Network Security: Archive: May 2003

Security Disclosure Debate Reignites

Multiple vulnerabilities remain unpatched in the Sun ONE Application Server, rekindling the debate over responsible disclosure of security warnings.

Report: CIA Avoiding Creative IT Use

Intelligence agency's own think tank concludes CIA considers technology a threat, not a benefit.

'Good Enough' Security: Network Security on a Shoestring Budget

In an environment where most of us are continually squeezed for time, resources, and funds, how can we possibly hope to fix and prevent all of our network's security problems? Beth Cohen presents principles of 'good enough' computer security that might not prevent a massive targeted attack, but that will prevent 90% of your problems while keeping your finance department happy and your job secure.

Report: Insiders Wreaking Havoc on Corporate Security

By 2005, 60 percent of the costs associated with corporate security breaches will be financially or politically motivated, according to a new report from Gartner Inc. And most of those financial losses will be at the hands of insiders.

OMB Says Fed Security Systems Improving

Agencies making progress in identifying vulnerabilities but increased reviews have also revealed new threats.

OASIS Wants to Classify Web Security

The e-business standards group takes aim at a gap that often exists between intrusion detection tools and a firewall.

Problematic Windows XP Update Pulled

Microsoft withdrew a Windows XP software update after thousands of users complained the patch was blocking Internet connectivity.

Building Firewalls with iptables, Part 1

Exposing any system, no matter how briefly, to an untrusted network is suicidal. A firewall is absolutely vital, and fortunately, the Linux world offers us an excellent free firewall utility in netfilter/iptables.

Author Teaches the Zen of Security Maintenance

In his new book, a security engineer turned guru, is telling IT managers to step back from the deluge of authentication tools, encryption and firewalls. He says it's time to turn to the philosophy of security.

PayPal Scammers Getting Bolder, Better

Payment facilitator for eBay looks for new ways to help regulators fight fraud attempts by scammers that hijack the PayPal brand.

The Rise of Rogue Wi-Fi Access Points

Rogue Wi-Fi access points within enterprises are becoming an increasing security risk, according to Richard A. Clarke, security expert and senior White House advisor to three previous U.S. presidents.

Identity Theft Losses Expected to Hit $2 Trillion by 2005

The financial damage caused by online identity theft is not only mounting, it's exploding at a growth rate of about 300 percent a year, according to Aberdeen Group, a Boston-based industry analyst firm.

Merrill Turns to Verisign for Network Security

With network intrusion threats rising, the brokerage house turns to Verisign for managed security services worldwide.

Spammer Urges Congress to Pass Anti-Spam Law

Unsolicited bulk e-mailer says leaving the matter to carriers and ISPs will drive spammers offshore and beyond reach of U.S. laws.

Consumers Still Wary of Online Security

In the wake of the high-profile security vulnerability discovered in Microsoft's Passport service earlier this month, MasterCard International says U.S. consumers cite the need to enhance security and privacy features before they spend online.

Gartner: MS Passport IDs Can't be Trusted

Two security analysts have urged financial institutions and enterprise customers to break all .NET Passport connections until Microsoft can prove its security is adequate.

Just Another Worm on the IRC

A group of IRC operators has taken control of a malicious Geocities Web page which was being used by the 'Fizzer' virus to update itself; Security experts say the worm seems to be under control.

DoS Hole Found in Linux Kernel

A security vulnerability exists in the way the open-source Linux Kernel handles caching of routing information.

RSA Preaches Web Services Security

The maker of ID and access managment software looks to boost business by helping customers limit the risk of deploying XML Web services.

DNSSEC: Security for Essential Network Services

DNS has been a major security hole since it was first deployed, but until recently, not much had been done to patch the network service's security vulnerabilities. Beth Cohen reveals the largest DNS security holes, explores how you can protect your network from them, and introduces the IETF's new DNSSEC standard designed to prevent potential future catastrophic attack.

'Fizzer' Worm Squirms Across the Web

Anti-virus experts are monitoring a new mass-mailing worm spreading itself via e-mail address books and the Kazaa P2P network.

Time to Get Tough About Email Security

A recent META Group study underscores what many of us already knew: email is now a more important business communications tool than the telephone. If that's the case, then email security must be an increasingly important priority.

Security Certifications: Qualifying Yourself for System Defense

What security certifications are available? Which certifications are right for your career? Security is one of the fastest growing areas of IT certification, and you have choices between general security certification tracks and security certifications centered on specific products.