Endpoint Security Deep Dive
629471
(Source: Symantec) Learn more about the NEW Symantec Endpoint Protection solution. Mike Monzon will take you on a comprehensive tour of the latest endpoint security products from Symantec. IT professionals with network security expertise will gain an in-depth understanding of how these exciting new products from Symantec will help secure the endpoints on their network and ensure compliance with security policies.
674304
Mike Wallner has thrown together some stats for the latest edition of the pecl/http package to test its response performance.   The results surprised me, because it clearly shows that the performance drop for starting the PHP engine and doing the neccessary negotiation to provide caching is not that bad.   There's a chart of the results as well as a full PDF with all of the stats the graph maps out. He includes the legend to make the graph easier to understand.
18935
(Source: Symantec) Endpoint security provides a comprehensive solution that enables enterprises to address the full spectrum of endpoint threats against their desktops, laptops, servers and mobile devices.  Increase control.  Increase security.  Decrease complexity.  Decrease costs.  Symantec redefines endpoint security to address the needs of an ever-changing threat landscape.
475145
The purpose of this paper is to explain how attackers behave when they attempt to identify and defeat honeypots, and is useful information for security professionals who need to deploy honeypots in a more stealthy manner. Part 2 looks at Sebek-based honeypots, snort_inline, Fake AP, and Bait and Switch honeypots.
635724
In a new post on his blog, Christian Wenz mentions the latest results of the SANS Institute's Top 20 Internet Security Attack Targets list which both includes a new entry ("Users") and several mentions of PHP and PHP-related applications.   Of course you can debate how such a Top list came together and what the real value behind that is, but there are two specific points in this year's list that I found quite interesting.   There's two targets for the PHP community to worry about - sysadmin/hosting and things developers need to keep in mind. Items on these lists include:  Always test and deploy patches and new versions of PHP as they are released Use Intrusion Prevention/Detection Systems to block/alert on malicious HTTP requests. Consider using Apache's mod_security to block known PHP attacks If you use PHP, migrate your application to PHP 5.2 as a matter of urgency. Encode all output using htmlentities() or a similar mechanism to avoid XSS attacks  You can check out the full information over on the SANS Institute website.
575664
Secure and Reliable Email, IM, Calendaring
462460
Who:  Safend, an international leader in enterprise endpoint security solutions.
350929
As Ed Finkler points out there's a new article posted (written by him) on the C7Y site (from php|architect) talking about his Inspekt library - an introduction to the filtering library showing how to help make your applications safer.   Inspekt is a library for PHP4 and PHP5 that aims to make safe input handing easier, and unsafe actions more difficult. Inspekt establishes a new development approach by wrapping input within "cage" objects, and requiring the developer to use validation and filtering methods to test and manipulate the input data. This article provides a brief introduction to Inspekt and its capabilities.   The article covers all of the basics - what the library can do for you, how it integrates into your application and how it helps to protect you from potential problems with the data in your superglobals ($_GET, $_POST, $_REQUEST, etc).
369995
New .mobi and .jobs, a shift in the ownership of .net
740707
The 3SP SSL-Explorer is the world's first open-source SSL-based VPN solution of its kind. Released under the GPL, this entry-level VPN solution provides users with a means of securely managing their IT infrastructure from outside the network perimeter, armed with just a standard web browser. This second release now provides full Active Directory authentication for use within Microsoft Windows Server environments. The release also sees a change from using the MySQL database to an internal HSQLDB database and this means that post-installation database configuration is no longer required.   Download the SSL-Explorer v0.1.1 here: http://sourceforge.net/project/showfiles.php?group_id=116065  Find out more information on SSL-Explorer at: http://3sp.com/products/enterprise/ssl-explorer/ssl-explorer.jsp
386604
This article discusses the discovery of compromised machines in large enterprise environments, and offers some suggestions on correlating NIDS and HIPS logs to avoid false positives.
617853
Next-generation RF tags touted as a way to boost network security.
466917
This third and final article in the Metasploit series covers the msfcli scripting interface as well as the intuitive web interface to the Framework. The article also discusses what's new with version 2.2, and then introduces the exploit development process through an example.
190332
(Source: Patchlink)  The ability to assess and evaluate endpoint's policy and remediate any vulnerabilities and mis-configurations are the most important elements of the NAC architecture. In this whitepaper you will learn best practices approach to implementing an effective NAC architecture with vulnerability assessment and remediation at the core.
582154
The new native IPsec implementation for 2.6.x kernels greatly improves the security of Linux systems.
161831
Unprecedented amounts of data will need to be secured in new, untested ways. What's the best course to pursue in such uncharted territory?
489254
(Source: Fluke Networks)  This white paper describes best practices to ensure SNMPv3 migration improves security and makes ongoing monitoring easier and more accurate.