VeriSign Security Risk Profiling Demo for Proactive Risk Management
630251
Read this guide, "Five Questions for Every CISO: Managing Your Risk Exposure" now and learn how you can better identify, visualize, and quantify information security risks in order to optimize security investments. Find out how the VeriSign Security Risk Profiling Service enables you to dynamically generate a risk score for your organization - including threats, vulnerabilities, network access policies and financial impacts.
449182
Multiple vulnerabilities have been reported in version five of the widely-used Kerberos authentication protocol. The most serious could be exploited by crackers to gain root control to authentication servers.
650360
Symantec's primary strategy in the enterprise may currently revolve around the notion of IT risk management, but the company's latest research finds that efforts to refine corporate process unrelated to security technology have become just as popular with customers moving to limit their exposure.According to Symantec's annual survey of 405 businesses, the notion that technologies used to improve IT security serve as the most vital element of corporate risk management currently ranks below other priorities among customers. Respondents to the study rated IT availability management and work on specific regulatory compliance projects as comparable, and in some cases more important, to their ongoing risk mitigation efforts.In addition, fewer businesses are utilizing a strategy that approaches IT risk as a standalone skill set or initiative, according to the Symantec report.One year ago, customers participating in the study indicated that the adoption of security technologies represented the central tenet of their risk management plans. In the 2008 report, 78 percent replied that availability maintenance concerns are now as vital to their exposure mitigation efforts as the installation of security tools.Some 70 percent of respondents replied that security projects are still a critical part of their approach. However, 53 percent of the IT-related incidents experienced by surveyed companies were tied to other issues besides problems with systems defense."IT risk doesn't necessarily equate to security risk. That's a big shift and the key takeaway is that organizations are getting more mature around the portfolio of risks they have to manage," said Samir Kapuria, managing director of Advisory Services at Symantec. "In the past, people looked at one area as discreet, but now they're addressing the four pillars of compliance, security, risk, and performance availability as part of a balanced strategy."Increasing interdependence on IT systems shared between business partners has elevated availability and performance concerns above security issues -- and businesses are more worried about causing a bottleneck in their global supply chain then they are looking to thwart attacks, the expert contends."IT systems availability can have a downstream impact which has had this downward effect," Kapuria said.Spending on compliance-oriented projects also stands as a major piece of most companies' plans, with 68 percent of those people responding stating that their employers rate those efforts as crucial to their risk management strategies.Respondents indicated that high-level risk management projects have become less central to their IT planning, with companies favoring targeted initiatives that address individual problems or regulations.In terms of the participants' expectations to avoid and prevent IT breakdowns, 69 percent said they believe they will encounter at least one minor incident per month, with 63 percent predicting a major IT failure at least once a year.Some 26 percent indicated they expect a failed regulatory compliance incident at least once annually, and 25 percent said that they will experience a data loss event every 12 months."This speaks volumes to the confidence that people have about their overall IT risk posture," said Kapuria. "Part of the problem is that people only do assessments on a bi-annual basis, or they might inventory their assets sporadically; that gap is what often leads to exposure in availability, security, compliance, or performance." All the individual projects involved need to be managed on an ongoing basis, he said.However, the process remains a moving target. Increased adoption of mobile devices and other distributed enterprise trends continue to boost data and compliance risks, while business practices -- including fast-paced mergers and acquisitions -- introduce greater complexity, Kapuria said.More than technological efforts, the Symantec report contends that companies may see faster returns in improving their risk status through greater investment in employee risk education and training.Only 43 percent of respondents rated their training and awareness programs as more than 75 percent effective, showing that companies are well aware of their current shortcomings, Kapuria said. The report shows a decrease of over 50 percent in companies' confidence about their training programs, compared to the year ago survey."The area where most people need to focus on is classifying their data, what it's used for, and what its sensitivity may be," said Kapuria. "Rather than just throwing technology at their problems, companies need to assess, and then apply the appropriate availability, security, and compliance requirements."
758171
Multifactor authentication is all the rage these days, thanks to increasingly sophisticated trojans and phishing attacks and even rootkits aimed at stealing passwords and sensitive data. High-stakes online crime has even spurred financial services companies and some enterprises to consider new, "risk-based authentication" solutions, which examine behavioral patterns and session characteristics to identify rogue users.ADVERTISEMENTIBM Information On Demand 2006Industrial Industry Leaders, please join us at IBM's premier information management global event, IBM Information On Demand 2006, October 15-20, Anaheim, CA. More IBM business and technical solutions content in one place than ever before! Select from  over 800 sessions. Register today!
405976
Letters: Going deeper on the question of security and operating systems.
265856
Internet services and security company VeriSign is unveiling a new token it hopes will replace passwords for gaining access to corporate computers.
678952
(Source: Webroot Software)  The latest State of Internet Security Report, released to you today by Webroot Software, provides an in-depth review and analysis of the most urgent computer and data security-related concerns facing businesses today. In this report, you will learn:  Industry data, trends, best practices and an evaluation of the threat landscape  The significant cost and legal implications of inadequate protection  Best practice guidance for businesses to follow to thwart unnecessary security breaches
391310
Internet Security Systems' intrusion prevention software on Crossbeam Systems security switches.
491058
(Source: VeriSign)  Securing your consumers, brand, Web sites and network from advanced threats while pleasing the customer is a must. Yet, most security technologies protect one layer while leaving others vulnerable to attack. Learn how to protect all of your confidential data and transactions with VeriSign Layered Security.
517744
A vulnerability that McAfee Avert Labs first warned about last week is now being exploited in the wild, according to VeriSign&#39;s iDefense. At issue are embedded objects in Rich Text Format (RTF) files.
353366
(Source: Lumension Security)  Today's IT security model is broken. In the ongoing battle to defend against malicious attacks, the industry studies and surveys continue to reveal a sobering fact: Although more than 99 percent of companies have anti-virus technology deployed, about 60 percent still suffer from malware infection every year. More organizations every year are also falling victim to data theft, despite the additional layers of IT security. Using traditional security measures, organizations must continuously react to risks, forcing them to constantly play catch-up with today's relentless barrage of viruses, spyware, Trojans and rogue devices. IT security has reached a tipping point, as reactive security solutions are simply unable to keep up with this constant tirade of malicious attacks. Join IDC Analyst Charles Kolodgy as he evaluates the "positive security model" as an emerging alternative and define its elements, including how this model lays a policy-based framework that facilitates proactive, continuous security across the enterprise.  In addition to Mr. Kolodgy's presentation, attendees will hear about: -How the Positive Security Model simplifes the entire security management lifecycle-Lumension Security's solutions, which provide you with unified protection and control of all endpoints-First hand experience from CWIE Holdings about the drawbacks of relying on traditional security measures
228804
Vulnerability management consists of a combination of technologies and processes that can be used to improve an organizations security posture and to support regulatory compliance initiatives. Security managers commonly use vulnerability assessments to determine the security state of their IT systems. However, changing processes and technologies present a challenge to vulnerability assessment tools, as they can only go so far in detecting potential attack paths.  In addition, changes in technology and business processes are reducing vulnerability assessment effectiveness even further.
297854
Finjan Software, a provider of proactive secure content management solutions for enterprises, announced today 10 serious security vulnerabilities discovered by Finjanâs Malicious Code Research Center (MCRC) in Windows XP Service Pack 2 (SP2) operating
545382
Una migliore tecnologia anti-spyware e una protezione maggiore contro worm mass-mailing e minacce miste potenziano lâultima versione del software antivirus di McAfee. McAfee ha rilasciato la versione 2005
312219
(Source: Imprivata)  Studies show that nearly 80% of publicized data breaches come from internal sources. This Imprivata webinar explains how a converged physical access and IT security strategy, with Imprivata OneSign", can ensure that you are actively defending your enterprise from insider threat while also addressing regulatory compliance.
524524
An attack utilizing a vulnerability in an ActiveX control for the popular RealPlayer media program may be spending in a more more dangerous fashion than anyone realized. Exploit code for the vuln has been found embedded in ads served up from a popular advertising site.
656430
By Messmer, Ellen  VeriSign last week announced an expansion of its log-management service beyond firewalls, operating systems and intrusion- detections systems to collecting log data related to applications and databases.