Network Security: Archive: October 2005

Companies Bid for Authentication Compliance Work

Financial institutions are getting started on security compliance regulations.

Finding the Right Mix for Information Assurance

Columnist Penny Klein says there are three key areas to information assurance. If your company isn't focused on all three, you're not really secured.

Gambling, Porn in Workplace Breed Spyware

Some security experts say 50 percent of spyware on corporate networks is caused by workers visiting pornographic and gambling sites while on the job. What should you do?

Snort's Intrusion System Blows a Hole

The open source intrusion detection system has a serious security vulnerability.

Email Security: How Much is Enough?

Corporate networks are under attack from email threats and viruses. To protect the network, we layer security, but how many layers are enough? How much is too little?

Oracle Fixes 88 Bugs with Giant Patch

Oracle released a massive patch on Tuesday that fixes a long list of bugs in many of its software products.

'Critical' Windows Patch Causing Trouble

Some administrators who tinkered with their operating systems to better protect their PCs had an unwelcome surprise in last week's patch release from Microsoft.

Adding Biometrics to Enterprise Security Arsenal

Are biometrics ready for widespread deployment? What are the pros and cons of going with this security weapon?

In Search of Authentication's Holy Grail

Columnist Ray Everett-Church looks ahead to the day every checking account, credit card and coffee honor card comes with its own authentication gizmo. How do we avoid ending up in that mess?

Red Hat Tests Security Skills

The Linux distributor launches a performance-based security cert for the OS.

Mobile Workers Cut Gaping Hole in Security

As a growing army of mobile workers hit the road with their trusty laptops, few of them are properly secured. And that could mean big trouble for the corporate network... and critical corporate data.

Microsoft Addresses Tardy Patch

The company releases three critical, four important and two moderate security bulletins, including one held from last month.

Fine Line Between a White Hat and Black Hat

Columnist Linda LeBlanc says while she's not really a black hat, she can't really call herself a white hat, either. To be a security professional, sometimes you need to be a grey hat.

Microsoft to Patch 9 on Tuesday

Is XP SP3 in the wings?

Targeted Virus Attacks Replace Sweeping Assaults

Massive virus attacks that clobber the Internet are giving way to pin-pointed assaults that quietly go after specific companies and agencies.

Software Bugs: To Disclose or Not to Disclose

Columnist Ken van Wyk takes on the question of whether to disclose software defects. What's best for the industry? Who gets hurt?

Phishers Use Photos for Catch

Scammers using authentic sites for dirty work.