Security - eWeek

LATEST STORIES
BEST OF THE BLOGOSPHERE
eWEEK EDITORIAL CALENDAR


Security Solutions
Build a Successful Security Strategy
As enterprises enable remote workers, promote collaborative tools and increase interdependence on global business partners, security challenges grow. Get up to speed on effective strategies, best practices and tools to keep data, clients, servers and mobile devices safe from threats. Join us on Sept. 17 for this interactive Virtual Tradeshow as industry experts, authorities and your peers share the information you need to build a solid security foundation.
  Security Opinions
2008-10-11
They may not be real-world problems, but wildcard certificates have some definite theoretical problems. But they can be so much cheaper that users will buy them anyway.
2008-10-07
Have the facts behind the basic maxims of computer security changed in the last eight years? In fact, there has been progress, but the rules generally have stood the test of time.
2008-10-04
The offline nature of passport data makes it impossible to validate in any meaningful way. This weakness made it easy for hackers to devise systems for cloning and modifying passport RFID chips.
2008-09-30
McAfee bought Safeboot late last year. CheckPoint bought Pointsec. And now Sophos is buying Utimaco. With all these purchases, look for sophisticated encryption capabilities to be rolled into corporate client security suites over the next few years.
2008-09-25
Comcast's new plan, if it's executed as advertised, is unobjectionable and better for the company. Comcast's plan states if a user is using more than a certain percentage of either upstream or downstream data capacity when overall traffic reaches a certain level, then that user's traffic is shifted to a lower priority status.
2008-09-21
One of the real leaders in programming and technical IT believes that whitelisting has a big role to play in security. I wish I could be as enthusiastic.
2008-09-16
There are different standards for certainty in deleting data, and different methods of accomplishing them. If not done properly, there could be serious security and compliance ramifications.
2008-09-15
Even some very old lessons of secure programming turn out to be hard for developers to implement consistently.
2008-09-10
64-bit Windows is becoming more common and will eventually be the norm. Such transitions never go as smoothly as you'd like.
2008-09-08
Will McAfee's Artemis and similar technologies really improve security for end users?
2008-09-03
I wouldn't assume they'll be successful with it, but Google's got a lot of great ideas with their new browser—excuse me, application environment. Have they turned those ideas into good code?
2008-08-27
In an enterprise, privacy is good—in moderation. But new hyperprivacy features need IT's control.
2008-08-26
There has recently been an unfettered flow of advertising for malicious software on Google's AdWords networks. How come Google can't stop the malware?
2008-08-22
Just about the most serious breach of security possible at an OS vendor happened to this company. Red Hat is releasing updated OpenSSH packages to address the compromise of its internal systems.
2008-08-21
There’s more good than bad coming in the future of computing appliances.
2008-08-20
SSL pages with self-signed certificates are less trustworthy. But does Mozilla's Firefox go overboard with this issue? Making the Web "safe by default," Web browsers are suspicious of SSL Web sites (those that use an https:// prefix) that use certificates not signed by a trusted certificate authority, such as VeriSign, GlobalSign, GoDaddy or Thawte. Firefox 3 in particular makes you jump through hoops in order to view such a page. This has caused some in the Web security community to question the importance of the SSL authentication.
2008-08-16
Updated: Consumer Reports review State of the Net survey was supposed be a guide to Protect yourself online, from the biggest threats to the best solutions. Consumer Reports examined spyware, firewalls, anti-virus, Web security, phishing and identity theft, but its methods proved troublesome and vendors such as Symantec are up in arms. Security consumers should be, too. Bad information on security software coming from such a trusted source in security software reviews is doubly bad.
2008-08-13
A variety of security issues have conspired to make OpenID an unreliable authentication method. It will remain that way unless some things change soon.
2008-08-11
Real people are dying at Russian hands in Georgia, but the reports of a cyber-war are not as clear.
2008-08-06
The microkernel concept that was once theoretically cool but impractical may now be a more reasonable real-world solution. With Microsoft working on Windows 7 and reportedly Midori, have hardware performance improvements finally made the microkernel practical?
Read More Security News Articles
HP RESOURCE CENTER

ALL MFPs SORT PAGES.
THIS ONE SORTS YOUR OFFICE.

The HP Color LaserJet CM6040 MFP can help you take control of printing and copying. With tools like Web Jetadmin, IT can be more productive. It’s part of a new breed of workflow-enhancing MFPs from HP. That’s alternative thinking about printing.
Visit hp.com/go/6040 for more information!

Sponsored By


REVIEWS
The Check Point VPN-1 VE is designed to protect resources in VMware ESX and ESXi environments. While the VPN-1 VE does reduce security risk in these deployments, IT administrtors will need some consulting help or staff with knowledge of both VMware ESX and security to take full advantage of the product.
CA HIPS is a serviceable application whitelisting tool, particularly for businesses already using other CA security products. However, time-consuming challenges, such as identifying software on Windows PCs, make it more difficult to use than competing software.
With Parity 4.1, Bit9 offers an application whitelisting product that could challenge conventional anti-virus security tools. Bit9 Parity 4.1 joins other app whitelisting security tools from such vendors as CA, CoreTrace and Lumension.
VMware, Microsoft and others are rolling out safeguards for virtualized IT infrastructures, but are they enough in the quickly changing data center?
Check Point's ZoneAlarm ForceField uses virtualization, inline download scanning and DNS validation services to secure browsers, but the software leaves a lot to be desired.
FREE ZIFF DAVIS ENTERPRISE ESEMINARS AT ESEMINARSLIVE.COM
  • Sep 8, 12 p.m. ET
    Leveraging Information to Address the Challenges of Today's Unique Economic Environment
    with Joel Shore. Sponsored by IBM
  • Sep 9, 1 p.m. ET
    Create an Effective SOA Quality Management Strategy with Web 2.0
    with Joel Shore. Sponsored by HP
  • Sep 9, 2 p.m. ET
    The New Age of Video Surveillance
    with Salvatore Salamone. Sponsored by Overland Storage
  • Sep 10, 12 p.m. ET
    Virtualization, Automation and Databases
    with Joel Shore. Sponsored by Parallels
  • Sep 10, 1 p.m. ET
    Disk-Based Data Protection: iSCSI SAN and Intelligent Data
    with Aaron Goldberg. Sponsored by Dell EqualLogic & Symantec
  • Sep 10, 2 p.m. ET
    Top Ten Challenges with On-Premise Email Management
    with Michael Krieger. Sponsored by Dell MessageOne
  • Sep 11, 2 p.m. ET
    Tracking IT Assets with RFID: Time, Money and Accuracy Savings
    with Aaron Goldberg. Sponsored by CDW
  • Sep 11, 4 p.m. ET
    Reliable: What the True Meaning of Data Protection Should Be
    with Michael Krieger. Sponsored by InMage

  • FEATURED CONTENT

    Sponsored by


    DOWNLOADABLE ROI CALCULATORS & TOOLS FROM BASELINE
     
    Calculate Cost and ROI of Spam, VOIP, RFID, Sarbanes-Oxley and more...



    Featured Calculators:

     



    See More Tools!
    By Category| Planners |Calculators | Quizzes

     

     

    Videos Sponsored by:


    EWEEK E-MAIL NEWSLETTERS bring you reliable, timely information to stay on top of the business of technology -- and technology in business -- and get more out of the Web. Make your choices and start your subscriptions today!

     


    EWEEK RSS NEWS FEEDS contain a daily feed of our latest stories from over 30 different categories including Enterprise Apps, Business Intelligence, Security, VOIP and more!
     
    Subscribe to our RSS feeds today for free...

     
    APPLY FOR A FREE SUBSCRIPTION BELOW:
    First Name:Last Name:
    Title:Company:
    Address:City:
    State:Zip Code:
    Email:
     
     
    eWEEK Quick LInks