| Title | Date Added | Company | |
|---|---|---|---|
![]() |
Addressing IT Risks of Software Applications: A Risk Management Strategy | 26/03/08 | Symantec |
| As companies increasingly depend on software applications to enhance operations, the business impact of a broad range of IT risks concurrently rises. This whitepaper describes an IT risk management strategy for applications. Key aspects of this strategy include developing an awareness of various types of IT risks related to applications, quantifying the potential business impacts of application-related IT risks, and building an institutional capability to manage this IT risk. The paper then outlines how Symantecs advisory consultants support organizations to address their IT risk management needs for applications. | sponsored by![]() |
||
![]() |
The Importance of Application Security | 26/03/08 | Symantec |
| Application security has been a growing discipline in the IT world for about a decade. Not long ago, knowledge about securing applications came from a select few independent researchers, and resources for implementation were scarce. Through the years, more and more resources have become available as security expertise and toolsets have found their way to a wider population of technologists. Over the past five years, general knowledge of application security criteria has widened, making it rare that applications developers do not consider basic security aspects such as authentication and access control, among others. | sponsored by![]() |
||
![]() |
Firewall Policy Modeling, Analysis and Simulation: A Survey | 2008-05-09 | Crocodile Group |
| Computer firewalls are widely used for security policy enforcement and access control. Current firewalls use various processing models and are configured using their own policy description languages. This paper will try to survey research e orts in the area of formalization of firewall operational semantics and policy description languages and applications of such formal models and languages for firewall simulation, policy optimization, detection of configuration errors and enterprise security policy compliance testing.
Tags: Intrusion - Tampering, Security Administration |
|||
![]() |
Build Applications That Protect and Control Content No Matter Where It Resides | 2008-05-07 | EMC |
| Customers require robust solutions; content control, protection, and security are among their top priorities. Because most high-cost security breaches are traced to people sending confidential material beyond corporate boundaries, the question is: How will the applications protect customer content once it moves outside the company walls? One can offer his/her customers the greatest protection through a content-centric security approach built around EMC Information Rights Management (IRM) technology. The attendee of this webcast will learn how to enhance the applications with information rights management.
Tags: Security Administration |
|||
![]() |
Best Practices: Use of Web Application Firewalls | 2008-05-01 | OWASP |
| Web applications of all kinds, whether online shops or partner portals, have in recent years increasingly become the target of hacker attacks. The attackers are using methods which are specifically aimed at exploiting potential weak spots in the web application software itself - and this is why they are not detected, or are not detected with sufficient accuracy, by traditional IT security systems such as network firewalls or IDS/IPS systems. OWASP develops tools and best practices to support developers, project managers and security testers in the development and operation of secure web applications.
Tags: Intrusion - Tampering, Security Administration |
|||
![]() |
Using Symark PowerBroker to Enrich Your Organization's RBAC Model | 2008-05-01 | Symark Software |
| One of the most challenging problems in managing large networks is the complexity of security administration. Role-based access control has become the predominant model for advanced access control because it reduces the complexity and cost of security administration. This white paper examines how and why role-based access control evolved and how to implement privileged role-based access control.
Tags: Software Development Tools, Security Administration, Software Development Tools, Intrusion - Tampering, LAN - WAN, IT Infrastructure, Security Administration |
|||
![]() |
The Future of Branch Protection: Real-Time Connected Security | 2008-04-01 | LSI |
| Today, managed network security services represent less than one percent of the overall security equipment and services market. The convergence of a broad spectrum of security technologies including IT security, surveillance, alarm monitoring, biometrics, access control and response, RFID-based article surveillance, and homeland security, creates new opportunities for intelligent, real-time connected security capabilities. The ultimate goal of real-time connected security is to use all available data sources in real-time to detect and respond appropriately to security threats or abnormal situations. This paper addresses the exciting new innovations at the silicon, software, and system level that are required to make this happen and the innovations that LSI is contributing to the market.
Tags: Security Administration, Security Administration |
|||
![]() |
New Frontiers for Threat Processing | 2008-04-01 | LSI |
| More than ever before, the threats of intrusion and data disruption represent clear dangers to enterprises of all sizes. Threats are hiding in ever growing traffic volumes and high speed links are already allowing worms to spread worldwide in less than 30 minutes. Consider, then, the evolving role of the organization tasked with preventing these attacks - and the changes that must take place in traditional threat assessment and management products to give them a fighting chance. This paper examines these threats and the remarkable capabilities that are now in place to thwart them.
Tags: Security Administration, Security Administration |
|||
![]() |
Next-Generation Real Time Web Filtering | 2008-04-01 | Bloxx |
| Read this Butler Group Technology Audit to learn how the Bloxx Tru-View Technology (TVT) solution helps reduce the risks to business and its users from inappropriate Internet use and as a result helps enhance employee productivity. Functionally, the company's patent-pending approach to filtering out risky activities utilizes all of the conventional components of Web Filtering and then significantly begins its real work by adding layers of analytical intelligence that takes content identification up to a new level. In Butler Group's opinion, TVT brings a new functional perspective to the Web protection marketplace.
Tags: Security Administration, Security Administration, Internet and Web |
|||
![]() |
The Impact of Messaging and Web Threats | 2008-04-01 | Sunbelt Software |
| Messaging, internal and Web-based threats are increasing in number and severity. The risks to organizations large and small are not theoretical - there are real problems that users and their employers face if they do not establish adequate defenses against the growing variety of malware, exploits and other threats that are directed against them. Read this Osterman Research paper to learn how organizations must implement a layered defensive strategy to protect against all types of threats and how Sunbelt Software can help.
Tags: Intrusion - Tampering, Security Administration, Intrusion - Tampering, Security Administration, Intrusion - Tampering |
|||
![]() |
LANDesk Software Case Study: Gwinnett Hospital System | 2008-03-18 | LANDesk Software |
| Gwinnett Hospital System is a not-for-profit healthcare network. A few years ago, Gwinnett Hospital System struggled to manage its infrastructure of desktops, servers, handhelds and laptops without the benefit of a complete management solution. The system's existing solution was incomplete and rapidly depreciating in the value it returned because it wasn't being maintained or updated. Gwinnett Hospital System did an extensive evaluation when looking for a systems management Solution. At the end of its evaluation, Gwinnett Hospital System chose LANDesk solutions.
Tags: Security Administration, Security Administration |
|||
![]() |
Cisco Security Agent Antivirus | 2008-03-01 | Cisco Systems |
| Signature-based antivirus products have long been the mainstay of endpoint security. Although new forms of malware require behavior-based protection for effective day-zero protection, antivirus continues to be a valuable component of endpoint protection strategies. The primary value of signature-based antivirus is providing confidence that malware can be removed from the endpoint, since the malware was identified by name. Although behavior-based controls are the primary means of stopping malware attacks on endpoints, signature-based antivirus plays an important role in identifying the malware, allowing a high level of confidence in malware removal.
Tags: Intrusion - Tampering, Security Administration |
Overwhelmed by consolidation? Take it in steps.
Learn the 5 steps to data center consolidation - download the whitepaper now.
Choose a career with Accenture in Singapore
A dynamic job opportunity where technology and business intersect
Choose a career with Accenture in Malaysia
A dynamic job opportunity where technology and business intersect
NetIQ DRA live demonstration:
Learn how to improve your efficiency when administering Active Directory
The Roots for a Greener World
Discover Hitachi's Environmental Vision 2025 and featured Eco-Products
The Desktop Virtualization Revolution is here!
Find our more with Citrix Simplicity is Power
Lack of visibility into network issues and performance?
Find out today. Download SolarWinds FREE 30-Day Trial Software here.
IT Salary & Skills Report 2009
Join activeTechPros for free access to the report