Analytics

How Security Metrics Fail Us & How We Fail Them

50%
50%

BLACK HAT USA 2017 -- (July 27, 2017) Joseph Carson, chief security strategist of Thycotic, visits the Dark Reading News Desk at Black Hat to discuss how poor use of metrics leads infosec professionals to buy security products they don't need and make other bad decisions.

Join Dark Reading LIVE for two days of practical cyber defense discussions. Learn from the industrys most knowledgeable IT security experts. Check out the INsecurity agenda here.

Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
kate25
100%
0%
kate25,
User Rank: Apprentice
3/18/2018 | 12:59:31 PM
Re: Regarding the post
Thanks, windows10helpguide.

I need more information from you, but you share just a little bit. 

every time I am concern about that.we use much protection for it.but we failed sometimes.
windows10helpguide
50%
50%
windows10helpguide,
User Rank: Apprentice
3/14/2018 | 1:59:15 PM
Regarding the post
I have been influenced by this post very much. The attackers are increasing day by day attacking various systems online. The   windows 10 get help  is also there related to this problem. 
stonemaddox
0%
100%
stonemaddox,
User Rank: Guru
12/28/2017 | 5:46:07 AM
Security Metrics
Yeah, pretty bad, that you just can't fully rely on some security systems and companies, and metrics, but need to understand more by yourself and waste some time on that.
annamarsh
50%
50%
annamarsh,
User Rank: Apprentice
11/29/2017 | 8:45:41 AM
Info
nice post.
myxfinity
50%
50%
myxfinity,
User Rank: Apprentice
11/21/2017 | 5:55:56 AM
good work
now a days , security concerns a lot and it should never fail
nisabila50
50%
50%
nisabila50,
User Rank: Apprentice
10/10/2017 | 10:00:57 PM
rara
interesting and useful. thanks
Election Websites, Back-End Systems Most at Risk of Cyberattack in Midterms
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/14/2018
Intel Reveals New Spectre-Like Vulnerability
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/15/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-1732
PUBLISHED: 2018-08-17
IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sen...
CVE-2018-15356
PUBLISHED: 2018-08-17
An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0.
CVE-2018-15357
PUBLISHED: 2018-08-17
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0.
CVE-2018-15358
PUBLISHED: 2018-08-17
An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0.
CVE-2018-15359
PUBLISHED: 2018-08-17
An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0.