There are many different ways to classify malware. Most, such as Antivirus vendors, tend to classify by intent (Trojan, worm, mailer, etc…) and several aspects of severity (damage potential, potential of outbreak, and actual outbreak reports). These metrics are usually averaged to create an overall risk rating. To the end ...

EV Upgrader™ is the first ever technology that enables all IE7 on Windows™ Vista and XP client systems to display the green address bar, organization name, and other Extended Validation interface conventions. EV Upgrader works by prompting existing root update functionality in IE7 for Windows XP on visiting ...

Many of the  are based on those available through the operating system. The following sections outline TCP/IP security. Access Control The security policy for networking is an extension of the security policy for the operating system, and it consists of the following major components: User ...

Michael Dahn started an interesting conversation with his post, “Putting an end to compliance via continuous security“.  He wonders why he and other auditors come back to companies and find the same problems year after year.  Why can’t a company stay compliant over the course of a year?  The reason, ...

I thought terrorism is why we have a DHS, but they’ve been preoccupied with other things: Of the 814,073 people charged by DHS in immigration courts during the past three years, 12 faced charges of terrorism, TRAC said. Those 12 cases represent 0.0015 percent of the total number of cases filed. “The DHS ...

Details from TheRegister. Popularity: unranked [?]Read more at schneier

The FBI has lousy security against insider attacks, according to a GAO report. Insider attacks are hard to defend against. One of the most important defenses is a good audit trail, so that when something happens you can figure out who did it. Popularity: 84% [?]Read more at ...

Two squid-shaped fishing lures. A water sink toy designed to simulate a squid. An apparatus for gutting squid. A method for detection of a monovalent cation, using a photoprotein derived from squid. Read more at schneier

I was interviewed by ITSecurity. Read more at schneier

Nasty attack. IPOWER declined a phone interview for this story. But the company acknowledged in an e-mail that “over the past three months our servers were targeted. We take this situation very seriously and a diligent cleanup effort has been underway for many months already. We saw the StopBadware report on ...

Yet another step in the militarization of the police: The machines, which are flown by remote control or using pre-programmed GPS navigation systems, are silent and can be fitted with night-vision cameras. The images they record are sent back to a police support vehicle or control room As if there aren’t enough cameras ...

This is a joke, right? A TSA behavior detection team at a Florida airport helped catch a passenger allegedly impersonating a member of the military on May 10 as he went through the security checkpoint. We spend billions on airport security, and we have so little to show for it that the ...