05/16/2012 |
Infrastructure Security
Cloud-based security offerings have steadily increased in number over the last several years. These products range fairly widely in terms of scope and capability, plus represent a diverse set of categories within the general information security space. This paper will explore some of the major categories of Security-as-a-Service (SecaaS), explain what they are along with the
05/14/2012 |
Infrastructure Security
Most of the identity management problems that enterprises work to address in cloud applications are not new problems; rather the move to the cloud accentuates some of the drawbacks in current approaches to identity, such as point to point and proprietary identity.
This document will examine some of the ways enterprises can successfully plan their cloud identity management (IDM)
05/14/2012 |
Network Security
As difficult as it has been for many to accept, the computer security industry has finally conceded that focusing all efforts in securing endpoints is now futile. There has therefore been a recent emergence of network forensics tools and techniques to help with monitoring and analysis of network activity for gathering information, determining intrusions, and collecting data as
04/18/2012 |
Network Security
The issues highlighting the need for network security analysis are clear. We cannot stop the attackers, so we have to plan for compromise.
The difference between success and failure breaks down to how quickly you can isolate the attack, contain the damage, and then remediate the issue. Yet many organizations think aggregating some logs will provide the basis to really understand
04/18/2012 |
Network Security
The issues highlighting the need for network security analysis are clear. We cannot stop the attackers, so we have to plan for compromise.
The difference between success and failure breaks down to how quickly you can isolate the attack, contain the damage, and then remediate the issue. Yet many organizations think aggregating some logs will provide the basis to really understand
04/09/2012 |
Network Security
Faculty member Kevin Johnson answers the question, "With all the press around hacktivism and Anonymous, what do we need to know, and what do we need to do differently?"
03/28/2012 |
Mobile Security
In this first IANS Solution Provider Briefing, Faculty Kevin Johnson presents how BYOD is affecting organizations and provides an overview of why solution providers should care about end user adoption.
03/26/2012 |
Network Security
The majority of today’s organizations detect and internally report on threats by relying on the static based signature protections provided by their security vendors. With the volume of high profile data breach headlines over the past couple of years and the detailed sophistication of many of these attacks, it is obvious that signature based protections are no longer adequate for
03/19/2012 |
Infrastructure Security
The cloud is not an abstract thing, but a shadow of the communities of architects, developers, managers, and security personnel who build them. In a cloud deployment, up front involvement by security architects is essential; without it your cloud applications will be deployed with only the security provided by the kindness of your cloud provider.
This paper will discuss how the
03/16/2012 |
Infrastructure Security
Control systems have been operated for decades, however, only in the past ten years has connectivity dramatically increased and aligned with traditional IT systems. This opens up the possibility of more commonly accessible attack tools being developed and criminals causing mishaps.
This paper will review the increasing threat landscape associated with control systems and then
