Search Blogs
Post Tags
Lest We Forget About Enterprise Security
Information Security Resources | December 18th 2009 by Anthony M. Freed
By Shubhendu Parth, CTO Forum Team CIOs are spending less time on supervising what they should be doing the most—strengthening the IT infrastructure and securing enterprise digital assets. Security may be a key thing that worries CIOs, but there ar read more
Is Information Protection Even Possible?
Information Security Resources | December 18th 2009 by Anthony M. Freed
By Danny Lieberman, Security Expert and Founder of Software Associates A Few Months ago I saw an article in ComputerWeekly that asked – Is data loss prevention possible? “Data is out of control in the corporate world…I think… the only way read more
Technology And The Advent of Cyber War
Information Security Resources | December 15th 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest A recent spate of news reports and scholarly publications have discussed the policy aspects of cyber war: offensive versus defensive, military buildup, and appropriate reactions. There have bee read more
Data Breaches Show PCI DSS Ineffective
Information Security Resources | December 11th 2009 by Anthony M. Freed
By Danny Lieberman, Security Expert and Founder of Software Associates A recent Ponemon survey (pci-dss-survey-key-findings-final4) found 71% of companies don’t consider PCI as strategic, though 79% had experienced a breach. Are these companies ass read more
New Gift Card Laws Also Benefit Terrorists
Information Security Resources | December 9th 2009 by Anthony M. Freed
By Professor Jenni Hesterman, Counterterrorism Expert In case you missed this news in November, laws regarding gift cards will change in favor of consumers: Just in time for the holiday shopping season, the U.S. Federal Reserve on Monday moved to read more
Security Assurances are Challenge for CIO’s
Information Security Resources | December 1st 2009 by Anthony M. Freed
From the CTO Forum Team Tom Clare cautions CIO’s about the ignorance towards the growing web-based security threats and prescribes simple remedies to prevent from damages. In an exclusive interview with the CTO Forum, Tom Clare, Sr. Director Pr read more
Report: Domestic Terror Threat on the Rise
Information Security Resources | November 24th 2009 by Anthony M. Freed
By Professor Jenni Hesterman, Counterterrorism Expert Last Thursday, the Senate Homeland Security and Governmental Affairs Committee opened hearings on the Fort Hood tragedy. One of the topics on the agenda is the rising domestic terror threat. But read more
Surviving Cyber War: A Primer on DDoS
Information Security Resources | November 22nd 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest Jomini’s first maxim of the Art of War: To throw by strategic movements the mass of an army, successively, upon the decisive points of a theater of war, and also upon the communications of the read more
Innovative Analytic Tool Empowers Investors
Information Security Resources | November 17th 2009 by Anthony M. Freed
By Anthony M. Freed, Information-Security-Resources.com Managing Editor An innovative new investor analytic tool made its public debut today, and it offers an exciting look at what may well be the future of online trading for both market experts and read more
2010 Defense Authorization Act Spending
Information Security Resources | November 14th 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest On October 28th President Obama signed into law the National Defense Authorization Act for Fiscal Year 2010 (655 page PDF here ). After removing the Department of Energy allotment of $122 mil read more
DLP is Short for Disturbing Lack of Process?
Information Security Resources | November 12th 2009 by Anthony M. Freed
By Danny Lieberman, Security Expert and Founder of Software Associates Ted Ritter has suggested that we rename DLP a Disturbing Lack of Process… Indeed DLP is not a well-defined term – since so many vendors (Kaspersky anti-virus, McAfee anti- read more
Four Pillars of Cyber Warfare: Intelligence
Information Security Resources | November 9th 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest There are four pillars to the cyber war realm: intelligence, technology, logistics, and command. One premise is that cyber warfare is a component of the ongoing struggle between philosophies of read more
Top Five Financial Sector Security Threats
Information Security Resources | November 3rd 2009 by Anthony M. Freed
By Kevin M. Nixon, Information Security Resources Security Editor It is usual and customary during the 4th Quarter of any year, to think about the potential threats to our financial institutions and corporations, in an effort to get ahead of the cur read more
Debunking Cyber Deterrence as a Strategy
Information Security Resources | October 31st 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest Martin Libicki’s “Cyberdeterrence and Cyber War” has been released as a RAND monograph and in book form on Amazon. This is the first cogent look at the efficacy of waging strategic cyber w read more
PCI Compliance Does Not Equal Security
Information Security Resources | October 28th 2009 by Anthony M. Freed
By Danny Lieberman, Security Expert and Founder of Software Associates I recently saw a post from a blog on a corporate web site from a company called Cloud compliance, entitled Is Compliance is the New Security Standard. Cloud Compliance provides a read more
Security Scenarios are Syllogistic Fallacy
Information Security Resources | October 28th 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest Scenario planning is a useful technique for risk reduction. A group of key players in an organization are brought together to brainstorm possible events and their impact on business. Scenario pl read more
Optimizing Multiple Enterprise Applications
Information Security Resources | October 20th 2009 by Anthony M. Freed
From the CTO Forum Team Enterprise applications choke the corporate IT networks, and the blame invariably falls on bandwidth scarcity. Is it really a bandwidth issue or are there other pressing issues? An application delivery network is the answ read more
UTM Systems for Enterprise Security Debated
Information Security Resources | October 13th 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest I rarely fall prey to flame bait. Usually I can safely ignore the rabid attacks and obviously self-interested positions taken by bloggers who work for IT security vendors. But this blog post fro read more
Software Defects Still Key Factor in Data Loss
Information Security Resources | October 7th 2009 by Anthony M. Freed
By Danny Lieberman, Security Expert and Founder of Software Associates A recent article on Internet Evolution written by Gideon Lenkey quotes the SANS Institute: “application software is a major vulnerability for enterprises“. The root cause of a read more
Strategies for Secure Storage Initiatives
Information Security Resources | October 5th 2009 by Anthony M. Freed
From the CTO Forum Team One of the most common mistakes organizations make when architecting a data loss prevention strategy at the storage level is to treat all information the same. Regulatory compliance requirements and the threat of having to pub read more
Privacy and Security Top Cloud Concerns
Information Security Resources | September 29th 2009 by Anthony M. Freed
By Satish Das of the CTO Forum Team Cloud computing is a rage today. You throw up a discussion on the technology, and it clicks with the fraternity. Everybody has an opinion on it. In my circle, people think cloud computing is an easier and e read more
Industry Should Share Data Loss Information
Information Security Resources | September 23rd 2009 by Anthony M. Freed
By Danny Lieberman, Security Expert and Founder of Software Associates People and their employers are unwilling to discuss the details of security events that happened, their security vulnerabilities, the damage in dollars was actually caused, how read more
The Future of Enterprise and Web 2.0
Information Security Resources | September 21st 2009 by Anthony M. Freed
From the CTO Forum Team Web 2.0 evangelist Stowe Boyd shares his views on the myths, realities and future of web 2.0 and enterprise: Crowd sourcing innovation - drawing on the smarts distributed across the company and outside in the user community - read more
Should Cyber Defense Go On the Offensive?
Information Security Resources | September 20th 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest Federal Agencies and the Defense Department have inadequate cyber defenses, but the course of action should be to beef those defenses up, not to resort to cyber attacks as some sort of deterren read more
SUPERAntiSpyware Issues Online Safe Scan
Information Security Resources | September 17th 2009 by Anthony M. Freed
From Mike Duncan, Director of Business Development at SUPERAntiSpyware SUPERAntiSpyware.com, a Pacific Northwest developer of state-of-the-art anti-spyware solutions, has released SUPERAntiSpyware Online Safe Scan, a powerful new tool in the fight a read more
Fragmentation of Knowledge Spurs Breaches
Information Security Resources | September 15th 2009 by Anthony M. Freed
By Danny Lieberman, Security Expert and Founder of Software Associates It’s almost a cliche to say that the security and compliance industry has done a poor job in preventing data breaches of over 245 million personal records in the past 5 years. read more
Information Security in a Post 9-11 World
Information Security Resources | September 11th 2009 by Anthony M. Freed
By Danny Lieberman, Security Expert and Founder of Software Associates This is the 8th anniversary of the Al Queda attack on the US in New York on 9/11/2001. The world today is more connected, more always-on, more accessible…and more hostile. Ther read more
Identifying and Countering the Insider Threat
Information Security Resources | September 9th 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest Anyone within an organization could have the motivation, access to resources, and the tools to steal information, or even destroy critical resources. While often overlooked, the insider threat read more
Network Admission Control’s Swan Song
Information Security Resources | August 31st 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest With the perspective of six years of data breaches, the rise of cyber crime, phishing, identity theft, and information warfare - it seems laughable that the big issue of employees bringing malw read more
Cyber Security Awareness Month is Pointless
Information Security Resources | August 19th 2009 by Anthony M. Freed
By Richard Stiennon, Chief Research Analyst, IT-Harvest Cyber Security Awareness Month is a waste of time, energy, and tax payer money. All of which could be spent on improving security within the Federal government. They are the ones who are gettin read more

Subscribe To