Dear Security Kaizen magazine readers, As part of the Defense-in-Depth strategy, I chose to introduce the topic in this issue to you by taking an excerpt from one of my favorite references in my library, “Microsoft Windows Security Resource Kit, Ben Smith and Brian Komar with ...

  The scope of this article is to discuss the inherent flaws in an SDLC environment that insiders exploit to carry out an insider attack. SDLC process is a development methodology followed by many organizations, and suggests ways of better managing and governing them.   Who ...

I can imagine that some of the readers are saying, thanks god, I have not allowed Wi-Fi in my network so, I’m secure and I can flip the paper BUT, wait, unfortunately YOU ARE under Wireless threats even you’ve chosen not to install it and even if you believe that Encryption is enough ...

  Information Technology has come a long way ever since computers were invented. Similarly Information Security has come a long way. Trends such as Cloud Computing have been helping Small and Medium Investors and Innovators (SMIs) by reducing the initial cost of deployment and ...

  Cloud Computing has become a significant technology trend and many experts expect that cloud computing will reshape information technology (IT).   According to Forrester’s recent survey of 2,803 IT decision-makers, improving Business Continuity and Disaster Recovery ...

More than ever, people are using their mobile device as their primary means of accessing the Internet. This provides not only unparalleled access to information, but also millions upon millions of applications built by third party developers. This platform approach enables users to ...

Penetration testing is one of many different types of security assessments you can perform to find vulnerabilities in any type of computer system, including control systems found in every nations critical infrastructure. While many of us perform penetration testing on IT systems for ...

Like any popular Internet site, Facebook is a target for abuse. Our Site Integrity engineers rely on FXL, a domain-specific language forged in the fires of spam fighting at Facebook, to quash this abuse before it can affect our users. Feature eXtraction Language (FXL) evolved in ...

  How often do we hear about data breaches? New malware or a variant of old malware, new phishing campaigns? Almost every day. Even giant organizations like Sands Casino Group, Sony Pictures Entertainment, Neimen Marcus and Home Depot were just some of the high profile companies ...

Simply The Zero-day attack is an attack that exploits vulnerability in a system or software before the patch for this vulnerability released by the vendor but the attack may be done also after the patch released. Actually this attack happens in the period between the exploit ...