Member Login

E-mail:    Password:  




 TitleDate AddedCompany
whitepaper SWAN: A Secure Wireless LAN Architecture2006-06-29 02:19:12 University at Buffalo
  Existing Wireless LAN (WLAN) security schemes are few and product specific. While there exist some schemes for Information Integrity related problems, there are few standard solutions for Quality of Service and Network Health Maintenance related problems in Wireless Networks. This paper proposes an architecture model for Secure WLANs that is generic in its design, so that it can easily be incorporated into existing systems at low cost, thus making it feasible and easy to implement. The Secure Wireless LAN (SWAN) Architecture first describes an Admission Control Mechanism and deals with Intrusion Detection, Malicious Behavior Detection, and Maintaining Quality of Service and Network Health.   
whitepaper Best of Breed vs. Suite Anti-spyware: What's Best for You?2006-07-31 16:33:45 Webroot Software
  This paper offers a compelling first-person account by noted security expert Ira Winkler of a penetration test he devised to demonstrate how hackers could theoretically compromise the highly sensitive Supervisory Control and Data Acquisition (SCADA) systems that secure nuclear reactors. Winkler, who is President of the Internet Security Advisors Group and has been called a "Modern Day James Bond" by the media, describes how his plan lured utility company employees to a Web site that downloaded spyware onto their systems—spyware that ultimately allowed Winkler's team to control the SCADA system and hence a nuclear reactor! Winker's paper points up the critical need for deploying anti-spyware software and builds a strong case for choosing a best of breed, or standalone, anti-spyware solution rather than a suite-based product.   
whitepaper Kevin Mitnick on Malware: Mitigating Malware in Userland2006-07-16 18:35:20 AppSense
  If the security of your corporate data isn't top of mind, it will be by the time you finish this attention-grabbing white paper by Kevin Mitnick. The author is the once-vilified hacker who served four years in a federal prison in the 1980s for breaking into corporate computers; since "going legit," Mitnick has transformed himself into one of the most sought-after security consultants in the world. He explains how malware is being used to steal corporate data and describes a number of real-world data thefts that illustrate all too clearly the extent to which hackers will go to steal your secrets and sell them to your competitors. Sponsored by AppSense, this white paper is not to be missed. Download it today!   
whitepaper "Going Up, Going Down!" - A Review of Quarter 2/20062006-09-15 10:47:40 MessageLabs
  Welcome to the June Edition of the MessageLabs Intelligence monthly report. This report provides the latest threat trends for June 2006, as well as a quarterly retrospective, to keep you informed regarding the ongoing fight against viruses, spam and other unwelcome content.   
whitepaper Model-Based Analysis of Two Fighting Worms2006-06-14 01:00:26 Kent State University
  Self-replicating malicious codes (worms) are striking the Internet vigorously. A particularly sophisticated recent introduction is the "Killer" worm (also called counter-worm or "Predator" worm). The goal of this research is to explore the interaction dynamics between a worm (prey) and an antagonistic worm (predator), using mathematical modeling. This paper models several interesting combat scenarios of two fighting worms, including the effect of antivirus on the system behavior. There are few novel findings of the enhanced model, such as the prediction of oscillatory behavior of interacting worm's population conforming to existing biological systems.   
whitepaper Outbound Email and Content Security in Today's Enterprise, 20062006-08-28 13:07:06 Proofpoint
  Data protection continues to be a hot topic as large-scale breaches of personal information come to light and as the regulatory environment becomes more sophisticated. The convenience and ubiquity of email as a business communications tool has exposed enterprises to a wide variety of new risks associated with outbound email.

How concerned are companies about the content of email leaving their organizations? How do companies manage the legal and financial risks associated with outbound email?

Proofpoint commissioned Forrester Consulting to field an online survey of email decision makers at large US and UK enterprises. Respondents were asked about their concerns, priorities and plans related to the content of email leaving their organizations.

Read Proofpoint's 3rd annual study which summarizes the findings of this survey, including surprising statistics about how large companies address outbound messaging and content security issues. 		  
whitepaper Complying with the HIPAA Security Rule: Protecting ePHI in Email, HTTP, and FTP Transmissions2006-05-01 Proofpoint
  While compliance dates for various HIPAA rules have already passed, many healthcare-related organizations are still working to achieve full compliance with HIPAA.

This whitepaper describes how organizations can maintain the privacy and security of electronic protected health information (ePHI) over e-communications channels (including SMTP email, HTTP, and FTP protocols. Learn why an effective solution should have the ability to accurately differentiate between ePHI and "de-identified" health information, in order to properly enforce privacy policies and achieve or improve compliance with HIPAA guidelines.

Download this whitepaper from Proofpoint, Inc. to learn:
  • Which components of the HIPAA Security, EDI and Privacy rule impact email and other forms of e-communication.
  • How Proofpoint's Healthcare Privacy Solution applies to the HIPAA Security, EDI and Privacy rules.
   
whitepaper ESG Lab Validation Report: Evaluating the MessageLabs E-mail Archiving Service2006-09-20 12:07:18 MessageLabs
  This report from Enterprise Strategy Group (ESG) presents the findings of tests it conducted to validate the MessageLabs managed e-mail archiving service. The paper outlines how the solution works and details the methods that were used to evaluate the MessageLabs service on these key criteria:

  • Policy-driven ease of use
  • Security and privacy
  • Compliance-enabling capability
  • Scalability and reliability
  • Ease of deployment
  • Managed service infrastructure

If you're actively seeking an e-mail archiving solution, you'll especially appreciate the "Why This Matters" sidebar that concludes each respective section of the paper where the features and functions listed above are discussed.

  
whitepaper Anatomy of Recent DNS Reflector Attacks From the Victim and Reflector Point of View2006-08-04 01:00:11 VeriSign
  Although the recent European Union (EU) expansion offers many business opportunities for companies not only within the region but also around the world, it requires careful planning to protect a company's digital brand identity in this territory. This paper provides an overview of domain name portfolio protection planning in the EU and explores some of the legal issues that trademark holders face when registering and using domain names in the EU. Understanding these issues can help companies protect their intellectual property and avoid legal pitfalls.   
whitepaper Cisco IOS IPS Deployment Guide2006-05-04 03:52:33 Cisco Systems
  In today's business environment, network intruders and attackers can come from both outside and inside the network. They can launch Denial-of-Service (DoS) attacks or Distributed Denial-of-Service (DDoS) attacks; attack Internet connections; and exploit network and host vulnerabilities. There is often no time to wait for human intervention - the network itself must possess the intelligence to instantaneously recognize and mitigate these attacks, threats, exploits, worms, and viruses. Cisco IOS Software Intrusion Prevention System (Cisco IOS IPS), with inline intrusion capabilities, is the first system in the industry to provide an inline, deep-packet-inspection-based IPS solution that helps enable Cisco routers to effectively mitigate a wide range of network attacks.