Latest Security Opinions

Cloud computing and security - what are the issues? Information at the moment is sketchy to say the least. Imagine you are sitting in front of your computer and all of a sudden you hear weird sounds coming from your hard drive. The rate and complexity at which exploits are being "weaponised" is rapidly increasing. Traffic analysis can help warn of terrorist attacks, but it can also be used to crack encryption, so we need to act now. Failing to protect corporate data opens the corporate purse with no guarantee that it will ever be closed again. Will ICANN's domain name expansion affect internet security? Is it safe to take your mobile devices with you to the Beijing Olympic Games? Is ignorance bliss? Not when it comes to data loss. At the rate data breaches occur, it might be easier for everyone to just post their private information straight to the web. As the malware threat landscape continues to evolve, hackers are constantly changing techniques to counteract detection technologies vendors develop. SOX, HIPAA, Basel II, CobIT – the alphabet soup of industry and government regulations regarding information security seems to get bigger each year.

People just don’t think that putting family genealogy, exposes them and their families to spying by ID fraudsters and for that matter anyone else (stalkers, paedophiles, employers, parents). We can no longer pretend that information security is working in its current form. So let's change it. Globalisation involves extending the business to locations around the world to make the most cost effective use of global resources. All too often, people are victims of identity theft. Less common, but perhaps more dangerous, is the growing trend of medical identity fraud. The antivirus/perimeter approach to security is dead, and targeted attacks could very well be the final nail in the AV coffin. Want to make your endpoints and servers more secure, and easier to manage? Martin Atherton explains why a mismatch between information management capabilities and needs offers a golden opportunity. Lately there has been a lot of discussion about the difference between real security and compliance with data security regulations. The insider threat is the main security risk enterprises face -- insider incidents from using system administrator or privileged account access are responsible for nine out of 10 breaches in data security.