Groups

A4_Leaflet.qxd 

A National Crime Squad multi-agency initiative 01010110101010 1010101101010101 10101011010101011010101010110 0011 VIRUSES 101010101101011 01010110101010110101010101101 ... 1010101101010101101010 10101011010101011010101010110 01010110101010110101010101 010101101010101101010101 0101011010 01011010010110 1010101101010101 10101010110101010110101 01010110101010110101 010101101010101 ERVICE 0110100111010101011 101010110101 10101011010101011 01010110101010110101010101101 01010110101010110101010101 1 EXTORTION 0110101010110101010 1010101101010101101010101011 10101011010101011010101 0101011010101011010 0101011010101011010101010 01010110101010110101010101101 1010101101 1101010101 UNAUTHORISED ACCESS 01010110101 010101101010101 0101011010101011010 1010101101010101101010101 Y DATA 01001110101010110101010 01010110101010110101 0101011010101011010101 010101101010101101010101011 10101011010101011010101010110 1010101101010101 NG 1010110101010110101 0101011010101011010101010 0101011010101 10101011010101011   [More...] [Less...]

Information Professional Sector News - The IET 

The findings of the latest Orthus Data Leakage Audit Service suggest that IT personnel were responsible for 30 per cent of all incidents of data leakage ... identified during the course of the year's research. The findings support the argument that trusted users are the most likely to be the source of information leaks. The research analysed the ways in which users accessed, processed, stored and transmitted corporate sensitive information including personal information, financial information, and intellectual property. Around 100,000 hours of user activity were captured over the last 12 months. It identified which users were removing sensitive data, where they worked and exactly how and when it was removed, and date stamped visual evidence of these 'data leaks'. The analysis identified that the following departments were responsible for the amount of data leakage identified: IT – responsible for 30 per cent of incidents. Customer service – responsible for 22 per cent of incidents. Other (   [More...] [Less...]

Information Professional Magazine - current issue - The IET 

The most expensive and sophisticated IT security technology can be circumvented by smart hackers who target employees to gain the information keys that ... will give them access to valuable corporate data and resources. We are all vulnerable – but there are ways to minimise risks, explains Ian Mann . Information security is about people as much as procedures. Research into the methods used by hardened hackers to compromise IT systems indicates that the human factor is crucial to the success of most attacks. In many cases attackers do not need to find technical vulnerabilities: hacking the human is sufficient. This flaw has been understood for a long time. So why is this critical area of information security neglected by most organisations? There are two primary reasons. First, the ‘business’ of information security is dominated by IT security hardware and software vendors. While vendor products have their place as part of a technological provisioning strategy, they do not address the great   [More...] [Less...]

InfoWorld: Trust key to Internet security 

A few of my previous columns discussed my vision of creating a more secure Internet. It involved replacing the Internet's default anonymity with pervasive ... authentication , from the hardware initialization, through the OS and all applications, the user, and ending with a verifiable network stream. It is my strong belief that without a complete overhaul of default authentication, malicious hacking is going to continue indefinitely. And as expected, several readers complained about the obvious invasion of privacy my plan would entail; it's a duality I wrestle with as well. But an even bigger obstacle is the need to upgrade and replace nearly every involved software and hardware component. The computer world's normal evolutionary growth patterns don't fit nicely into my revolutionary changes. Few can afford to throw away the old and buy all new, much less have that occur across the globe all at once. It pretty much guarantees that my idea will never see the light of day … at least not for   [More...] [Less...]

Chinese internet security response team under attack | The Register 

A recent post by the team at the Chinese Internet Security Response Team to their English-language site indicates that some of the site visitors are experiencing ... an attack from the CISRT.org site as a result of an injected IFRAME tag. Injected IFRAME tags are not a new means of using legitimate sites to launch attacks on unsuspecting users, with a recent notable case being the Bank of India hack . What is different in this case is that the hack is only being served to seemingly random site visitors. This is an interesting method that can extend the useful life of a hack by making it harder to isolate and investigate. With intermittent attacks on visitors it also means that investigators need to look at all of the intermediate connections between site visitors and the website. With multiple reports from different users, it suggests that whatever is happening is not due to an infection on the systems belonging to site visitors. Attention is currently focused on the possibility of an ARP   [More...] [Less...]

Information security - Best practice standard 

Institute of Information Security Professionals 

Welcome to the Institute of Information Security Professionals Welcome to the Institute of Information Security Professionals. The Institute of Information ... Security Professionals is setting the standard for professionalism in information security, speaking with an independent and authoritative voice. Full Membership of the Institute is becoming the internationally recognised professional standard qualification for information security professionals. Members will, therefore, gain the considerable support, benefits and status associated with belonging to this professional body. The principal objective of the Institute is to advance the professionalism of information security practitioners and thereby the professionalism of the industry as a whole. By the year 2010 the Institute aims to provide a universally accepted focal point for the information security profession. The Institute is an independent not-for-profit body governed by its members, ensuring standards of professionalism - for   [More...] [Less...]

Study finds healthcare industry must do more to protect electronic health record systems 

2008 Consumer Software from CA, Featuring Internet Security Suite - Yahoo 

ISLANDIA, N.Y.--(BUSINESS WIRE)--CA (NYSE: CA - News ) today announced the immediate availability of its 2008 line of Internet security and desktop management ... products for the home and home office. The new line provides a stronger line of defense against the latest online threats including identity theft, viruses, spyware, spam, and phishing. Its flagship product, CA Internet Security Suite Plus 2008, now incorporates website authentication, data backup and PC-to-PC data transfer, delivering a more robust PC security and desktop tool. Additionally, CA has increased its identity theft and virus protection coverage up to $10,000.* "People need to make full use of the Internet without worrying about the safety of their data or their PCs," said David Luft, senior vice president of product development for CA. "Our 2008 product line delivers this assurance with more power and greater value, and includes unique bonuses like identify theft and virus coverage." According to the CA Internet T   [More...] [Less...]

UK Parliament - Internet 

Personal Internet Security The House of Lords Select Committee on Science and Technology has published its report into Personal Internet Security. It is ... available as html or pdf . The Government Response was published on 25 October 2007, and a Debate on the report will follow, the date is yet to be arranged.   [More...] [Less...]