Features

People are the weakest link

People are the weakest link

"The consensus was that people and processes are often the lowest common denominator in identity theft"
Mike Maddison Jul 12 2006 3:56PM Security
IT folk aren't nearly so shy

IT folk aren't nearly so shy

Security commentators, myself included, regularly comment on the security patching cycle and the problems associated with it. What we tend not to do, though, is comment on the ‘patching' problem for physical security systems.
Nick Barron Jul 12 2006 3:39PM Security
Only we can save the world wide web

Only we can save the world wide web

One of the delegates at the closed Executive Security Action Forum, held before the RSA conference this year, asked: "What will the internet look like – and will it even be there for our children?"
Paul Simmonds Jul 12 2006 2:35PM Security
Don't get cocky about RFID

Don't get cocky about RFID

Are RFID keycards the next big thing? Only if they can see off power attacks, warns Ken Munro
Ken Munro Jul 12 2006 2:13PM Security
Cleaning out the closet

Cleaning out the closet

Compliance has made the case for efficient storage solutions. Use them to deliver long-term business benefits, says Ian Cook
Ian Cook Jul 12 2006 1:01PM Security
Cutting to the chase

Cutting to the chase

Confused and disheartened by the explosion in regulatory hoops your organisation must jump through? Alan Calder points to an easier way
Alan Calder Jul 12 2006 12:42PM Security
Paul Wood

Paul Wood

A need for a coherent response to threat led insurance company Aviva to create its group business protection director role. Ron Condon reports
Ron Condon Jul 12 2006 12:24PM Security
Intruding on the bottom line

Intruding on the bottom line

Are intrusion prevention systems worth the effort of managing them? Or can you get away with a good firewall? Rob Buckley investigates
Rob Buckley Jul 12 2006 12:06PM Security
Has Microsoft finally done it?

Has Microsoft finally done it?

Microsoft appears to be taking security far more seriously with the successor to Windows XP. But has it done it right? Mark Mayne reports
Mark Mayne Jul 12 2006 11:47AM Security
Review: Coroner's Toolkit

Review: Coroner's Toolkit

The Coroner’s Toolkit, or TCT is an open-source set of forensic tools for performing post-mortem analysis on Unix systems. Written by Dan Farmer and Wietse Venema, both very well known in security circles for such programs as SATAN, TCT is not an easy product to use. A serious knowledge of Unix is a prerequisite for success, but if you can manage it, this is an extremely powerful set of tools.
Peter Stephenson,CeRNS, Jul 11 2006 12:00AM Security
Review: EnCase Forensic

Review: EnCase Forensic

This new version of EnCase shows its pedigree as the oldest of the GUI-based IT forensic tools. We found it very simple to operate and use.
Peter Stephenson,CeRNS, Jul 11 2006 12:00AM Security
Review: Forensic ToolKit

Review: Forensic ToolKit

The Forensic ToolKit (FTK) is very powerful and comes loaded with features, although it is naturally difficult to make such a powerful tool completely simple to use. The program interface can overwhelm at first glance, with all its different features and options, but after reading the documentation and getting to know the program, it becomes much more intuitive.
Peter Stephenson,CeRNS, Jul 11 2006 12:00AM Security
Review: i2 Analyst's Notebook

Review: i2 Analyst's Notebook

This is a very different type of analysis tool from those infosec professionals are used to. Link analysis, a crucial aspect of incident response, is usually done manually or by trying to use log correlators. This is a true link analyser with a long pedigree in analysing complex crimes and security incidents.
Peter Stephenson,CeRNS, Jul 11 2006 12:00AM Security
Review: LogLogic LX 2000

Review: LogLogic LX 2000

LogLogic’s LX 2000 is an excellent log analysis tool. It is powerful, can be distributed, and is a mature and useful product. But it is not for the faint-hearted. While its user interface is excellent, it has many hidden capabilities that require some time to understand.
Peter Stephenson,CeRNS, Jul 11 2006 12:00AM Security
Review: Mandiant First Response

Review: Mandiant First Response

First Response is a freeware audit tool and is a little difficult to use in the beginning. The interface, deploying agents and gathering data can also be a little awkward at first, but this program can be very useful once the user has a grasp on what it does and what it is capable of.
Peter Stephenson,CeRNS, Jul 11 2006 12:00AM Security
Review: NetWitness

Review: NetWitness

NetWitness is a network traffic security analyser that the vendor describes as a “security intelligence” tool. Setup is simplified by its new installation wizard, that worked correctly the first time, and was a breeze. We then fed it a set of snort packet logs, that it accepted without complaint, and were able to begin analysis within an hour.
Peter Stephenson,CeRNS, Jul 11 2006 12:00AM Security
Review: ProDiscover Incident Response

Review: ProDiscover Incident Response

ProDiscover IR is a complete IT forensic tool that can access computers over the network (with agents installed) to enable media analysis, image acquisition and network behaviour analysis.
Peter Stephenson,CeRNS, Jul 11 2006 12:00AM Security
Review: Sleuth Kit & Autopsy Browser

Review: Sleuth Kit & Autopsy Browser

Sleuth Kit and Autopsy Browser are excellent examples of what happens when a talented developer builds on good prior work. These products, used together, are freeware open-source computer forensic tools built on the Coroner’s Toolkit. But the developer, Brian Carrier, has taken his considerable expertise in file systems of all kinds and applied it here.
Peter Stephenson,CeRNS, Jul 11 2006 12:00AM Security
Review: KeyGhost USB Keylogger

Review: KeyGhost USB Keylogger

Physical keyloggers top the list of security nightmares for most in the profession. While full-blown remote access trojans are worse, they are also fairly easy to identify and block, both at installation and in use, but physical keyloggers are much harder to identify.
Jon Tullett Jul 11 2006 12:00AM Security
Cover Story: Working for Gold

Cover Story: Working for Gold

For all of the change that occurs in the industry, there remains one immutable consideration that every IT security manager must deal with: the justification of security costs.
Ericka Chickowski Jul 10 2006 8:48PM Security

Log In

  |  Forgot your password?