Home >
> Vulnerability Management |
 |
|
|
|
In computer security, the term vulnerability is applied to a weakness in a system which allows an attacker to violate the integrity of that system. Vulnerabilities may result from weak passwords, software bugs, a computer virus or other malware, a script code injection, a SQL injection or misconfiguration.<br><br>A security risk is classified as a vulnerability if it is recognized as a possible means of attack. A security risk with one or more known instances of working and fully-implemented attacks is classified as an exploit. |
 |
|
Results 1 - 25 of 98 matches |
Sort Results By : Published Date | Title | Company name |
|
|
Data Protection |
| By : SC |
Published Date: Mar 18, 2010 |
|
A new privacy regulation in Massachusetts has evoked anxiety for many, but the requirements, which have been referred to as the strictest in the nation, may prove to be no big deal. The legislation differs from other state disclosure bills because it insists that organizations take measures to protect information, as opposed to other guidelines that only require companies alert customers should their data be compromised.
A number of experts we spoke with for this ebook, say that for companies already in line with PCI or HIPAA, tweaking their security practices should not be a burden.
Download Now
|
 |
|
|
|
Security training: Weakest link |
| By : SC |
Published Date: Mar 10, 2010 |
|
After a number of attacks on the networks within the House of Representatives, legislators got the message: it was time to to begin mandatory security awareness training of all House members and their staffs.
Dan Beard, chief administrative officer of the House of Representatives, was tasked with revamping the House's security policies, notably the training of end-users. SC Magazine Senior Reporter spoke with Beard, as well as a number of other IT experts in similar positions, on the need to educate employees on proper digital safeguards. He found that the human element is the largest security risk in any organization.
Technology solutions are one part of the fix, but holding classes is another vital step. "The most powerful preventive tools will be communication and the reinforcement of secure behaviors," one report concluded.
This new eBook from SC Magazine provides illustrations into how Dan Beard at the House, and several other IT security experts, rely on a mix of positive and negative reinforcements to train their employees, and as a result are witnessing a payoff from motivating their employees to become aware of the dangers lurking out there on their enterprise networks.
Download Now
|
|
|
|
|
Business continuity and recovery services from IBM - Strengthen your business with cloud computing |
|
|
Ensure your business stays up and running through cloud computing.
When disaster strikes, business must keep moving. Combing the advantages of a cloud computing infrastructure, IBM helps deliver business continuity and resiliency solutions based on tested methodologies, architecture, and information management designed specifically for your enterprise. Read this paper and learn how cloud computing can give you access to your data no matter what.
Download Now
|
 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Quest Solutions for PCI Compliance |
|
|
In order to standardize security for the payment card industry, all providers must comply with the Payment Card Industry Data Security Standard (PCI-DSS). Unfortunately, many merchants aren't in compliance! What does this mean for them - and you? Fines, lost business and a shaky reputation with your customers.
In this new Quest Software white paper, learn about each and every PCI-DSS requirement - and the solution you need to address them. Whether for Windows, Exchange or even UNIX systems, discover the tools and controls to quickly and easily comply with PCI-DSS. Read it today.
Download Now
|
 |
|
|
|
|
|
|
|
Next Generation Log and Event Management |
| By : Tripwire |
Published Date: Jan 25, 2010 |
|
Compliance regulations have made log management a mandatory IT practice for organizations, but there's an increasing awareness of what those logs can also do for security through tracking suspicious activity and user behavior. Organizations are starting to realize they can use logs to pinpoint holes in their cyber defenses and thereby boost security. This white paper highlights the upcoming trends in log and event management security in 2010. This paper will look at the following:
- Dynamic Activity Analysis
- Real-time threat monitoring
- Automated Event Response
- Comprehensive Log Management
Download Now
|
 |
|
|
|
Security Beyond the Windows Event Log |
|
|
This technical white paper describes the ten most critical security conditions that are not monitored by the Windows Operating System or logged in the Event Log. These conditions are critical for any enterprise large or small.
Download Now
|
 |
|
|
|
Sarbanes-Oxley Roadmap |
|
|
This "how to" guide is organized into two parts. Part 1 provides an overview of SOX Section 404 and COSO. It also introduces EventTracker and details how it helps met corporate compliance requirements. The second part is an administrative guide detailing a sample three-day deployment process to SOX compliance with EventTracker.
Download Now
|
|
|
|
|
Meeting HIPAA Compliance |
|
|
There are a number of steps a healthcare provider must undertake to meet the Technical Safeguards mandated in the Security Rules of Title II (Administrative Simplification) of the Health Insurance Portability and Accountability Act (HIPAA). With EventTracker a healthcare provider can be confident they have the solution in place to help effectively meet audit requirements
Download Now
|
|
|
|
|
Leveraging Log Management to provide business value |
|
|
Despite the obvious benefits of Log Management and its increasing recognition as a critical necessity by the IT organization, Log Management is still viewed by Executives and Senior Management as a tactical effort, an item on a checklist that addresses a specific set of requirements, typically related to compliance or security.
Download Now
|
|
|
|
|
The Top 10 Insider Threats |
|
|
This Whitepaper discusses the top ten insider activities you have to monitor to make sure your employees are not violating security policy or opening up easy routes for insider abuse. Implementing these recommendations is fast, cost effective and will help prevent costly insider hacks and data leakage from impacting your business.
Download Now
|
|
|
|
|
Managing USB Mass Storage Devices |
|
|
This White Paper discusses how you can take advantage of the power of high capacity USB storage devices like thumb/flash drives without leaving your operation wide open to critical company information being misappropriated. Until now the choice has been to either shut down USB devices - either in Active Directory or through more extreme methods (the "glue in the USB port" trick comes to mind) - or simply trust every user to do the right thing. This paper introduces a third way that Prism Microsystems calls "Trust but Verify" which is made possible by EventTracker's advanced USB monitoring capability.
Download Now
|
|
|
|
|
Securing Electronic Medical Records |
|
|
Electronic Medical Records present new and complex information security needs. Tools are needed to protect EMR where it is stored, where it is accessed at various applications, and to actively block viruses and malware that put EMR at risk. A security information & event management system (SIEM) provides the ability to detect complex threats and effectively secure EMR.
Download Now
|
 |
|
|
|
|
|
Databases at Risk |
| By : Guardium |
Published Date: Jan 05, 2010 |
|
Databases at Risk
by Jon Oltsik, Principal Analyst, Enterprise Strategy Group
In a recent Research Brief, ESG analyzed the current state of database security. Based upon a survey of 179 North American-based security professionals working at organizations with over 1,000 employees, ESG found that:
. Databases house a higher percentage of confidential data than any other type of data repository.
. Database security depends upon too many manual processes.
. Enterprise-class organizations aren't diligent enough about database security.
This Research Brief categorizes databases as a "dangerous and growing security gap", and offers steps to improve database security across the enterprise.
Download Now
|
 |
|
|
|
When Corporate Network Safety Starts at Employees' Homes |
|
|
With the increasing sophistication and ease with which hackers attack, IT managers must train their end users on wireless security, specifying wireless router hardware and configuration settings, and in some cases, providing firewall/VPN endpoint appliances (managed from the data center) for key employees' in-home use. This white paper covers eight essential tips for nailing down security for off-site wireless users. Share it with your remote users today to help them work from home safely.
Download Now
|
 |
|
|
|
Botnets Exposed: Stopping Next-Generation Attacks |
|
|
The increasing sophistication and dynamism of multi-vectored network attacks, including use of botnets to deliver threats deep inside the enterprise, requires rethinking network security. In light of this sophistication and the corresponding multi-pronged attacks, traditional exploit-based solutions fail to be effective countermeasures to secure the network.
Download Now
|
 |
|
|
|
Is a Unified Threat Management solution right for you? |
|
|
Today's small and mid-sized businesses (SMBs) and the remote branch offices of larger organizations face increasing Internet-borne security risks. This paper discusses integrated network security appliances that can help these organizations enhance their security easily and affordably.
Download Now
|
|
|
|
| |
|
|
|
Results 1 - 25 of 98 matches |
Sort Results By : Published Date | Title | Company name |
Home >
> Vulnerability Management |
|
<< Start < Previous 1 2 3 4 Next > End >>
|
More Security Topics |
Access Control, Anti Spam, Anti Spyware, Anti Virus, Application Security, Auditing, Authentication, Biometrics, Business Continuity, Compliance, DDoS, Disaster Recovery, Email Security, Encryption, Firewalls, Hacker Detection, High Availability, Identity Management, Internet Security, Intrusion Detection, Intrusion Prevention, IPSec, Network Security Appliance, Password Management, Patch Management, Phishing, PKI, Policy Based Management, Security Management, Security Policies, Single Sign On, SSL, Secure Instant Messaging, Web Service Security, PCI Compliance, Vulnerability Management |
|
 |
|
RSS