I am going to combine my security tip of the day with my series of advice for security admins and managers. So here goes: I can sum up this advice post in two words: due diligence. It is obvious that due diligence is necessary in all aspects of security and other areas, but lets go over […] ↓ Read the rest of this entry…
I have mentioned Michael at mcwresearch.com couple of times on some of my posts, but I recently made the decision to add him to my blogroll (congrats Michael – I know you have just been waiting around with baited breath to get on my blogroll ).  I must say that I am already a fan of […] ↓ Read the rest of this entry…
I am going to sponge off of Michael’s tip at MCWResearch for my tip of the day. Michael gives some good advice for configuring and managing firewalls (Michael must be old-school security, since firewalls aren’t needed anymore – right….). He specifically talks about egress filtering, which is something many companies do not take use in their security. […] ↓ Read the rest of this entry…
I posted a few days ago about the password length vs complexity vs. multi-factor authentication debate. One of the assertions I made was that it is essential to tie in SSO with multi-factor authentication. Now, I did not assert in my post that SSO makes multi-factor authentication more secure as Chris Hoff says I did in […] ↓ Read the rest of this entry…
Just got this little story in an email. The original moral was some kind of feel-good, mamby-pamby crap about sticking together in life (blah blah). But it actually has some valid security points. I need some food right now, so I can’t concentrate on forming the morals, but I am sure you will see the […] ↓ Read the rest of this entry…
I recently posted about password length vs. complexity vs. two-factor authentication. But passwords will be around for quite a while, so what are some of the things security professionals can do to keep passwords up to snuff? One of the ways is obviously to enforce password length and complexity, but politics don’t always let that happen.  So many security shops simply […] ↓ Read the rest of this entry…
©0-2012 An Information Security Place | Powered by WordPress with Easel | Subscribe: RSS | Back to Top ↑