Infosecurity (UK) - the online magazine dedicated to the strategy and technique of information security

Latest News

Smart energy meters securely meet WiFi
It looks as though the smart energy meters that energy companies in the UK and US are committed to installing in the years ahead will be WiFi-enabled, as the ZigBee Alliance and the WiFi Alliance are linking up.
Industry prepares for new ICO penalties starting next month
The IT security industry - and its customers - are starting to prepare for the introduction of new and stiff penalties for organisations that allow data to be stolen or leak, and could reasonably be said to be aware of the risk.
ISACA leader gives thumbs up to classifying security as highest priority in data center planning
Research just published claims to show that security, price and power - in that order - are the three main drivers when it comes to companies reviewing their data center requirements.
Comment: Who can you trust with your organization’s information?
Martyn Smith of Logically Secure looks at a number of high-profile breaches of data security and their underlying causes. He also examines how organisations passing on valuable data to third parties can assure its protection and better understand each other’s security without relying only on trust or intrusive inspections
SQL injection attacks are in decline – or are they?
IBM's X-Force 2009 Trend and Risk report claims to show an 11% fall in discovered vulnerabilities compared to 2008, including a decline in the largest categories, such as SQL injections and ActiveX.

Podcasts

The Art of the Possible ... engaging your audience for information security awareness
Infosecurity Magazine’s Eleanor Dallaway speaks to Paula Davis, global head of client services at SAI Global about the evolving tools, techniques and technologies available to businesses for addressing the human element of information security through creative, effective employee awareness training. This podcast will examine the options available to you for information security training and will: • Provide an overview of the various training media that can effectively engage employees in information security. • Give advice on how businesses can respond to the changing needs, habits and expectations of learners by using new media to raise awareness of information security • Explain how tried and trusted training methods such as e-learning can be made even better • Look at the pros and cons of using emerging technologies and new media for information security awareness • Give guidance on how to ensure your choice of media is ‘fit for purpose’ and appropriate to your audience and budget
Securing your business against future internet threats
Infosecurity’s Eleanor Dallaway speaks to Gerhard Eschelbeck, CTO of Webroot, about how to secure your business against future internet threats. This podcast will examine how the internet has influenced business practices, and will look at the current and future threat landscape. This podcast will also: • Look at hacker motivations • Consider how businesses are protecting employees remotely • Touch on the evolution of malware • Analyse the impact of social networking • Highlight and recommend at multi-layered security approach • Address the hype around cloud services
Editorial Podcast: 27 November 2009
Kari Larsen summarises the week's news
Editorial Podcast: 5 November 2009
Kari Larsen summarises the week's news

Webinars

Tackling the mobile endpoint security issue
Modern workforces are becoming more and more mobile - data just released from iPass, for example, suggests that 40% of employees now access office IT resources on the move. But whilst accountants rub their hands at the prospect of reducing office overheads, IT managers are concerned about the security of the mobile workforce and, in particular, the mobile endpoint security issue.
Understanding the IT security total cost of ownership puzzle
IT security and the financial function are starting to become happy partners, now that key performance indicators (KPIs) and total cost of ownership (TCO) figures can be created for most IT systems and software. Join us for an entertaining and informative webinar in which we'll explain how to balance the requirement of future-proofing your IT security resource, whilst at the same time balancing the time and budget issues that also come to the fore.
End point security - How to stay out of the headlines and avoid a £500,000 fine.
April 2010 sees the introduction of new data breach penalties from the Information Commissioner's Office (ICO). Criminal penalties and data breach notification mandates are also on the horizon, so it's essential that you review your organisation's mobile data security strategy.
Password Management: Top Ways to Deal with the Necessary Evil
Password management sounds like a mundane aspect of IT security, but as recent high-profile media reports have proven, it's now a central part of effective company technology management. Anecdotal evidence in the industry suggests that the technology and techniques to handle password management is a black art. Not so. Join us for an entertaining and informative webinar in which our panel of experts will explain the strategies that are required for the efficient, secure and compliant management of passwords.

Blogs

Insider Threat of Cloud Computing
Posted by Roger Halbheer • 11 March 2010
Tonight I got this article forwarded to me: Afraid of outside cloud attacks? You're missing the real threat. David Linthicum (the author) claimed that if you are looking at the hackers attacking ...
tags: Cloud
rated:
Data Protection Heat Map
Posted by Roger Halbheer • 09 March 2010
I was looking at some research done by Forrester, which could be interesting for you as well. They try to lay out the landscape with regards to data protection for you and it looks fairly compelling. ...
tags
rated:
Why it pays to be secure – Chapter 5 – I need tools!
Posted by Roger Halbheer • 06 March 2010
Our EMEA Security Program Manager, Henk van Roest, started this series internally and with his consent I am publishing it here in my blog as I think it contains a lot of great information for you to u...
tags
rated:
Virus Alert! Twitter, Google, Hallmark and Others Subject To Attack
Posted by Patrick Walsh • 05 March 2010
The eSoft Threat Prevention Team is warning customers today of a new email scam circulating very quickly. These fraudulent emails claim to be from Google Staffing, Hallmark, Twitter as well as o...
tags: virus, bot, spam
rated:
Making the Management of Security Compliance Easier!
Posted by Roger Halbheer • 18 February 2010
As you all know, I have two main pet themes: Risk Management and Compliance Management as I see very often that there is room for improvement when it comes to such processes within our customers. Inte...
tags: Compliance, Policy
rated:

Features

Comment: IT security implications for the War on Terror
John Poulter of Informatica examines why IT security professionals in both the private and public sector are primary combatants in the global War on Terror. He explores options on aiding this process, and how to do so without ‘breaking the bank’
Interview: Eugene Kaspersky Interview: Eugene Kaspersky
Sitting across from Eugene Kaspersky at the 2010 Kaspersky Lab international press tour, held in Moscow, I feel completely at ease. Despite having suffered several back-to-back interviews with prying journalists, Eugene is relaxed and friendly.
Members' Content
Comment: We need to address the silo mentality in infosecurity
Tony Dyhouse expresses his concern that the lack of information sharing among organizations will keep the information security community one step behind cybercriminals
Espionage in sport Espionage in sport
Where there’s money, there’s cybercrime, and sport is no exception. Stephen Pritchard examines the pitfalls and vulnerabilities that the sporting industry faces in securing its vital information

Downloads

PCI: Using Microsoft Active Directory to Address Payment Card Industry (PCI) Data Security Standard Requirements in Heterogeneous Environments
Learn how to simplify compliance reporting for stringent PCI DSS regulations by linking all access rights, privileges, and audit logs to a single, definitive Active Directory identity.
Data Handling Procedures in UK Government
The Cabinet Office published the "Data Handling Procedures in UK Government", which highlights the need to restrict access to public sector data and encrypt data held on removable storage media such as CDs, USB keys and laptops.
Demystifying IT Risk to Achieve Greater Security and Compliance
Managing IT risk is part of running any business these days. Regardless of what business you’re in, understanding IT risk can help you increase network security, reduce management costs and achieve greater compliance. Corporate leaders who fail to identify, assess and mitigate IT risk are setting themselves up for serious security breaches and financial losses down the road. And those leaders who think that managing IT risk is the job solely of the IT staff may be in for a big shock.
The Essential Series - Security Information Management
Maintaining information security is a multi-faceted operation that is best managed with a single comprehensive strategy rather than mix of tactics based on whatever point solutions are already deployed. Learn about the processes and technologies that support security information management (SIM) operations, as well as the business case for SIM.

Latest News

Podcasts

Webinars

Blogs

Features

Downloads

Members' Login

Not a member?