Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Forensic Approach To Mobile App Vulnerability Research
Intro to a unique approach for vulnerability research on mobile apps using traditional PC forensic tools
Google Big Tent: Regulation Vs. Personal Responsibility
Society should embrace the touch-the-stove approach when it comes to online common sense, explains 14-year-old Adora Svitak, author of no less than three books and advocate of techno-youth empowerment, at Google event on Web regulation.
Someone Left The Keys In Your Compliance System
Information security is at the mercy of your entire staff's habits
A Single 'Pain' Of Glass?
Is the often-pitched 'single pane of glass' a benefit to security monitoring tools or yet another point of contention?
Facebook's Privacy Two-Step On Passwords, Employers
Facebook says sharing your password with a potential employer violates its rules. But will Facebook enforce this rule, when it still doesn't confirm user ages?
Technology Cannot Solve All Your People Problems
Too many in business assume compliance is primarily a technology issue
Keep Your Friends Close, Especially If They Are Anonymous
Sabu's traitorous ways reminds us of the sage advice to keep your friends close and your enemies closer
Fun With REMnux -- And New Malware Analysis Book
"Practical Malware Analysis" provides in-depth knowledge on malware analysis and includes useful lab exercises. We take REMnux for a spin with the labs
Nobody Cares About HIPAA
Compliance in many organizations is seen as only a costly inconvenience
Ron Was Wrong, Whit Is Right, And What You Need To Know
Clarifying the technical findings on a weakness in RSA crypto keys and some recommendations on how to prepare and protect your assets from the next inevitable crypto weakness discovery
Big Data Security Or SIEM Buzzword Parity?
If you attended the 2012 RSA Security Conference, BSides San Francisco, or the America’s Growth Capital Summit, you no doubt noticed claims of SIEM vendors jumping on the 'big data security' bandwagon
Six Things Management Needs To Better Understand About Compliance
It may be boring or scary to management, but compliance is ultimately their burden to bear
Doing Tech Evangelism Right
Kaspersky Lab's public request for help on an unsolved mystery surrounding Duqu serves as a case study about the power of technology evangelism
Anonymous Hackers' Helper: IT Security Neglect
Despite successful FBI arrests of members of LulzSec and Anonymous, hacktivist attacks will continue so long as easy-to-exploit weaknesses persist. How much are our security practices to blame?
8 Privacy Threats Worse Than Google
Google's privacy policy tweaks this week caused a fresh flurry of outrage. But Google should not be your top privacy worry.
10 Lessons From RSA Security Conference
Mobile, social, and cloud computing have changed the security equation.
Carrier IQ Fights Back With Consumer Dashboard
Carrier IQ, attacked last year for monitoring cell phone user data, says it can help consumers gauge wireless phone performance--if carriers implement the app.
|
Everything You Need to Know About DNS AttacksIt's important to understand DNS, potential attacks against it, and the tools and techniques required to defend DNS infrastructure. This report answers all the questions you were afraid to ask.
Domain Name Service (DNS) is a critical part of any organization's digital infrastructure, but it's also one of the least understood. DNS is designed to be invisible to business professionals, IT stakeholders, and many security professionals, but DNS's threat surface is large and widely targeted.
Attackers are causing a great deal of damage with an array of attacks such as denial of service, DNS cache poisoning, DNS hijackin, DNS tunneling, and DNS dangling. They are using DNS infrastructure to take control of inbound and outbound communications and preventing users from accessing the applications they are looking for. To stop attacks on DNS, security teams need to shore up the organization's security hygiene around DNS infrastructure, implement controls such as DNSSEC, and monitor DNS traffic
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
1 Comments
