-
What security risks do enterprise honeypots pose?
Honeypots can provide a great deal of insight into an environment's attack activity. However, before implementing them, there are some significant issues that require careful consideration and plan...
-
Does Teredo present security risks to the enterprise?
Teredo allows internal networks to transition to IPv6, interconnecting them through their NAT devices and across the IPv4 Internet. Ed Skoudis explains why this function isn't as innocent as it seems.
-
Should keystroke loggers be used in enterprise investigations?
Keystroke loggers can provide a great deal of insight into what a perpetrator may be up to inside an enterprise. But not so fast. Ed Skoudis reveals what needs to be done before gathering your firs...
-
Is it important to keep a Java Runtime Environment (JRE) implementation up to date?
Critical security flaws are often discovered in Java Runtime Environment implementations. Unfortunately, most users don't apply any appropriate patches. Ed Skoudis reveals the security risks posed...
-
How effective are phishing links that refer to FTP sites?
The vast majority of phishing emails still include HTTP links, but there has been a recent smattering that refer to FTP sites. In this SearchSecurity.com Q&A, Ed Skoudis explains how to be ready fo...
-
What is the relationship between shellcode and exploit code?
Is shellcode always considered exploit code? In this expert response, Michael Cobb breaks down the two malware terms.
-
Will one failed drive corrupt the rest of a RAID-5 array?
In this expert Q&A, Michael Cobb explains when it is appropriate to keep a RAID-5 array's failed drive online.
-
What are the risks of downloading CS2 applications from a work computer to a removable drive?
Even though U3 smart drives can execute Windows-based applications directly, the devices can introduce security risks into the enterprise. Michael Cobb lays out the pros and cons of the technology.
-
What security issues can arise from unsynchronized system clocks?
Network administrators don't always pay enough attention to the issues of system clock accuracy and time synchronization. Michael Cobb explains why that can lead to security problems.
-
What precautions should be taken if biometric data is compromised?
In this Q&A, Joel Dubin discusses what precautions to take if corporate biometric data is stolen.
-
How can copying files, exchanging memory tokens and downloading emails spread malware?
Ed Skoudis explains the malware-related risks of copying files, exchanging memory sticks and downloading emails.
-
What is Spycar?
Spycar, still available for free, tests a machine against 17 daggressive spyware-like behaviors. Information security threat expert Ed Skoudis explains the tool and gives a preview of Spycar 2.
-
How to choose the right biometric security product
Identity management and access control expert Joel Dubin discusses the different types of biometric security products on the market today, and offers advice on how you can choose the right biometri...
-
How to prevent hackers from accessing your router security password
In this Q&A, Joel Dubin unveils the best practices for protecting a router security password from compromise.
-
How does identity propagation work?
In this expert Q&A, Joel Dubin defines identity propagation and explains how it works.
-
Is it secure to use .NET membership class for user authentication?
Identity management and access control expert Joel Dubin discusses how .NET membership class can be used as a secure authentication framework.
-
What Web security initiatives can be taken on a college campus?
Security management expert Mike Rothman breaks down the topic of Web security, highlighting certain important areas.
-
Are there any references that discuss the cost of PCI DSS compliance?
Security expert Mike Rothman discusses the expenses related to complying with PCI DSS.
-
Getting your career in infrastructure security started
Security management expert Mike Rothman offers advice on how to move up or get involved in the infrastructure security job market.
-
What is the best way to comply with PCI DSS requirements 9 and 10?
Security management expert Mike Rothman unveils how corporations can get compliant with PCI DSS guidelines, specifically requirements 9 and 10.
-
How to utilize free spam-filtering services for SMBs
Learn how a Web-based free spam-filtering service can secure email and prevent spam from attacking your enterprise.
-
Creating employee privacy policies
Are your employees aware of their workplace privacy rights? More specifically, are they aware of what privacy rights they don't retain? Learn how t...
-
Have vendors secretly placed rootkits on USB thumb d...
You can get rootkits from malicious Web sites and emails, but what about reputable vendors? Application security expert Michael Cobb explains how s...
Submit a question to our experts