Sponsored White Papers, Webcasts, and Downloads
TechRepublic Resources
- How does bad password policy like this even happen?
- Just when you think you've seen the worst case of bad authentication policy you'll ever see, you'll stumble across something even more surprising and unfathomable. by Chad Perrin
- Tags: Password, Password Policy, Chad Perrin
- Blog posts 2008-07-30
- Use tcpdump for traffic analysis
- The tcpdump tool is powerful and flexible, but compared with graphical tools like Wireshark its effective use may appear to be a dark art. It really isn't that difficult to use once you pick up the basics, though. by Chad Perrin
- Tags: Packet, Analysis, Productivity, Chad Perrin
- Blog posts 2008-07-25
- Bignum arithmetic and premature optimization
- What does Knuth's statement, "premature optimization is the root of all evil," mean for security? by Chad Perrin
- Tags: Integer, Optimization, Ruby, Programmer, Language, Moore, Scripting Languages, C/C++, Development Tools, Security, Software/Web Development, Web Development, Programming Languages, Software Development, Chad Perrin
- Blog posts 2008-07-22
- Who is really to blame for the San Fran network lockout?
- A strange sort of techno-drama is playing out in the city of San Francisco, California right now. The blame for the fiasco may not be as easily assigned as it first appeared. by Chad Perrin
- Tags: Felony, Network, Admin Password, FiberWAN, DA, Networking, Chad Perrin
- Blog posts 2008-07-19
- Five good security reads
- Check out a list of five security related books Chad Perrin has read in the past year that he thinks you should read, too. by Chad Perrin
- Tags: Novel, Security, Chad Perrin
- Blog posts 2008-07-17
- The reason I talk about security
- Security isn't just for professionals any longer -- it's important for everyone to maintain a basic level of security awareness. Find out why. by Chad Perrin
- Tags: Security, Chad Perrin
- Blog posts 2008-07-13
- 5 easy ways to compromise your own security
- Maybe you've effectively secured your IT resources against malicious security crackers, as much as reasonably possible. Perhaps it's even secured against "acts of God." There's always at least one more danger: that you'll accidentally compromise security yourself. by Chad Perrin
- Tags: Business Model, Security, Chad Perrin
- Blog posts 2008-07-09
- Google opens up RatProxy
- RatProxy, Google's own proxy-based Web vulnerability testing tool, is now available to the public under an open source license. by Chad Perrin
- Tags: Google Inc., Web, Tool, RatProxy, Productivity, Open Source, Security, Chad Perrin
- Blog posts 2008-07-03
- The CIA Triad
- The CIA Triad is a venerable, well-known model for security policy development, used to identify problem areas and necessary solutions for information security. Read on for an introduction to the CIA Triad's strengths and weaknesses. by Chad Perrin
- Tags: CIA, CIA Triad, High Availability System, Security, Chad Perrin
- Blog posts 2008-06-30
- Knowing the superficial side of security is important, too
- Maybe you're a sole proprietor or a home computer user, answerable to nobody but yourself for security policy. If you have to answer to others, though, you need to know more than good security practice; you also need to know the good, bad, and ugly of industry best practices. by...
- Tags: Chad Perrin, Industry Best Practice, Management, Security
- Blog posts 2008-06-27
- How FreeBSD makes vulnerability auditing easy: portaudit
- Find out how FreeBSD's portaudit tool goes a long way toward helping you maintain a secure system, simply and easily. by Chad Perrin
- Tags: Linux Distribution, FreeBSD, Vulnerability, Auditing, UNIX, Open Source, Operating Systems, Security, Software, Chad Perrin
- Blog posts 2008-06-24
- Week in Open Source: June 20, 2008
- This week in TechRepublic blogs, Chad Perrin talked about Linux security, and in particular, the dangers of evaluating security by simply counting vulnerabilities; Rick Vanover introduced open source ClarkConnect as a handy networking solution for remote offices. by Selena Frye
- Tags: Blog, Chad Perrin, Open Source, Selena Frye
- Blog posts 2008-06-20
- Vulnerability counting revisited: a hypothetical example
- Vulnerability counting is, in many cases, worse than useless as a means of quantifying the security of the software. I've made this point before, but this article tries a different approach to making it: demonstration by hypothetical example. by Chad Perrin
- Tags: Developer, Vulnerability, FooOS, BarOS, Security, Chad Perrin
- Blog posts 2008-06-19
- Is Linux the most secure OS?
- Linux-based systems get a lot of press in IT trade publications. A lot of that press relates to its security characteristics. In fact, some claim "Linux is the most secure operating system OS of them all." How much truth is there in a statement like that? by...
- Tags: Security, Linux Distribution, Operating System, Linux, Operating Systems, Open Source, UNIX, Software, Chad Perrin
- Blog posts 2008-06-17
- What do you do if management won't get on board?
- Sometimes, no matter how hard you try, you can't get management on board. When management refuses to see reason, and security is treated as the unwanted stepchild of business priorities, you can still do something: you can protect yourself. by Chad Perrin
- Tags: Job, Board, Management, Recruitment & Selection, Security, Human Resources, Workforce Management, Chad Perrin
- Blog posts 2008-06-10
- How should we handle security notifications?
- A team of researchers at Carnegie-Mellon University studied the statistical relationship between rates of identity fraud and laws that require customers to be notified when there's been a security breach. As a security professional, this should raise a question in your mind: What should breach notification laws achieve? by Chad...
- Tags: Software, Personally Identifiable Information, Vulnerability, Microsoft Corp., Notification Law, Security, Chad Perrin
- Blog posts 2008-06-06
- Why you can't get management on board
- You can read a lot about specific techniques and general principles of security here at TechRepublic's IT Security Weblog. As long as you have the authority and desire to secure your information technology resources, you can make use of such knowledge to help protect against malicious security crackers, catastrophic...
- Tags: Board, Chance, Management, Security, Chad Perrin
- Blog posts 2008-06-05
- Security alarmism helps the bad guys win
- In what many call the "post-9/11 world," the word "security" often has new and dramatic meaning. This is also the post-SQL-Slammer world, and a world in which identity fraud via digital means is a constant bugbear lurking in the dark shadows of our minds every time we open up...
- Tags: Computer, Security Awareness, Security Alarmism, Security, Chad Perrin
- Blog posts 2008-05-30
- Is PhoneFactor really better security?
- I received an e-mail today trying to enlist me in a marketing campaign for PhoneFactor. Of course, it was presented as a way to help myself, to encourage my bank to provide me with better security, but the ultimate goal was to get me to tell my bank that...
- Tags: Bank, PhoneFactor, Financial Services, Security, Chad Perrin
- Blog posts 2008-05-28
- Making encryption popular
- I have already discussed the importance of being encrypted. Now it's time to discuss the very real problem of encryption system adoption. It's all well and good to talk about how important it is to encrypt sensitive communications. If you're earnest about the importance of...
- Tags: Encryption, Encryption Identity, Encryption Practice, Security, Chad Perrin
- Blog posts 2008-05-26
SmartPlanet
-
Thought-provoking progressive ideas on diverse topics that intersect with technology, business, and life, and matter to the world at large.
Visit SmartPlanet
- More from IBM
-
-
Innovate your business' process model, play against the market, compete against others on our scoreboards and WIN!
Try INNOV8 2.0: A BPM Simulator
-
Enabling Real-World Business Transformation through IBM Service Management
Read the EMA Analyst Report