Features
Get it together
Whether you have a SOX problem or a HIPAA ailment, it is becoming more tempting to enlist a SIM. But beware what you’re buying into. Vendors are heavily hyping their security incident management (SIM) wares as the cure-all for meeting regulatory compliance standards such as the Sarbanes-Oxley (SOX) and Health Insurance Portability and Accountability Acts (HIPAA). If anything, they’re half right.
Oct 10 2005 6:32PM
Security
Opinion - Without clarity you will fail
Some readers will recall that I can be a bit picky when using terms to describe things. We run into confusion when we are vague about terms and descriptions. This can be especially troublesome when we are handling an incident and adrenaline is running high.
Oct 10 2005 6:11PM
Security
Review: PortWise SSL VPN
PortWise 4.0 is a software solution, although we received it preconfigured on a Sun V20z running RedHat ES. We might have been better off setting it up ourselves: we had to log in to a root shell to get the network configured, and while the documentation is great for setting up actual SSL VPN services, it was not much use at the outset.
Oct 3 2005 12:00AM
Security
Review: OfficeLock
This is not a disk encryptor like most of the products on test, because it encrypts individual document files transparently. Indeed, it was designed and intended completely for enterprise use, and requires an external copy of Microsoft SQLServer in order to install.
Oct 3 2005 12:00AM
Security
Review: Base5
Permeo’s Base5 is a RedHat-based solution that turns a standard server into an SSL VPN. Obviously, this means you need to supply your own server, and you will need to check the hardware support – our first attempt to install the software crashed anaconda (RedHat’s installer) in its usual ugly way.
Oct 3 2005 12:00AM
Security
Investing in identity management
More efficient management, more productive staff and improved data security; just some of the advantages of Identity Management. On the other hand it can often involve high implementation costs and levels of project complexity. Only consistent ROI calculations can accurately define the benefits of such a solution. While it is relatively easy to establish concrete ROI criteria for the topic of efficiency, it is much more complicated to do so for the topic of security.
Sep 26 2005 11:37AM
Security
Ignore application security at your peril!
With malicious attacks at an all time high, the emphasis put on securing the corporate network has led to many companies investing in technologies such as firewalls and intrusion detection systems.
Yet whilst companies have been busy securing the network, they have largely ignored the area of application security.
Sep 19 2005 2:26PM
Security
More rigour, less geek, more respect
In my position, I get to read an awful lot of submitted articles, supposedly from infosec professionals with centuries of experience between them. And I also get along to a lot of conferences where many of the same people share their wisdom with the rest of the world.
Sep 5 2005 5:04PM
Security
