http://www.csoonline.com.au CSO Online Data Security Briefing en-us Copyright 2008, IDG Communications, for personal use only, not for redistribution without permission. Wed, 25 Jun 2008 11:40:05 +1000 60 http://www.csoonline.com.au/index.php?id=2145069651&rid=-302 When risk is present it calls for treatment, and security is a never-ending process... right? Yes, but as a security professional, it's easy to become focused on the hard problems (download PDF) of security -- falling into the arms race for more, more, more security controls -- and lose sight of the impact of the controls themselves. Wed, 25 Jun 2008 10:34:19 +1000 http://www.csoonline.com.au/index.php?id=692810722&rid=-302 For those of us who make our living behind a keyboard in IT, it's hard to imagine a more time-tested vulnerability than the end-user. Armed with network access, these IT viruses wreak havoc nearly everywhere you look -- havoc borne of tech idiocy. Tue, 17 Jun 2008 09:05:55 +1000 http://www.csoonline.com.au/index.php?id=798993834&rid=-302 Two years ago, GreenBorder, one of the early "sandbox" browsers, received mighty applause from Wall Street Journal tech guru Walt Mossberg. The sandbox browser -- basically, a browser running in a virtual container -- promised to keep nasty code from spilling into a computer's operating system and wreaking havoc. Tue, 10 Jun 2008 10:49:20 +1000 http://www.csoonline.com.au/index.php?id=619393554&rid=-302 Security issues often seem to smolder more than burn, but these six are certainly capable of lighting a fire under IT professionals at a moment's notice. Handle with care. Fri, 06 Jun 2008 09:56:44 +1000 http://www.csoonline.com.au/index.php?id=477147527&rid=-302 Theft of laptops and other mobile devices is spiraling, and the consequences -- financial and other -- are getting increasingly dire. Thu, 05 Jun 2008 07:55:35 +1000 http://www.csoonline.com.au/index.php?id=571337054&rid=-302 A wiry young man with his head shaved and wearing a tank top points a handgun straight at the camera in a disturbing YouTube video. The man wears what appears to be a wedding ring, and he gazes vacantly away from the viewer. Mon, 02 Jun 2008 09:18:19 +1000 http://www.csoonline.com.au/index.php?id=529913840&rid=-302 In January, Kevin Kelly wrote an essay entitled "Better Than Free" that explained which concepts held value on the Internet. This generated a lot of interest, mostly around the question of how best to make money out of these concepts. As a career security guy, I found myself wondering how on earth my field will respond -- how does security need to adapt to support business models based on these values? When we're used to locking everything down, how do we respond when people start calling for openness? Mon, 02 Jun 2008 08:07:57 +1000 http://www.csoonline.com.au/index.php?id=1238236508&rid=-302 To use an Internet-connected computer is to be insecure and place your privacy in danger. Spyware, viruses, Trojans and assorted malware are everywhere on the Net, trying to hop onto your PC and cause damage. Snoopers want to get at your personal information for nefarious purposes, such as identity theft. Thu, 29 May 2008 09:42:31 +1000 http://www.csoonline.com.au/index.php?id=1170079144&rid=-302 Security assessment and deep testing don't require a big budget. Some of most effective security tools are free, and are commonly used by professional consultants, private industry and government security practitioners. Here are a few to start with. Wed, 28 May 2008 09:04:38 +1000 http://www.csoonline.com.au/index.php?id=879171053&rid=-302 Whether you hire outside consultants or do the testing yourself, here are some tips for making sure your time and money are well spent. Wed, 28 May 2008 08:57:20 +1000