Infosecurity (UK) - IT Forensics

Latest News

SQL injection attacks are in decline – or are they?
IBM's X-Force 2009 Trend and Risk report claims to show an 11% fall in discovered vulnerabilities compared to 2008, including a decline in the largest categories, such as SQL injections and ActiveX.
Kroll Associates up for sale
Kroll Associates – the IT-enabled detective and investigations firm acquired by insurance giant Marsh & McLennan in 2004 for more than $1.9bn – is now up for sale, according to newspaper reports.
RSA: Solera networks partners with EMC
Active network forensics company Solera Networks announced its partnership with EMC at RSA Conference 2010 on March 2 in San Francisco.
RSA: Microsoft reveal plans for a safer internet
In his keynote address at the RSA Conference 2010 in San Francisco, Scott Charney, corporate vice president of Microsoft’s Trustworthy Computing Group, outlined how Microsoft will apply its end to end trust vision to cloud computing.
RSA: Qualys introduces free malware detection
Qualys has become the first on-demand network and site vulnerability company to launch a free malware detection service, designed to protect websites from malicious activities and stop visitors from being infected by malware.

Podcasts

The Art of the Possible ... engaging your audience for information security awareness
Infosecurity Magazine’s Eleanor Dallaway speaks to Paula Davis, global head of client services at SAI Global about the evolving tools, techniques and technologies available to businesses for addressing the human element of information security through creative, effective employee awareness training. This podcast will examine the options available to you for information security training and will: • Provide an overview of the various training media that can effectively engage employees in information security. • Give advice on how businesses can respond to the changing needs, habits and expectations of learners by using new media to raise awareness of information security • Explain how tried and trusted training methods such as e-learning can be made even better • Look at the pros and cons of using emerging technologies and new media for information security awareness • Give guidance on how to ensure your choice of media is ‘fit for purpose’ and appropriate to your audience and budget
Securing your business against future internet threats
Infosecurity’s Eleanor Dallaway speaks to Gerhard Eschelbeck, CTO of Webroot, about how to secure your business against future internet threats. This podcast will examine how the internet has influenced business practices, and will look at the current and future threat landscape. This podcast will also: • Look at hacker motivations • Consider how businesses are protecting employees remotely • Touch on the evolution of malware • Analyse the impact of social networking • Highlight and recommend at multi-layered security approach • Address the hype around cloud services
Editorial Podcast: 27 November 2009
Kari Larsen summarises the week's news
Editorial Podcast: 5 November 2009
Kari Larsen summarises the week's news

Webinars

Understanding the IT security total cost of ownership puzzle
IT security and the financial function are starting to become happy partners, now that key performance indicators (KPIs) and total cost of ownership (TCO) figures can be created for most IT systems and software. Join us for an entertaining and informative webinar in which we'll explain how to balance the requirement of future-proofing your IT security resource, whilst at the same time balancing the time and budget issues that also come to the fore.
Tackling the mobile endpoint security issue
Modern workforces are becoming more and more mobile - data just released from iPass, for example, suggests that 40% of employees now access office IT resources on the move. But whilst accountants rub their hands at the prospect of reducing office overheads, IT managers are concerned about the security of the mobile workforce and, in particular, the mobile endpoint security issue.
End point security - How to stay out of the headlines and avoid a £500,000 fine.
April 2010 sees the introduction of new data breach penalties from the Information Commissioner's Office (ICO). Criminal penalties and data breach notification mandates are also on the horizon, so it's essential that you review your organisation's mobile data security strategy.
Password Management: Top Ways to Deal with the Necessary Evil
Password management sounds like a mundane aspect of IT security, but as recent high-profile media reports have proven, it's now a central part of effective company technology management. Anecdotal evidence in the industry suggests that the technology and techniques to handle password management is a black art. Not so. Join us for an entertaining and informative webinar in which our panel of experts will explain the strategies that are required for the efficient, secure and compliant management of passwords.

Blogs

Insider Threat of Cloud Computing
Posted by Roger Halbheer • 11 March 2010
Tonight I got this article forwarded to me: Afraid of outside cloud attacks? You're missing the real threat. David Linthicum (the author) claimed that if you are looking at the hackers attacking ...
tags: Cloud
rated:
Data Protection Heat Map
Posted by Roger Halbheer • 09 March 2010
I was looking at some research done by Forrester, which could be interesting for you as well. They try to lay out the landscape with regards to data protection for you and it looks fairly compelling. ...
tags
rated:
Why it pays to be secure – Chapter 5 – I need tools!
Posted by Roger Halbheer • 06 March 2010
Our EMEA Security Program Manager, Henk van Roest, started this series internally and with his consent I am publishing it here in my blog as I think it contains a lot of great information for you to u...
tags
rated:
Virus Alert! Twitter, Google, Hallmark and Others Subject To Attack
Posted by Patrick Walsh • 05 March 2010
The eSoft Threat Prevention Team is warning customers today of a new email scam circulating very quickly. These fraudulent emails claim to be from Google Staffing, Hallmark, Twitter as well as o...
tags: virus, bot, spam
rated:
Making the Management of Security Compliance Easier!
Posted by Roger Halbheer • 18 February 2010
As you all know, I have two main pet themes: Risk Management and Compliance Management as I see very often that there is room for improvement when it comes to such processes within our customers. Inte...
tags: Compliance, Policy
rated:

Features

The charmed life of cybercrime The charmed life of cybercrime
Crimes, scams, and various forms of nonsense are hardly inventions of the digital age. In fact, they are likely as old as human civilisation. Wendy M. Grossman examines why criminals are finding it easier to engage in cybercrime over more traditional forms of physical theft, and why law enforcement finds it difficult to prosecute the perpetrators
Comment: Exit strategy - How forensic ready are you?
Losing a key employee is never easy, but it can be harder still if they take confidential company information with them. Duncan Gardiner, director forensic services at Epiq Systems outlines the steps that companies can take to protect their positions, both before and after such an event.
Cyberterrorism: A look into the future Cyberterrorism: A look into the future
Cyberterrorism might mean different things to different people, but one thing is certain – it needs to be taken incredibly seriously. What are we dealing with? How can we defend our nation? How will cyberterrorists of the future look to attack? The (ISC)2 US Government Advisory Board Executive Writers Bureau answers these questions
The black art of digital forensics The black art of digital forensics
What makes a good digital forensics specialist? Steve Gold looks at some of the latest applications and investigates how the forensic investigator’s role has evolved in order to comply with changing customer priorities

Downloads

PCI: Using Microsoft Active Directory to Address Payment Card Industry (PCI) Data Security Standard Requirements in Heterogeneous Environments
Learn how to simplify compliance reporting for stringent PCI DSS regulations by linking all access rights, privileges, and audit logs to a single, definitive Active Directory identity.
Data Handling Procedures in UK Government
The Cabinet Office published the "Data Handling Procedures in UK Government", which highlights the need to restrict access to public sector data and encrypt data held on removable storage media such as CDs, USB keys and laptops.
Demystifying IT Risk to Achieve Greater Security and Compliance
Managing IT risk is part of running any business these days. Regardless of what business you’re in, understanding IT risk can help you increase network security, reduce management costs and achieve greater compliance. Corporate leaders who fail to identify, assess and mitigate IT risk are setting themselves up for serious security breaches and financial losses down the road. And those leaders who think that managing IT risk is the job solely of the IT staff may be in for a big shock.
The Essential Series - Security Information Management
Maintaining information security is a multi-faceted operation that is best managed with a single comprehensive strategy rather than mix of tactics based on whatever point solutions are already deployed. Learn about the processes and technologies that support security information management (SIM) operations, as well as the business case for SIM.
Aberdeen: Choosing and Consuming Managed Security Services
Learn the strategies, actions, and capabilities that Best-in-Class organizations employ and technologies they choose to obtain superior performance against various security performance metrics.

Latest News

Podcasts

Webinars

Blogs

Features

Downloads

Members' Login

Not a member?