Click here

Security Best Practices: Archive: February 2004 

Lawmakers Launch New Anti-Spyware Bill

Proposed legislation bars marketers from secretly installing invasive software.

Government Groups Tout Single Sign-On Version

GSA and OASIS demonstrate Single Sign-On for a federated identity, which some say is years ahead of Liberty or WS-Federated.

AntiOnline Spotlight: SP2 Tackles Windows Security

Months before its official release, AO members weigh in on SP2's security enhancements.

The Net Has An 'Insecurity' Complex

RSA's second annual assessment of online security leaves little doubt that corporations have a long way to go.

Can Market Forces Secure the Internet?

So far, industry hasn't succeeded in creating secure software or networks. Is it time for the government to step in?

Worms Continue to Wriggle, Wreak Havoc

'Zero-day' exploits and new styles of viruses send security firms scrambling to patch the latest holes in the network.

Microsoft Proposes Caller ID for E-Mail

Bill Gates says the 'scourge' of the inbox can be thwarted with a combination of software, hardware and industry participation.

A Baby Step For RFID Privacy

RSA Security makes a move toward letting consumers control their radio frequency identities.

Storage Security: Getting Beyond M&M SANs

Like the candy-coated treats, SANs are an irresistible lure to criminals that can't wait to get to the soft, sweet center.

Security Firms Forge 'Cyber' Alliance

A dozen software, hardware, and services companies will lobby for public policy and standards, but without the help of Microsoft.

A Bio Approach to Network Security

HP uses the human immune system as the model for a new security offering.

Sun: Security is a Lifestyle Choice

The Java Desktop System is first to get Sun's new super-security and authentication treatment, which puts the OS up against Microsoft's Windows platform.

Viruses Blamed for Expected 80% Spam Saturation by Q3

Spam is expected to make up 80 percent of all email by the third-quarter of this year. And analysts blame it largely on the open proxies created by viruses, like Sobig and MyDoom.

Will Lax Security Trip IP Telephony?

A new research report from META Group suggests that it could.

Gates Makes a Show of Security

UPDATE: At the RSA security conference, Microsoft's chief software architect stands and delivers an update on the company's software security efforts.

Switches Team for Security

As the wireless LAN switch market heats up, many vendors are looking to partners to provide the little extra something they lack: high security.

Security Forces to Show Unified Front

Homeland Security officials will join experts from Microsoft and other IT firms in San Francisco next week to address the onslaught of malicious attacks.

Linux Kernel Flaws Uncovered

Malicious attackers could gain full super-user privileges, according to a security research firm.

AntiOnline Spotlight: Footprinting with Host

Learn how the venerable host command can reveal more about your network than you think, not to mention what hackers probably already know.

Programmers on Windows Code: Eyes Wide Shut

A look at the leaked chunks of Windows 2000 and NT might be tempting, but many programmers don't dare to even peek at Microsoft's naked code.

Microsoft's Do Not Open Letter

The world's largest software company moves to defend its copyright on leaked Windows code.

Flurry of Worms Hits Companies Already on Guard

A handful of smaller worms are loose in the wild, causing a flurry of problems as security and IT managers gear up for what could be a major virus attack.

AOL, EarthLink File Lawsuits Against Spammers

With the federal Can Spam Act so far proving ineffective, ISPs are pursuing aggressive civil actions.

Deflecting Assaults on Privacy

Source code exposed, customer records set free... Browser hijackers and spyware are responsible for these headlines and more. Discover the tools that help keep users, and the networks they reside on, from leaking confidential data.

Blaster Type Virus Attack Called 'Imminent'

Exploit code for 'critical' Windows ASN.1 flaw could lead to major network disruption.

  • Microsoft Patches 'Critical' ASN.1 Flaw
  • Perceptions of Trust

    Research reveals that a distinct gap exists between U.S. businesses and consumers regarding issues of privacy, trust, and how personal data is handled.

    Experts: Don't Panic over Windows Leak

    Windows code leaks heighten security concerns in the IT industry but security experts say threats of zero day exploits are a widespread misconception.

  • Mainsoft Eyed as Windows Source Code Leak
  • A Windows Source Code Feast Online

  • MyDoom Ends but Open Ports Attracting Mutants

    Microsoft releases virus removal tool but unpatched drone machines are still a major threat.

    New Worm Camouflages MyDoom Writer's Trail

    The new DoomJuice worm -- aka, MyDoom-C -- that hit the wild Monday is the equivalent of digital camouflage. It's believed that the MyDoom author created the new worm to mask his trail and stymie potential prosecutors.

    Pushing Policies at Hotspots

    While enforcement of network security polices is growing to be the norm on enterprise networks, it hasn't been the case for remote and mobile workers. Until now.

    The Backup Conundrum: More Data in Less Time, Part 2

    Backing up ever-growing amounts of data quickly and efficiently while simultaneously seeking to reduce the resources used continues to pose a conundrum for many IT organizations. Leslie Wood explores an array of alternatives designed to help you back up more data in less time.

    Stripped-Down MyDoom Hits Microsoft.... Again

    A new variant of the virulent MyDoom worm has been found in the wild, launching what one analyst fears may be a vicious attack against Microsoft Corp.'s Web site.

    Could National Security Concerns Slow VoIP?

    FEATURE The FBI's concern about wiretap capability of Internet telephony is complicating the FCC's desire to limit regulation of the technology.

    Defense Dept. Shelves Online Voting

    UPDATE: An author of the report recommending an end to e-voting overseas praises the DoD for its tough decision.

    AntiOnline Spotlight: Held Hostage

    What if your Web business were held at virtual gunpoint? AO members discuss coping with demands of payment under the threat of getting DDoSed into oblivion.

    New Web Services Security Spec Under Way

    With security concerns looming in the industry, OASIS looks to facilitate the safe exchange of Web documents.

    Exploring Windows 2003 Security: Authorization Manager

    Windows Server 2003 offers an innovative way to provide access to a secure environment. In the latest installment of our security series, we look at Authorization Manager's roles-based approach to combining authorization with access control.

    The Deadly Duo: Spam and Viruses, January 2004

    E-mail inboxes groaned under the 60 percent spam volume, along with the most financially destructive worm the Internet has known.

    New Wi-Fi Security Spec Due Mid-Year

    The Wi-Fi Alliance plans to upgrade the security capabilities in WPA2, a new version of its Wi-Fi Protected Access (WPA) protocol.

    Major ISPs Ponder 'Postage' To Stem Spam

    Online giants like Microsoft and Yahoo! consider a small e-mail 'postage' fee to senders as a possible spam stopper.

    Virus Writing: Not Fun, Not Funny

    Whatever your feelings about SCO or Microsoft, MyDoom hurts thousands of other companies, the global economy and the Internet in general.

    MyDoom Leads Damaging January Attacks

    Racking up approximately $38.5 million in economic damages around the world, the virulent MyDoom worm easily took the top spot in January's list of worst viruses.

    The Pros & Cons of Ethical Hacking

    The use of ethical hackers to test for security vulnerabilities is as old as the IT hills. But, unless there are clear goals outlining why and to what extent your organization is engaging them, the outcome could be useless information -- or worse.

    SCO Shifts, Microsoft Braces for Next MyDoom

    UPDATE: Microsoft warns its users how to remove MyDoom.B from computers as the first DDoS attacks begin.

    Learning to Deal with Change and the Unknowns

    As companies push in new intrusion detection systems and patch-management policies, there's something that often gets overlooked. Change. And change can lead to the unknown. And if you're not thinking it through, it can lead to lots of problems.