterprises. This Identity and Access Management Services, Systems and Technologies Security School explores ...  Continue Reading

NIPP may not address realities of information security

The Department of Homeland Security has issued the final version of the National Infrastructure Protection Plan, but some say it falls short of being a comprehensive risk management framework for the nation's infrastructure.  Continue Reading

Trojan targets Microsoft PowerPoint flaw

Update: The exploit might be tied to an older flaw in Excel. Attackers who exploit the serious flaw could launch arbitrary code. Microsoft says it is investigating.  Continue Reading

Security Bytes: Investigators slam VA over data breach

Meanwhile: Cisco patches a router application flaw, a Washington law firm sues IBM over a server attack; and spammers sucker Web surfers with fake Vladimir Putin death reports.  Continue Reading