Archive

Archive for December, 2005

Best Wishes for the Holidays

December 23rd, 2005

RSA Security and the “Speaking of Security” bloggers wish all our readers a very happy holiday season, and best wishes for health, wealth and happiness in 2006. Thank you for your comments and contributions over our first six months — we look forward to connecting with you again in the New Year.
Also… look for some new services from the “Speaking of Security” team in January!

Original post by blog@rsa.com (Speaking of Security Bloggers) and software by Elliott Back

Computer security Systems

Essential Links

December 18th, 2005

Top Security/Hack tools NessusInsecure -Top 75 Security Tools Astalavista-Top 50 Security Tools Internet Security Scanner-Download
Latest ToolsZone-H-Download GalleryAstalavista GallerySysinternals
Free Vulnerability Analysis
Free Nessus Self ScanSecuobs (French)
Free Remote Security ScanQualys
Free Self Penetration tests Symantec-Scan for Security RisksIt-sec-Vulnerability checkHacker-Whacker-Free Online Tools
Free Browser Self Security CheckScanit-Browser CheckQualys-Browser Check
Security SitesPacket StormSecurity Focus( Bug Traq Home)AstalavistaSans InstituteInsecure.orgICAT MetabaseStartplaza-Security Portal
Free TutorialsO’Reilly’s CD bookshelfThe Rocks Project BitMe.ORGCustic.orgEbookzLinuxDocsLinux Documentation ProjectLinux GazetteMath ThinkingGiac-Study guides
Code RepositoryJavaScriptASP
Free Magazine SubscriptionCiscoOracle
Software Repository 46 Best ever Freeware UtilitiesDownload.com SourceForgeLinux DistrosUbuntu Linux(Free CD)Windows XP free downloadsLinux ISOs
CracksCracks.amPhazeDDl
Free Hosting100 Web SpaceFree Web hosts1ASP Host Yahoo! Geocities
Free Shell AccountsDuctape.net ListSDFIBM
Dynamic DNSNo-IP.com
Online Bandwidth MeterWhoissoft Speed testMcAfee Speedometer
Free Online Trace Services
Trace an IP by geographical location Symantec-Trace a Potential Attack
Whois LookupSamspade.orgWebHosting.InfoWhois.scWhoissoftAPNIC
Antivirus
Free AntivirusClam WinAVG
Free Virus Scan Symantec Online Virus Scan
Virus Definitions Symantec Virus definitions

Original post by Sharjeel and a wordpress plugin by Elliott

Computer security Systems

CSIA: “Make Cyber Security a National Priority”

December 12th, 2005

The Cyber Security Industry Alliance (CSIA), of which RSA Security is a founding board member, released a report today entitled “National Agenda for Information Security in 2006 (pdf)“.
The CSIA report rates the progress — or lack thereof — made by the federal government on a number of policy priorities that were highlighted in December 2004 by the Alliance as important for protecting critical information infrastructure and the national economy. In a 2005 assessment, the Administration and Congress scored a grade of D or below on 7 of the 12 recommendations that were made for this year, and earned a grade of C on four others.

Original post by blog@rsa.com (Shannon Kellogg) and software by Elliott Back

Computer security Systems

CSIA: “Make Cyber Security a National Priority”

December 12th, 2005

The Cyber Security Industry Alliance (CSIA), of which RSA Security is a founding board member, released a report today entitled “National Agenda for Information Security in 2006 (pdf)“.
The CSIA report rates the progress — or lack thereof — made by the federal government on a number of policy priorities that were highlighted in December 2004 by the Alliance as important for protecting critical information infrastructure and the national economy. In a 2005 assessment, the Administration and Congress scored a grade of D or below on 7 of the 12 recommendations that were made for this year, and earned a grade of C on four others.

Read more at blog@rsa.com (Shannon Kellogg)

Computer security Systems

A “Perfect Storm”: Concerns Over Online Fraud Leading to More Government Action

December 6th, 2005

Have you ever seen that movie, “The Perfect Storm,” starring George Clooney? Based on a true story, it highlights the fateful journey of a fishing boat crew that tried to ride out a major storm in the Atlantic Ocean, eventually succumbing to waves the size of skyscrapers. As portrayed in the movie, sadly, the tragedy may have been avoided had the crew heeded warnings about the storm or turned the ship in the right direction as the “perfect storm” was being unleashed.
Well, I can’t help but think of the this movie when I look at the past year of wide-scale breach notifications, increases in online fraud and account hijacking and the seemingly endless stream of online threats, including ongoing challenges such as phishing and pharming.

Original post by blog@rsa.com (Shannon Kellogg)

Computer security Systems

A “Perfect Storm”: Concerns Over Online Fraud Leading to More Government Action

December 6th, 2005

Have you ever seen that movie, “The Perfect Storm,” starring George Clooney? Based on a true story, it highlights the fateful journey of a fishing boat crew that tried to ride out a major storm in the Atlantic Ocean, eventually succumbing to waves the size of skyscrapers. As portrayed in the movie, sadly, the tragedy may have been avoided had the crew heeded warnings about the storm or turned the ship in the right direction as the “perfect storm” was being unleashed.
Well, I can’t help but think of the this movie when I look at the past year of wide-scale breach notifications, increases in online fraud and account hijacking and the seemingly endless stream of online threats, including ongoing challenges such as phishing and pharming.

Read more at blog@rsa.com (Shannon Kellogg)

Computer security Systems

There is no absolute measure of trust in software (or hardware)

December 5th, 2005

People make mistakes — it is that simple. Even good people make mistakes.
The entire software development process used in most serious organisations is built around the principle that mistakes will happen. Reviews of designs, reviews of code, and the testing of products are all based on the assumption that people make mistakes.
Very few organisations develop with 100% test coverage because the overheads generally are not a good trade off to make in terms of investment. Complete test coverage is difficult — and requires a substantial investment that doesn’t directly generate revenue…

Original post by blog@rsa.com (Tim Hudson) and powered by Img Fly

Computer security Systems

Authentication is bigger than Identification

December 4th, 2005

As more and more transactions move online, in terms of both volume and value, the whole area of authentication is rapidly becoming multi-faceted, sophisticated, and valuable. Tokens will perform an important role, particularly for high-value corporate access solutions for example, for many years to come, but we are entering into a new age, where balanced approaches to risk, and the application of appropriate and cost-effective responses will account for the huge majority of web-based transactions.

Original post by blog@rsa.com (John Madelin) and a wordpress plugin by Elliott

Computer security Systems