Preventing Security Threats from USB Storage Devices

May 11, 2008

Working in Computer Security, one of the biggest threats we face today is the threat of an Insider, an Employee who might casually walk in with his 4 GB USB Flash drive, plug it in to their computer within the corporate network and walk away with valuable data. I have seen solutions ranging from expensive [...]

Read the full article →

Operating Systems Security: Year 2007 Vulnerability Report

April 9, 2008

Operating Systems Security: Year 2007 Vulnerability Report
This paper analyzes the vulnerability disclosures and security updates during the year 2007 for Windows Vista Operating System when compared to its predecessor, Windows XP, along with other modern Client Operating Systems Red Hat, Ubuntu and Apple Mac OS X.
The results of this analysis based on the Vulnerability Count [...]

Read the full article →

Physical Security & Information Gathering

March 31, 2008

This is a great presentation by Johnny Long at Defcon. He talks about how easy it is to gain access to secure locations without any “hacking” aka physical security.

Read the full article →

How Many Passes Does the Team in White Make

March 24, 2008

It is very easy to miss something you are not looking for. How many passes does the team in white make? Test you awareness and Do the Test!

Read the full article →

Most Influential People in Security

March 23, 2008

Ryan Naraine over at eweek.com has come up with an interesting list of the top 15 most influential people in Computer Security.
1. Tavis Ormandy, Google Security Team’
2. Ivan Krstic, One Laptop Per Child’
3. Chris Paget, IOActive’ , Google
4. Bunnie Huang, Bunnie Studios’
5. Michal Zalewski, Google’
6. Window Snyder, Mozilla
7. The MOAB Hackers’
8. Dino Dai Zovi’
9. Michael [...]

Read the full article →