Search

Your search keyword '"Thurman, Mathias"' showing total 627 results
Start Over Author "Thurman, Mathias"
627 results on '"Thurman, Mathias"'

201. Starting over, with intrusion detection: there's lots to do at our security manager's new job, but sometimes budget timelines set your priorities

Author

Thurman, Mathias

Subjects
Company business management, Computer services industry, Computer services industry -- Officials and employees -- Management, Professional workers -- Beliefs, opinions and attitudes -- Management
Abstract

AS I MENTIONED in my last installment, I started my new job as the information security manager for a hardware company about a month ago. The company didn't have a […]

Published
2005

202. Intellectual property is focus at new job: our security manager starts a new position with a mandate to keep company IP from walking out the door

Author

Thurman, Mathias

Subjects
Intellectual property, Company personnel management, Intellectual property -- Safety and security measures, Business enterprises -- Human resource management -- Safety and security measures
Abstract

I RECENTLY RESIGNED my position after four years to become security manager for a hardware maker. I typically change jobs every few years, for a couple of reasons. The first […]

Published
2005

203. User's end run around VPN leads to new push: a worm crawls into the network when the VPN is accessed improperly. What can be done to avoid a repeat?

Author

Thurman, Mathias

Subjects
Anti-virus software, Remote access technology, Virtual private network, Virus, Computer viruses -- Influence -- Safety and security measures -- Usage -- Methods, Virtual private networks -- Safety and security measures -- Usage, Remote access (Computers) -- Methods -- Safety and security measures -- Usage, Anti-virus software -- Usage
Abstract

ONCE AGAIN, I spent most of my week dealing with an outbreak of malicious code, and I'm now taking steps to avoid a similar problem in the future. This time, […]

Published
2005

204. IDS pays off, even if there's no hacking: system shows its value again as the security team sets out to mitigate the effects of a nasty worm

Author

Thurman, Mathias

Subjects
Network security software, Data security issue, Virus, Hacker, Computer viruses -- Influence -- Prevention -- Usage -- Methods, Data security -- Methods -- Usage, Security software -- Usage -- Evaluation, Computer hackers -- Methods -- Usage
Abstract

WHEN I CAME INTO work after the weekend, a very interesting e-mail message was waiting for me. The message, with the subject line 'Account Alert,' appeared to be from our […]

Published
2005

205. Lull in action is time to tie up loose ends: the blackout at the end of the quarter is a chance for documentation and evaluation of new technologies

Author

Thurman, Mathias

Subjects
Network security software, Data security device, Computer network equipment industry, AirDefense Inc. -- Product information, Data encryption chips -- Product information -- Usage, Security software -- Usage -- Product information, Computer network equipment industry -- Product information
Abstract

MY COMPANY'S quarter-end blackout always means we're in for a slow week, since we can't make any changes to our production environment. When I have some extra time like that, […]

Published
2005

206. More than a token overhaul of the VPN: a move to two-factor authentication gives our security manager a chance to secure his VPN infrastructure

Author

Thurman, Mathias

Subjects
Company systems management, Virtual private network, Virtual private networks -- Safety and security measures -- Information management -- Usage, Authentication -- Usage -- Safety and security measures
Abstract

OUR EXECUTIVE TEAM finally approved the use of two-factor authentication for all virtual private network access into our corporate network. This means we'll get to overhaul the way we deploy […]

Published
2005

209. Downtime becomes documentation time: our security manager takes advantage of a lull in the usual hectic pace to catch up on some important stuff

Author

Thurman, Mathias

Subjects
Company business management, Regulatory compliance -- Management -- Personal narratives, Documentation -- Management -- Personal narratives
Abstract

THE PAST WEEK wasn't extremely insane for a change, so I focused on completing some much-needed documentation and organization of some of our recent activities. The first area I tackled […]

Published
2005

210. Security conference leads to new initiative: our security manager attends the RSA Conference and finds more than just buzz over virus gateways

Author

Thurman, Mathias

Subjects
Enterprise network, Contract agreement, Firewall technology, Fortinet Inc. -- Product information -- Safety and security measures -- Contracts -- Conferences, meetings and seminars, RSA Security Inc. -- Contracts -- Safety and security measures -- Conferences, meetings and seminars, Firewalls (Data security) -- Usage -- Product information -- Conferences, meetings and seminars, Computer software industry -- Conferences, meetings and seminars -- Product information -- Contracts, Enterprise networks -- Safety and security measures -- Conferences, meetings and seminars -- Usage -- Product information
Abstract

I HAD THE OPPORTUNITY to spend almost a week at this year's RSA Conference in San Francisco. Of all the information security conferences, I enjoy this one the most. It […]

Published
2005

212. Hollywood legal threat leads to detective work: a letter from the MPAA charges that an employee has violated copyright law. Our security manager has to figure out who the culprit is

Author

Thurman, Mathias

Subjects
Company legal issue, Motion Picture Association of America -- Cases -- Intellectual property -- Investigations, Forensic engineering -- Case studies -- Cases, Copyright infringement -- Cases -- Investigations -- Case studies, Pirated video recordings -- Investigations -- Case studies -- Cases
Abstract

A LETTER from the Motion Picture Association of America led my group to do some technical sleuthing. We got our man, but his fate will be decided by our human […]

Published
2005

213. SecurID rollout calls for planning: with two-factor authentication about to head out to the masses, a step-by-step plan is drawn up

Author

Thurman, Mathias

Subjects
Network management software, Contract agreement, Technology installation instructions, Microcomputer/LAN data communications software, Mainframe/minicomputer management software, RSA Security Inc. -- Contracts -- Services, RSA SecurID (Data security device) -- Installation -- Contracts, Computer software industry -- Contracts -- Services, Network management software -- Installation -- Services
Abstract

AS I'VE MENTIONED in previous columns, my company has invested in RSA SecurID to provide two-factor authentication for access to our critical infrastructure, namely routers, switches, firewalls and production Unix […]

Published
2004

214. VPN evolution progressing to SSL: one VPN technology is decommissioned, but the replacement causes problems. SSL offers some answers, but there are still issues to be resolved

Author

Thurman, Mathias

Subjects
Virtual private network, Technology application, Virtual private networks -- Usage, Business enterprises -- Technology application -- Usage
Abstract

FOR SEVERAL YEARS, my company used Microsoft Corp.'s Point-to-Point Tunneling Protocol (PPTP) to provide remote users with VPN access to corporate resources. This worked well, and almost all employees who […]

Published
2004

215. Security bookshelf

Author

Thurman, Mathias

Subjects
Introduction to Computer Security (Book) -- Bishop, Matt, Books -- Book reviews
Abstract

* Introduction to Computer Security, by Matt Bishop (Addison-Wesley Professional, 2004). Don't be fooled by that 'introduction.' I found myself scratching my head several times. This book is thorough and […]

Published
2004

216. Taking the leap to PEAP for wireless: access points are proliferating, but there still are no formal policies or standards in place. Someone has to keep an eye on things

Author

Thurman, Mathias

Subjects
Wireless technology, Market trend/market analysis, Computer networks -- Analysis -- Forecasts and trends, Wireless communication systems -- Forecasts and trends -- Analysis, Information networks -- Analysis -- Forecasts and trends, Mobile communication systems -- Forecasts and trends -- Analysis
Abstract

IT'S STRANGE. Our company has yet to embrace wireless as a global deployment, yet every couple of months, the number of access points seems to double. The other day, I […]

Published
2004

217. Sarb-Ox project following script: as the deadline for compliance with the financial accountability act approaches, systems testing is coming along

Author

Thurman, Mathias

Subjects
Sarbanes-Oxley Act of 2002, Government regulation, Programming language, Company business management, File servers -- Testing -- Laws, regulations and rules -- Product development, Computer software industry -- Accounting and auditing -- Laws, regulations and rules -- Product development, Regulatory compliance -- Management -- Laws, regulations and rules, Programming languages -- Product development
Abstract

I CONTINUE to get a significant amount of e-mail asking about the Sarbanes-Oxley Act, so I thought I would provide an update on our progress toward compliance. Since the last […]

Published
2004

218. IP telephony changes security equation: voice over IP presents challenges in protecting the corporate network

Author

Thurman, Mathias

Subjects
Enterprise network, Company business management, IP telephony, Data security issue, Voice over IP, Enterprise networks -- Management -- Methods -- Usage, Data security -- Management -- Methods -- Safety and security measures -- Usage, Cable telephony -- Management -- Methods -- Usage, VoIP (Network protocol) -- Usage -- Safety and security measures
Abstract

IN AN EFFORT TO cut costs, my company has decided to migrate from private branch exchanges to IP telephony. By routing calls over our existing IP network and using voice-over-IP […]

Published
2004

219. Company secrets hit the exits: it does no good to worry about hacker attacks if departing executives are free to leave with sensitive programs and data

Author

Thurman, Mathias

Subjects
10GB - 14.99GB hard disk drive, Hard disk drive, Under 5GB hard disk drive, 15GB - 19.99GB hard disk drive, Company business management, Over 25GB hard disk drive, 5GB - 9.99GB hard disk drive, 20GB - 25GB hard disk drive, Hard disks -- Management -- Analysis -- Safety and security measures, Business enterprises -- Safety and security measures -- Analysis
Abstract

THE OTHER DAY, I found out that an executive in my company was leaving. Normally, that wouldn't be a big deal. After all, in a large company people come and […]

Published
2004

220. Hackers and Painters: Big Ideas from the Computer Age

Author

Thurman, Mathias

Subjects
Hackers and Painters: Big Ideas from the Computer Age (Book) -- Graham, Paul, Books -- Book reviews
Abstract

* Hackers and Painters: Big Ideas from the Computer Age, by Paul Graham; O'Reilly & Associates, 2004. This title is a departure from normal computer reference books. Paul Graham, well […]

Published
2004

221. FTP server offers illicit goods: a random check of a public FTP server turns up an illegal distribution copy of Windows

Author

Thurman, Mathias

Subjects
Company business management, File servers -- Safety and security measures -- Analysis -- Personal narratives, Security consultants -- Personal narratives -- Safety and security measures -- Analysis, Internal security -- Analysis -- Management -- Safety and security measures -- Personal narratives
Abstract

I WAS BATTLING yet another worm infestation this week when it came to my attention that our FTP server might be allowing visitors to download illegal copies of Windows. As […]

Published
2004

222. Spyware gets top billing: an infection on the CEO's home system leads to a call for new preventive measures

Author

Thurman, Mathias

Subjects
Wireless network, Wireless LAN/WAN system, Unsolicited bulk e-mail, Gen Digital Inc. -- Product development -- Safety and security measures, WarDriving: Drive, Detect, Defend, A Guide to Wireless Security (Book) -- Product information, Spam (Junk email) -- Control -- Product information, Computer software industry -- Product development -- Product information, Spyware -- Usage -- Product information -- Control, Email filtering software -- Product development -- Product information, Wireless local area networks (Computer networks) -- Safety and security measures -- Usage -- Product information -- Product development
Abstract

THIS WEEK, I was suddenly called into my boss's office for an urgent meeting. From the look on his face, I expected to hear that we had a serious security […]

Published
2004

223. Worm lays waste to IT's defenses: politics, project delays and an ineffective response allow for a Sasser disaster

Author

Thurman, Mathias

Subjects
Virus, Technology application, Computer viruses -- Control -- Technology application -- Usage, Business enterprises -- Technology application -- Usage
Abstract

I WAS PLANNING to spend my week evaluating disk encryption products before the Sasser worm breached our defenses. What's more frustrating than the worm, however, is the fact that proposed […]

Published
2004

224. Security policy a paper tiger: ignored security policies result in problems ranging from rogue access points to inadequate incident response

Author

Thurman, Mathias

Subjects
Wireless network, Wireless LAN/WAN system, Internet security, Company business management, Data security issue, Virus, Computer viruses -- Control -- Safety and security measures, Data security -- Management -- Safety and security measures, Computers -- Services, Internet -- Safety and security measures, Wireless local area networks (Computer networks) -- Safety and security measures
Abstract

I FACED TWO ISSUES this week, and both came about as a result of security policies that have been routinely ignored. The first had to do with our wireless LAN […]

Published
2004

225. Failure to communicate dooms IDS alert process: an early warning goes unheeded, SQL Slammer worms its way in, and all hell breaks loose

Author

Thurman, Mathias

Subjects
Company business planning, Virus, Computer viruses -- Influence -- Personal narratives, Managers -- Personal narratives -- Planning, Management -- Planning -- Personal narratives
Abstract

OUR INTRUSION-detection system consists mostly of PCs that act as network sensors by running Snort open-source software. The IDS worked very well in giving us an early warning of an […]

Published
2004

226. Cheap scanning comes at a price: a global deployment of the free Nessus port-scanning software saves the budget but lacks the reports that management demands

Author

Thurman, Mathias

Subjects
Computer services industry, Computer services industry -- Safety and security measures, Applications software -- Evaluation
Abstract

VULNERABILITY assessments are a crucial aspect of our overall information security program. We use Nessus, a port scanner that's available free on the Internet, to conduct assessments of our infrastructure. […]

Published
2004

227. Security tools search falls short: disk encryption and identity management products on display at the RSA Conference don't quite fit

Author

Thurman, Mathias

Subjects
Data security device, Data encryption chips -- Analysis -- Usage -- Conferences, meetings and seminars -- Reports, Computer software industry -- Conferences, meetings and seminars -- Trade shows -- Reports -- Analysis, Managers -- Beliefs, opinions and attitudes -- Reports -- Conferences, meetings and seminars -- Analysis
Abstract

I RECENTLY attended the RSA Conference in San Francisco, looking for information on encryption and identity management products. I also attended sessions on identity management, vulnerability assessment, security information management […]

Published
2004

228. Recommended reading

Author

Thurman, Mathias

Abstract

Anyone who wants to know more about federated identity management should read the white paper 'Liberty Alliance & WS-Federation: A Comparative Overview' at the Liberty Alliance Project Web site. You'll […]

Published
2004

229. Overwhelmed by Sarbanes-Oxley: the security-related controls required for a successful compliance audit can be substantial

Author

Thurman, Mathias

Subjects
Sarbanes-Oxley Act of 2002, Wireless network, Wireless LAN/WAN system, Internet security, Company business management, Systems/data security software, Data security issue, Teros Inc. -- Product introduction -- Safety and security measures -- Management, Systems and data security software -- Product introduction, Computer software industry -- Product introduction, Regulatory compliance -- Management -- Safety and security measures, Data security -- Management -- Safety and security measures, Computers -- Services, Internet -- Safety and security measures, Wireless local area networks (Computer networks) -- Safety and security measures -- Management -- Product introduction, Wireless hotspots -- Safety and security measures -- Management
Abstract

WE'RE JUST finishing up the integration of an acquisition's poorly secured IT infrastructure into our information systems. We've disabled almost all external access to its network, except for two services. […]

Published
2004

230. Postmerger audit quashes trust idea: the barriers stay up when a security audit reveals inadequate protections within a newly acquired start-up

Author

Thurman, Mathias

Subjects
Managers -- Personal narratives -- Analysis -- Safety and security measures -- Methods -- Reports, Risk assessment -- Reports -- Methods -- Safety and security measures -- Analysis -- Personal narratives, Acquisitions and mergers -- Analysis -- Safety and security measures -- Reports -- Personal narratives -- Methods
Abstract

DURING the past few weeks, almost all of my time has been devoted to creating security standards in order to comply with the requirements of the Sarbanes-Oxley Act. That changed […]

Published
2004

232. Snort enhancements suppress IDS headaches: two new capabilities in the freely available Snort intrusion-detection system software prove their mettle in the field by reducing false alarms

Author

Thurman, Mathias

Subjects
Network security software, Snort (Network security software) -- Usage, Snort (Network security software) -- Design and construction, Security software -- Design and construction, Security software -- Usage
Abstract

FALSE POSITIVES and data management are two of the most frustrating aspects of using an intrusion-detection system, but a new version of Snort, the freely available IDS that we use, […]

Published
2003

233. Security bookshelf

Author

Thurman, Mathias

Subjects
Cybersecurity Operations Handbook (Book) -- Hancock, William M. -- Rittinghouse, John W., Books -- Book reviews
Abstract

Cybersecurity Operations Handbook, by John W. Rittinghouse and William M. Hancock; Digital Press, 2003. I was very much interested to see what this title had to offer in return for […]

Published
2003

235. Security log

Author

Thurman, Mathias

Subjects
The Best Damn Firewall Book Period (Book) -- Amon, Cherie -- Carasik-Henmi, Anne -- Shinder, Thomas W., Books -- Book reviews
Abstract

The Best Damn Firewall Book Period, by Cherie Amon, Thomas W. Shinder and Anne Carasik-Henmi; Syngress, 2003 If you do any security consulting, you'll want to pick up this book--and […]

Published
2003

239. Mop-up continues in worm aftermath: without automated tools in place, patch and virus signature update compliance become increasingly difficult to manage

Author

Thurman, Mathias

Subjects
Company business management, Virus, Internet security, Information technology, Computer viruses -- Prevention, Information networks -- Management, Computer networks -- Management, Information technology -- Management
Abstract

IT HAS BEEN MORE than a month since the Blaster worm hit, and my company is still having problems. The main one is that we have thousands of desktops and […]

Published
2003

241. Log Parser

Author

Thurman, Mathias

Subjects
Internet/Web server software, Microsoft Corp. -- Product introduction, Computer software industry -- Product introduction, Internet server software -- Product introduction
Abstract

COMPANY: Microsoft Corp. DOWNLOAD: www.microsoft.com/windows2000/downloads/tools/logparser/ Reviewing Internet Information Server (lie) Web log files on a hacked server can be a nightmare unless you have a tool to parse and correlate […]

Published
2003

242. Knowledge base boosts IT reports: an open-source tool makes an ideal repository for IT security support information

Author

Thurman, Mathias

Subjects
DBMS, DBMS utility, Internet security, Company business management, Information technology, Data security issue, PhpBrain (DBMS utility) -- Usage, Data security -- Management -- Safety and security measures -- Usage, Information technology -- Management -- Usage, Database management systems -- Usage, Internet -- Safety and security measures
Abstract

KNOWLEDGE bases and incident-reporting applications are an important part of my information security department's tool set. Here's why: Most technically minded individuals, especially those with engineering backgrounds, don't consistently document […]

Published
2003

243. No denying new switch vulnerability: exploit code demonstrates how easily hackers can take advantage of a router security hole and launch denial-of-service attacks

Author

Thurman, Mathias

Subjects
ISDN router, Bridge/router, Wireless LAN/WAN bridge/router, Data security issue, Internetworking device, Data security -- Reports -- Safety and security measures, Bridge/routers -- Product defects and recalls -- Safety and security measures
Abstract

VENDORS of IT security products frequently release information about vulnerabilities associated with their software and hardware. I receive 15 to 20 such advisories every day and have to examine each […]

Published
2003

244. Rogue Linux installs on the rise: virus mop-up operations expose unauthorized Linux installations--and new IT security Vulnerabilities

Author

Thurman, Mathias

Subjects
Linux (Operating system), Virus, Computer viruses -- Safety and security measures -- Usage, Linux (Operating system) -- Crimes against -- Usage -- Safety and security measures
Abstract

A RECENT ENCOUNTER with the Mumu worm continues to cause my company's security team great frustration, because new infection reports keep trickling in. And as if viruses weren't enough, we […]

Published
2003

246. Security bookshelf. (Security Log)

Author

Thurman, Mathias

Abstract

Snort 2.0 Intrusion Detection, by Brian Caswell, Jay Beale, James C. Foster, Jeremy Faircloth; Syngress Publishing Inc., 2003 The Snort open-source intrusion-detection system (IDS) rivals its commercial counterparts when deployed […]

Published
2003

249. Reserve call-up hits IT security department: when an IT security manager gets the call, the rest of the staff is left to pick up the pieces

Author

Thurman, Mathias

Subjects
Wireless network, Remote access technology, Wireless LAN/WAN system, Company business management, Information technology, Virtual private network, Data security issue, Telecommuting, United States. Air Force. Reserve -- Employment -- Safety and security measures -- Management, Data security -- Management -- Safety and security measures -- Usage, Information technology -- Employment -- Usage, Remote access (Computers) -- Usage -- Safety and security measures, Virtual private networks -- Usage -- Employment, Wireless local area networks (Computer networks) -- Usage -- Safety and security measures -- Employment, Telecommuting -- Usage -- Safety and security measures
Abstract

AS IF THE EVERYDAY stress of my information security job were not enough, our department was hit with a bombshell. I'm in the U.S. Air Force Reserve, and my unit […]

Published
2003

250. Merger security hinges on gateway appliance: the best short-term fix for handling acquisitions may be to use an integrated security product. (Security Manager's Journal)

Author

Thurman, Mathias

Subjects
Company business management, Data security device, Data security issue, Gen Digital Inc. -- Product information -- Management, Symantec Gateway Security (Data security device) -- Usage -- Product information, Data encryption chips -- Usage -- Product information, Computer networks -- Management -- Usage -- Product information, Data security -- Management -- Product information, Information networks -- Management -- Usage -- Product information, Acquisitions and mergers -- Management -- Product information
Abstract

OUR COMPANY is frequently involved in mergers and acquisitions, and we typically don't know the security posture and integrity of the IT resources in the company we're acquiring. In the […]

Published
2003

Catalog

Books, media, physical & digital resources
See catalog results