Use tcpdump for traffic analysis
The tcpdump tool is powerful and flexible, but compared with graphical tools like Wireshark it may appear to be a dark art. It really isn't that difficult to use once you pick up the basics.
Strong password management for the mobile user
Truly strong passwords are necessary to protect our information, but they can be a pain to generate, manage, and access globally. Check out two free online tools that can help.
Find more stories in: Mobile, PC security, Authentication and encryption, Data security, Security applications/toolsFive easy ways to compromise your own security
Even if you've effectively secured your IT resources against malicious security crackers, there could be the danger that someone could accidentally compromise security.
Find more stories in: SecurityWhat is the CIA Triad?
The CIA Triad is used to identify problem areas and necessary solutions for information security--here's a look at its strengths and weaknesses.
Find more stories in: Data security, Security Management, Security implementation/standards, IT GovernanceVulnerability counting can be misleading
Counting vulnerability reports is as likely to lead you to the wrong conclusion as to the right one, as this hypothetical example shows.
Find more stories in: Network security, Security ManagementCraft your own Internet usage policy
Having clear guidelines will help employees better protect company assets when they are on the network.
Find more stories in: Service level management, IT Governance, Security Management, Data ManagementVirtualBox provides security that's easy to setup, maintain for free
Using Sun Microsystems’ VirtualBox, Linux security tools and threat testing can be executed on a Windows platform.
Find more stories in: Linux, SecurityHow should we handle security notifications?
As the purpose of breach notification is damage control, laws on this should be regarded as a means to protect people by giving them the opportunity to take steps in their own defense.
Find more stories in: Security, SoftwareSecurity alarmism helps the bad guys win
Enterprises and individuals need to promote security awareness, but suppress hypersensitivity to superficial signs of security threats.
Find more stories in: Security, Risk ManagementMaking encryption popular
Find out what it takes to instill the importance of good security practice to as wide an audience as possible.
Find more stories in: Authentication and encryption, Data security, Security Management, Security implementation/standardsWhat does 'insecure memory' mean?
TechRepublic's Chad Perrin sheds some light on what "insecure memory" actually refers to, and answers other perplexing questions related to it.
Find more stories in: Authentication and encryption, Data security, LinuxHas security grown beyond DIY?
Security is not something that should be about getting things done for you to protect you from some nebulous "them" who threaten your resources. The best security is independent security.
Find more stories in: Security Management, PC security, Data security, Security applications/tools, Business securityClose unneeded ports on Unix/Linux systems
Shutting down unnecessary services, and closing their associated network ports, lowers risks. Find out how to do that on Unix and Linux systems.
Find more stories in: Linux, Data security, UNIXPrevent identity theft by avoiding these seven common mistakes
Steering clear of these practices will help prevent personally identifiable information from landing in the wrong hands.
Find more stories in: Security, Data ManagementList open ports and listening services
It's almost impossible to provide a comprehensive list of services to turn off to minimize the security threat, but having a tool for listing active services and open ports is a good start to a more secure network.
Find more stories in: Server platforms, Network security, Security ManagementUse sSMTP to send e-mail simply and securely
You can use sSMTP on Unix and Linux systems with a secure encrypted connection to your SMTP server.
Find more stories in: Security, Software, Server platformsUse getmail to get e-mail simply and securely
Microsoft Outlook is such a huge, integrated collection of functionality that it can't properly be called a mere mail client any longer.
Find more stories in: Security, E-mail clientsDRM and unintended consequences
DRM "protects" content by encrypting it and preventing the user from accessing it in unauthorized ways--including copying it.
Find more stories in: Authentication and encryptionObscurity is not security
Open source software provides for a development process that is more likely to result in secure software.
Find more stories in: Software, SecurityEnsure basic Web site security with this checklist
A security procedures checklist is a useful tool for affecting workplace security policies.
Find more stories in: Security, Web sitesDisable NetBIOS and SMB to protect public Web servers
Disabling the two functions means that if an attacker manages to compromise your Web server, he or she won' be able to use them to further explore and exploit your network.
Find more stories in: Data security, Network security, Security Management
Test Drive Now!
» Blades for mission-critical operations
