Network Security: Archive: December 2002

High Court Grants Hollywood's Christmas Wish

Justice O'Connor issues temporary stay in jurisdictional wrangling over where programmer who allegedly posted code to de-scramble DVD encryption can be sued.

Using Neural Networks To Beat Hackers

By combining the behavioral and computer sciences, a Washington-based startup believes it has created the ultimate anti-hacker system.

Buffer Overruns Found in Real's Helix Server

Three security flaws found in RealNetworks new Helix Universal Server 9.0 are remedied.

White House Scrambles to Defuse Privacy Concerns

Bush's cybersecurity advisor Richard Clarke claims the proposed Internet monitoring system would be used only to track highly aggregated information on the overall health of the Internet.

Bush to Propose Internet Monitoring System

Windows XP, Winamp Security Flaws Patched

Beware the latest hacking tools: MP3 and WMA digital music files.

Study: Homeland Security to Spur Biometrics Growth

Research shows that government spending to integrate biometrics into border monitoring systems will push heady growth in the burgeoning sector.

Worm Spreads Without Help From Email, Web

The security software company F-Secure says it has found a worm in the wild that spreads not through email or via Web links, but through Windows shared folders.

CERT Warns of SSH Vulnerabilities

In severe cases, CERT warned that remote attackers could execute arbitrary code with the privileges of the Secure Shell process.

Cobalt RaQ 4 Security Flaw Detected

An exploit of this vulnerability is publicly available and affected server admins are urged to immediately apply fixes.

Report Confirms Massive Increases in Viruses, Spam

Probably you don't need anyone to tell you this, but the email security service provider MessageLabs confirms it anyway: email-borne computer viruses are on the rise, as is spam.

VeriSign Intros WS-Security Implementation, Toolkit

VeriSign unveils a free open source implementation and an integration toolkit to help companies add authentication, digital signatures, and encryption to their Web services.

Security: Batten Down the Hatches and Troll for Gotchas

Between telnet and Google, there's a lot you can learn about just how secure your organization's systems are. Carla Schroder covers some obscure gotchas you might want to fix, or at least show to your boss.

Sklyarov Takes Stand as ElcomSoft Begins Defense

Programmer says he knew program to bypass Adobe's eBooks encryption code might be illegal in U.S.

Sklyarov Admits to Targeting PDF Weaknesses

W3C Proposes XML Encryption, Decryption Specs

UPDATE: W3C issues proposals to standardize XML encryption and decryption, both vital to Web services security.

FCC Panel Weighs Security Practices

Representatives from telecom, cable, wireless, satellite and ISP industries review measures to protect nation's communications services from attack.

Microsoft Introduces New IE, Outlook Fixes

The software concern, after promising to cut back on the info relayed in its security warnings, issues a patch for a moderate IE flaw, as well as one for an Outlook vulnerability.

Security Spending Bucks Downward Trend

Despite a continued slow down in IT spending, a new study shows that network security spending is on the rise -- even cutting a large chunk out of the overall IT budget.

E-Commerce and the Warm Fuzzies

A virtual credit card number company cites a study showing that consumers spend a good deal more online when security concerns are allayed.

ISS Goes Public with Disclosure Policy

In the face of public criticisms over its handling of software security alerts, Internet Security Systems (ISS) goes public with its vulnerability disclosure guidelines.

Bugbear, Klez Continue to Infect Networks

Two new viruses raise their ugly heads while two known culprits top November's virus charts.