
	Home > Information Security Magazine

EMAIL THIS

Information Security Magazine

CURRENT ISSUE

FEATURES

COLUMNS

HOT PICK & PRODUCT REVIEWS

VIEW COLUMNS FROM PREVIOUS YEARS::

2008 | 2007 | 2006 | 2005

November 2008

Maintaining Security in a Recession
by Kelley Damore
While budgets may be cut, it is more important than ever to have a strong security program in place.

Audit and Security: BFF
by David Mortman
Security professionals can reap enormous benefits by forging a strong relationship with auditors.

No Respect
by Jay G. Heiser
Critical systems continue to fail because security specialists haven't established themselves as valuable professionals.

Interview: Former L0pht hacker and current Grand Idea Studio owner Joe Grand
by Dennis Fisher
Known as a hardware security wizard, Grand is now a sought-after trainer and one of the hosts of a new show on Discovery Channel called Prototype This! about building unusual projects on a tight budget and schedule.

October 2008

Information security professionals have their say
by Michael S. Mimoso
Information Security magazine's Security 7 Award winners write personal essays on topics ranging from perimeter security, information sharing, physical and logical security convergence and progress made in the industry.

Combat social engineering the 'Carnegie' way
by Ron Woerner
Dale Carnegie's "How to Win Friends and Influence People" can be a valuable tool for CISOs who are up against social engineering issues.

Bruce Schenier, Marcus Ranum debate risk management
by Bruce Schneier and Marcus Ranum
Experts Bruce Schneier and Marcus Ranum debate whether risk management is an appropriate strategic direction for information security professionals to follow.

Interview: Chris Nickerson of TruTV's 'Tiger Team'
by Dennis Fisher
Chris Nickerson of Lares Consulting explains best practices for penetration tests and the risks of outsourcing.

September 2008

GRC: Over-Hyped or Legit?
by Kelley Damore
Governance, risk and compliance (GRC) is being used as a catch-all phrase for most information security strategies and tagged onto various products, adding even more confusion in the market as to what it truly means or promises to corporations.

Viewpoint

Security Certifications' Ethics Programs Merely Window-Dressing
by David Mortman
Professional information security organizations' efforts to improve their ethics programs only dress up an ugly situation.

Shared Identity Providers Could Soothe Password Chaos
by Jay G. Heiser
A security model that requires people to remember multiple passwords and logins has to change.

Interview: Bill Jiminez, Systems Architect at the University of the Pacific
by Dennis Fisher
Rolling out access controls such as NAC and password-management systems providedsome key lessons for dealing with reluctant users.

July 2008

Time to Implement DNSSEC
by Michael S. Mimoso
Editor's Desk: DNS turns 25 this year. It's high time DNSSEC is added to the protocol.

Loud Cries for National Data Protection Law
by Lee Kelly
Perspectives: A national data protection law would help curtail identity theft and could boost international relations.

Face-Off: Chinese Cyberattacks: Myth or Menace?
by Bruce Schneier and Marcus Ranum
Bruce Schneier and Marcus Ranum debate the threat of Chinese hackers and whether they are state-sponsored?

Interview: Eli Lilly CISO Adrian Seccombe
The CISO for Eli Lilly touts the importance of secure collaboration

June 2008

CISOs Must Innovate to Enable Business
by Kelley Damore
Editor's Desk: Be an Enabler

Architect Security and Compliance Programs to Be Complementary
by David Mortman
Perspectives: Shake On It

Address Authentication and Transaction Validation Protocols to Stem Identity Theft
by Jay G. Heiser
Layer8: Tarnishing Good Names

Interview: Financial Services CISO David Pollino
by Marcia Savage
CISO Uses Predictive Analystics to Bolster Risk Management Program

May 2008

Reasearch on Coding Backdoors Presents Ugly Picture
by Michael S. Mimoso
Editor's Desk: Backdoor Bedlam

Security, Privacy Offices Must Combine Resources
by Ben Halpert
Perspectives: Nowhere to Hide

Face-Off: Is vulnerability research ethical?
by Bruce Schneier and Marcus Ranum
Bruce Schneier and Marcus Ranum debate the ethics of vulnerability research

Interview: Jim Kirkhope of NCR
by Dennis Fisher
PING: Jim Kirkhope

April 2008

Companies Collecting Too Much Customer Data Increase Exposure
by Michael S. Mimoso
If the risk of losing customer or partner information outweighs its value, why collect it in the first place?

Exploring Security Myths, Misconceptions that Lead to Breaches
by Kenneth M. Smith
Perspectives: Gotcha Moments

Disclosure Laws Fail as an Incentive to Secure Data
by Jay G. Heiser
Layer8: Data Leak Fatigue

Interview: Arizona CISO David VanderNaalt
by Michael S. Mimoso
The CISO for the state of Arizona helps craft an executive order that prioritizes information security in every state agency.

March 2008

Researcher Puts Quantitative Measurement on Information Security Threats
by Michael S. Mimoso
Editor's Desk: Score One for Threats

E-Discovery Compliance Requires Security Pros to Think As Lawyers Do
by Julie Tower-Pierce
Perspectives: Think Like a Lawyer

Face-Off: Is Security Market Consolidation a Plague or Progress
by Bruce Schneier and Marcus Ranum
Bruce Schneier and Marcus Ranum debate the impact of market consolidation on information security.

Interview with Macbook Hacker Dino Dai Zovi
by Dennis Fisher
PING: Dino Dai Zovi

February 2008

Key Security Initiatives Abound
by Kelley Damore
Editor's Desk: Everything Goes

Perspectives
by David Mortman
SSL No Security Blanket

Layer8
by Jay G. Heiser
Quality Counts, Not Quantity

Interview with Troon Golf's Cary Westmark
by Dennis Fisher
PING: Cary Westmark

January 2008

Editor's Desk
by Michael S. Mimoso
A New Direction for Risk?

Ping
by Michael S. Mimoso
Fyodor

View this month\\'s issue and subscribe today.

Apply online for free conference admission.

SEARCH :

Site Index

TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.


TechTarget Corporate Web Site \| Media Kits \| Reprints \| Site Map All Rights Reserved, Copyright 2003 - 2008, TechTarget \| Read our Privacy Policy