Vulnerability & Threat Management | IANS - Information Security, Regulatory Compliance & Risk Management

05/10/2012 | Vulnerability & Threat Management

SCADA Vulnerability Assessment (ECB Replay)

Please click through the slides along with the audio portion of IANS' May End User Client Briefing by Hart Rossman. The last few years have seen the rise of SCADA security not only within the security community, but also in public consciousness. What has been an under-explored area of the information communications technology space has been catapulted into the limelight through a

05/09/2012 | Vulnerability & Threat Management

SCADA Vulnerability Assessment (ECB Slides)

The last few years have seen the rise of SCADA security not only within the security community, but also in public consciousness. What has been an under-explored area of the information communications technology space has been catapulted into the limelight through a combination of events, namely the growing sensitivity by governments of the role IT plays in critical infrastructure

03/20/2012 | Vulnerability & Threat Management

Industrial Control Systems Malware: Malware Types and Detection Recommendations

06/30/2011 | Vulnerability & Threat Management

IANS Checklist: Key User Questions For The Cloud Service Provider

At the IANS Lone Star Forum 2001 in Dallas, TX, among conversations between IANS Faculty and end user clients, a turning point was witnessed. In many of the conversations regarding cloud service provision of solutions, platforms and infrastructure, the end users noted that they'd attained a level of comfort with the technology behind cloud providers' offerings. The main area of

06/09/2011 | Vulnerability & Threat Management

IANS Trends: A Behavioral Approach To Threat Modeling

The idea that enterprises can be protected at the edge of the network has been shattered by multiplying threats, social engineering, new threat vectors like smartphones and IM, and an increased awareness of patient, sophisticated adversaries.

05/11/2011 | Vulnerability & Threat Management

Getting the Most Value From a Vulnerability Assessment or Penetration Test (ECB Slides)

Most organizations today do some sort of vulnerability scanning and penetration testing for Web applications and network-based resources. The goals for these tests vary widely from one organization to another - some are simply looking to complete a checkbox for compliance, others are creating internal processes and teams to perform this regularly for baselining and configuration

05/11/2011 | Vulnerability & Threat Management

Getting the Most Value From a Vulnerability Assessment or Penetration Test

03/20/2011 | Vulnerability & Threat Management

IANS Checklist: Choosing A Forensic Investigative Firm

The payment card industry has developed fairly extensive guidelines and requirements around computer forensic investigations. Specifically, these guidelines stipulate what to do in the case of a compromise, who is qualified to conduct the investigations, how these investigations are to be conducted and what is expected as a result of the investigation. More specifically, PCI

08/09/2010 | Vulnerability & Threat Management

Malware Prevention and Investigation Key Takeaways & Recommendations

Malware is a consistent issue for security professionals seeking to maintain a proactive stance in securing their organization’s systems and information. With each breed of malware emerging more advanced than the defenses it eludes, an understanding of what comprises the new breed of threats in 2010 and beyond is critical.

07/14/2010 | Vulnerability & Threat Management

APT & Beyond: the 2011 Threat Landscape

Every year IANS gathers together a panel of outstanding security experts to discuss emerging threats and new ways to think about information security. In this session Marcus Ranum, Dr. Ron Ritchey, and Greg Shipley discuss how to change your mindset from vulnerability management to threat management, why cyber-criminals are able to evade many of today’s security solutions, how to