Videos

Virtualization: Disruptive technologies part 1

Virtualization promises enterprises amazing cost-saving benefits, but what about the inherent security threats? In part one of this panel, Chris Hoff, Rich Mogull and Dino Dai Zovi discuss the greatest threats to virtualized environments, including some you might not expect.
Virtualization: Disruptive technologies part 4

Is there a future for vendors offering security solutions for virtualized environments, or will security eventually be almost entirely built-in? Experts Chris Hoff, Rich Mogull and Dino Dai Zovi discuss.

Virtualization: Disruptive technologies part 2

Security pros Chris Hoff, Rich Mogull and Dino Dai Zovi discuss the greatest benefits virtualization can offer enterprises, as well as some strategies for anticipating threats to virtualized environments.
Virtualization: Disruptive technologies part 3

Security experts Chris Hoff, Rich Mogull and Dino Dai Zovi talk about the organizational challenges of virtualization, including the most dangerous way to use virtualization in the enterprise.
How to use Nmap to scan a network

Peter Giannoulis takes a look at everybody's favorite, freely available port scanner and OS identifier: Nmap.
How to defend against data-pilfering attacks

In this video from Information Security Decisions 2008, Mandiant's Kevin Mandia details data-pilfering attacks and the four ways hackers can penetrate a network.
The challenges of incident response plans and procedures

Mandiant's Kevin Mandia reviews his top five incident response challenges.
Inside a retail hack

Mandia's Kevin Mandiant offers a post-mortem case study on a recent retail bank hack involving SQL injection.
Cyberattacks and extortion

Mandiant's Kevin Mandia assesses the state of cybercrime, which includes an increase in extortion, SQL injections and targeted email attacks.
The importance of secure software development training

At Information Security Decisions 2008, security researchers discuss secure application coding and how to teach best practices to young developers (part 4 of 4).
The future of exploit vulnerability research

At Information Security Decisions 2008, security researchers discuss the most vulnerable network points and the future of the SDLC (part 1 of 4).
Will cloud computing and virtualization save the day?

Will cloud computing and virtualization make enterprises more secure or leave them more vulnerable? At Information Security Decisions 2008, security researchers discuss the pros and cons of the inevitable cloud (part 3 of 4).
Defending against Internet security threats and attacks

From buffer overflows to cross-site scripting, Web threats are many. Security researchers at Information Security Decisions 2008 discuss how to keep enterprises safe from these attacks (part 2 of 4).
FAQ: Corporate Web 2.0 Threats

In this expert video, you will learn about Web 2.0 software, the threats it poses, and whether the benefits outweigh the risks. Key areas covered include the threats posed by services like Facebook, MySpace, and LinkedIn, as well as wikis and blogs. Our expert also dives into particular attack vectors and scenarios that are becoming popular, defensive policy, and technology best practices and Web 2.0 trends to monitor going forward.
Must-haves for wireless network security: WLAN switches, intrusion detection and more

Joel Snyder of Opus One reviews the WLAN switch technology and explains why intrusion detection systems and firewalls need to also be carefully added to a "defense in depth" network configuration.
Wireless network security: 802.11i and WPA basics

In this video, Joel Snyder of Opus One reviews 802.11i and WPA, along with the other minimum requirements necessary for building a secure network.
How to increase the RF footprint and bandwidth of a wireless network

In this video, Joel Snyder of Opus One reviews how to provide sufficient network bandwith to all the users in your organization.
How to manage guest user authentication when building a wireless network

Joel Snyder reviews your different access policies and how to deal with the threat of unauthenticated users.
Johannes Ullrich: ISC, stealthy malware

SANS Chief Research Officer Johannes Ullrich discusses the Internet Storm Center (ISC), information sharing and the state of malware.
CISSP Essentials Lesson 1: Security management practices

In this CISSP lesson, learn about security management practices.
Avi Rubin on e-voting, online privacy

The Johns Hopkins University professor discusses online privacy perception and reality, plus the state of electronic voting security.
Gary McGraw on secure software development

Gary McGraw of Cigital Inc. explains why better secure coding could help thwart future Web 2.0 attacks. He says the industry is making progress.
Dan Kaminsky on DNS, Web attacks

Noted network security researcher Dan Kaminsky, director of penetration testing at IOActive, shares his research on DNS and Web-based attack techniques.
Discussing security operations: Security 7 awards video

The industry's best and brightest security officers discuss key issues and answer questions during the Security 7 awards at the 2007 Information Security Decisions conference.