Monthly Archives: November 2006

3 Metrics to Gauge Security Spending

Baseline columnist Paul Strassmann offers some insight on the topic and suggests three ratios to gauge security returns. The discussion goes beyond the worst-case scenario approach where you try to predict lost revenue from a security attack to cook up … Continue reading

Share
Posted in General, Security | Leave a comment

WEIS 2007

The Sixth Workshop on the Economics of Information Security (WEIS 2007) will be held at Carnegie Mellon University on June 6-7, 2007. You can visit conference web site here and there’s a call for papers here, if you want to … Continue reading

Share
Posted in Conferences, Events | Leave a comment

Microsoft vs. Oracle Database Security – Saga Continues

This is third post on the same topic that I’m writing in one week time (see previous posts here and here). But battle that happens is worth it. New article titled “Microsoft beats Oracle in security showdown”, written by Tom … Continue reading

Share
Posted in Database Security | Leave a comment

PCI DSS Compliance As Never-Ending Journey

In recent post on this blog, I’ve talked about PCI Data Security Standard and compliance. An interesting article about this topic comes to my attention today. That article talks about PCI DSS compliance not as a destination, but as a … Continue reading

Share
Posted in Operating Systems and Application Security, Security | Leave a comment

Keep Your Laptop Safe

Try to answer some of questions bellow: Do you have backup of data on your laptop? Are files on your laptop encrypted? Do you have biometric security on your laptop and do you use it? Are you careful when logging … Continue reading

Share
Posted in Hardware Security, Privacy, Security | 1 Comment

Why Administrative Passwords Will Never Be Like Nuclear Missile Launchers

At the Steve Riley blog: During the past few months many people have lamented that Windows lacks a nuclear missile style control option for administrator passwords. Surely you’ve read about or seen photographs of missile silos where two operators, separated … Continue reading

Share
Posted in Operating Systems and Application Security | Leave a comment

Linux Kernels: 2.6 versus 2.4 on the Ext3 Filesystems

Title of this post is title of our paper to be presented at IPSI 2006 conference. Paper authors are: Borislav Djordjevic, Dragan Pleskonjic, Marko Caric, and Nemanja Macek. This conference will take place in Bled, Slovenia, November 30 till December … Continue reading

Share
Posted in Conferences, Events, General | Leave a comment

Is RSA Secure Or How Long It Will Be?

Something interesting is going on with attacks against RSA cryptography algorithm. Read this post on famous Bruce Schneier’s blog and follow links from that post.

Share
Posted in Cryptography | Leave a comment

22nd ACSAC – Annual Computer Security Applications Conference

22nd Annual Computer Security Applications Conference will be held December 11-15, 2006. Miami Beach, Florida. This news remembered me days when I presented my paper titled “Wireless Intrusion Detection Systems (WIDS)” on 19th Annual Computer Security Applications Conference, held on … Continue reading

Share
Posted in Conferences, Events | Leave a comment

Which database is more secure, Oracle vs. Microsoft?

In recent post on this blog, I mentioned that Enterprise Strategy Group released a research paper comparing the security of Microsoft SQL Server with Oracle and MySQL. This news has been posted on Michael Howard’s blog and many people criticized … Continue reading

Share
Posted in Database Security | Leave a comment