Features
Review: Passive Vulnerability Scanner
The Tenable Passive Vulnerability Scanner (PVS) is a most interesting product. It is truly passive in that it does not perform active scans of any kind. It is, simply, a very smart sniffer. The product depends for its usefulness on the way that it collects and reports vulnerability data. Since the PVS is always listening, it constantly collects information from the normal data flows on the network. This is superior to active scanners in two important ways.
Jan 29 2007 12:00AM
Security
Review: Secude Secure Notebook
The Secude Secure Notebook has the ability to authenticate the user using two-factor authentication, such as smart cards and USB tokens. The drive encryption product is broken into two pieces — one that provides the boot time authentication, and a second piece that provides the actual hard drive encryption.
Jan 29 2007 12:00AM
Security
Hot or Not: Remote access breaches
Just like the detectives do on weekly television crime dramas, put yourself in the mind of the bad guy. Pretend that you're the criminal who brokers stolen personal information with organised crime syndicates overseas. Put yourself behind the eyes of the malicious hacker who plans to breach merchant networks and compromise wholesale volumes of consumer payment card information, the kind of information that can be bartered within the internet's dark underbelly.
Jan 24 2007 9:11PM
Security
Good enough for your business?
If you're part of a financial institution, chances are you've memorised the Federal Financial Institutions Examination Council (FFIEC) guidance chapter and verse, and, with risk assessment in hand, are in the midst of rolling out some form of consumer authentication.
Jan 24 2007 12:37AM
Security
Patching process
There are many different names for the second Tuesday of every month: Patch Tuesday, Super Tuesday, Black Tuesday — and maybe even some other unsavory nicknames not suitable for print. This day, when Microsoft rolls out security updates, is the fulcrum around which most organisations' whole patch management cycles revolve. But just as there are different nicknames for the day, there are also differing opinions about how it should be handled and how quickly organisations should respond with changes.
Jan 22 2007 12:14AM
Security
Review: DriveCrypt Plus Pack
If James Bond had encryption software he would have the DriveCrypt Plus Pack. This software includes many more features than the other products in this category. Are they all useful to the typical corporate road warrior? Probably not, but they are all cool and definitely have some merit.
Jan 22 2007 12:00AM
Security
Implementing compliance through privacy policy
The internet age has revolutionised how organisations communicate, publish and find information. While this technology has created new opportunities for global communication and commerce, it has also created new challenges in risk management.
Jan 17 2007 11:22PM
Security
Review: PGP Whole Disk Encryption 9.5
PGP Whole Disk Encryption provides the easiest to install hard drive encryption package we tested. Both the standalone and enterprise products were easy to configure and were easy enough that most end-users could perform the installation with only the quick start guide.
Jan 15 2007 12:00AM
Security
Hot or not: Early Vista flaws
There's been plenty of talk about the security capabilities of Windows Vista, but what's at the heart of the security defenses within Microsoft's latest operating system? This article aims to take a close look at the technology that will make a difference.
Jan 10 2007 10:29PM
Security
Product Section: Two staples of information protection
This month, we have juxtaposed two of the foundations of information security: data protection and vulnerability assessment. On the protection side, we look at some of the key products in the area of whole disk encryption.
Jan 8 2007 10:02PM
Security
Review: SealedMedia E-DRM
SealedMedia is a client/server implementation with four components. A license server manages what the company calls a classification-based rights model; a management website offers provisioning for users, rights model management and documentation; and a management console is used for administration. The final part is the desktop, the user's tool for sealing documents.
Jan 8 2007 12:00AM
Security
Is someone listening to your keyboard?
Floppies are obsolete, CRT monitors are a dying breed and CPU cores are multiplying every year. Since the early days of modern computers, research companies have redesigned, reinvented and revolutionised every aspect of computers except one: the ever faithful keyboard.
Jan 2 2007 10:57PM
Security
Match your company policies with your solutions
The headlines are scary for both CIOs and the companies they work for. "Stolen Computer Holds Information of 16,000 Driver's License Holders," "Vulnerability Auctions Killing Responsible Disclosure," "Hacking for Dollars: Is The Botnet Battle Already Lost?" "Online Brokerage Account 'Incursions' Worry SEC."
Jan 2 2007 9:30PM
Security
