Mark Wolfgang has written the first in a three-part series of articles for SecurityFocus.com regarding how to exploit vulnerabilities to hack into Cisco routers. Answering the question "why Cisco only?", ... Read More

After the infamous 9/11 terrorist attacks the United States government quickly passed the PATRIOT Act which effectively strips some of our basic rights as Americans in the name of fighting ... Read More

Security expert Tim Mullen has written an interesting article on SecurityFocus.com. The article, titled Lost In Translation, discusses some of the ways that Information Security is misunderstood. It is difficult ... Read More

It seems like the majority of the emails that arrive in my inbox these days are viruses, spam or both. Email has long been a favorite attack vector for malicious ... Read More

Ed Skoudis has put together an excellent book in Counter Hack: A Step-by-Step Guide to Computer Attacks and Effective Defenses. The book is exceptionally well-written and informative. It provides a ... Read More

Andy Cuff has written a two-part article on SecurityFocus defining the terms and technology associated with Intrusion Detection Systems (IDS). If you are just learning about IDS and want to ... Read More

Many companies and individuals know enough to backup their sensitive and important data. However, a good percentage of those people never actually verify that they can successfully restore the backed ... Read More

Mark Graff and Kenneth van Wyk have written a masterpiece. Secure Coding Principles: Designing & Implementing Secure Applications is a must read for anyone writing code or managers of anyone ... Read More

Sendmail is one of the most popular mail transfer agents (MTA) on the Internet. Most, if not all, emails end up going through a Sendmail server at some point on ... Read More

Security policies and procedures and business continuity and disaster recovery plans are the backbone of information security. Without these things all you have is a jumble of tools and directives ... Read More

Scott Barman has written a book which will help guide companies- both small and large- in defining and creating an effective information security policy. The book is short and not ... Read More

I feel like I am one of those guys walking down the street with a sandwich-board professing the impending end of the Earth or telling you the sky is falling. ... Read More

If you are tasked with the responsibility for securing a network these books can help you out. Firewalls and other perimeter security technology such as intrusion detection systems (IDS) are ... Read More

Intrusion Detection With Snort: Advanced IDS Techniques Using Snort, Apache, MySQL, PHP and ACID is an excellent book for anyone looking to implement this open source IDS software. Snort is ... Read More

The position has been vacant for awhile, but today President Bush announced the appointment of Amit Yoran, Symantec executive and co-founder of security firm Riptech, as the new Cybersecurity Chief. ... Read More

While everyone loves to pick on Microsoft, and they are certainly not without their share of faults, other operating systems have their issues as well. According to data collected by ... Read More

The About.com Guide for Antivirus Software, Mary Landesman, has written an article profiling the authors of recent viruses. Much has been made of protecting our children from the Internet, but ... Read More

One of the main problems with the electricity grid is its age. Antiquated technology and systems are having a very difficult time keeping pace with the level of power consumption ... Read More

About.com is now offering free courses on many subjects. The lessons for the course will be delivered to your email inbox each day until you complete the course. You can ... Read More

Microsoft has released Security Bulletin MS03-039. There are three vulnerabilities covered in this Security Bulletin. Two of them could enable an attacker to take control of a vulnerable system and ... Read More

It has been widely publicized that the RIAA filed lawsuits against 261 people alleged to have been illegally sharing copywritten music over peer-to-peer (P2P) networks such as Kazaa. As if ... Read More

Remember the infamous "read my lips- no new taxes" line from President Bush (Daddy Bush- not Junior in office now)? The statement from Microsoft regarding public reports that the MS03-032 ... Read More

Adrian Lamo has been one of the most notorious hackers in recent years. As far as we know, his actions have always been benign. He finds holes in corporate network ... Read More

The Microsoft patch for the vulnerability described in MS03-032 may not fully protect systems from being exploited. Users who have applied this patch are still finding themselves being victimized by ... Read More

Biometric security is getting more and more popular. Rather than relying on passwords that can be cracked or forgotten, biometric authentication relies on unique physical attributes to identify or authenticate ... Read More

There are a lot of book reviews under the Book Reviews Subject, but they are just a long list in order from most recent to oldest. I wanted to categorize ... Read More

It is one thing to do a computer forensic investigation or perform incident response for the purpose of finding out who altered a file or what caused a system crash. ... Read More

If you are looking for a book to provide you the fundamentals and the foundation of computer forensic investigations and you want it to not be too technical- this is ... Read More

Microsoft went on a rampage today with Security Bulletins ranging in urgency from Low to Critical. The Critical vulnerability is the MS03-037 which affects Visual Basic for Applications and Microsoft ... Read More

It seems to happen more often than people would like to believe. The government and law enforcement agencies make a big hoopla out of catching the small fish and making ... Read More

Recent worms such as SQL Slammer and MSBlast have exploited vulnerabilities for which patches were readily available. The timeframe from public disclosure of a vulnerability to an active exploit that ... Read More

Ed Skoudis is a respected information security guru. He has written the book Counter-Hack: A Step-by-Step Guide to Computer Attacks and Effective Defenses and created the CD video tutorial Hack-Counter ... Read More

Don't break out in a cold sweat or anything. If you've done your homework this should be a lot easier than the Calculus mid-terms you had in college. Now that ... Read More