Security Community Blog

Your password is obsolete

riva11 | 29 Mar 2013 | 0 comments

Here is a nice infographic where is shown why passwords are not secure and the ways to protect them from theft.

If you are interested , read also the blog : How Secure is Your Password?

Credits : http://www.backgroundcheck.org/your-password-is-ob...

PWGen - Advanced Password Generator

riva11 | 29 Mar 2013 | 0 comments

PWGen is a password generator capable of creating large amounts of cryptographically-secure passwords or pass phrases consisting of words from a word list. It uses a “random pool” technique to generate random data based on user inputs (keystrokes, mouse handling) and volatile system parameters. PWGen provides lots of options to customize passwords to the users’ various needs. Additionally, it offers strong text encryption and the creation of random data files (e.g., key files).

Features

Free and open-source software
Unobtrusive, fully portable, runs on all 32-bit and 64-bit Windows versions
Uses up-to-date cryptography
Numerous password options for various purposes
Generation of large amounts of passwords at once
Generation of pass phrases composed of words from word lists
Pattern-based password generation
Secure text encryption
Multilingual support...

Do you (still) need to justify your spending on IT security?

Daniele Bertolotti | 29 Mar 2013 | 0 comments

Having troubles justifying your IT Security spending? Here is a short list of useful resources and ideas that will help you explaining why you are buying that new IT security toy or requesting more resources to implement a missing security process.
And please, share what you use and let’s make this list grow.

How much should I spend?

The guys at the IT Policy Compliance Group spend their time going around globally and interviewing companies trying to understand, among many others, a couple of things relevant to us:

· The Financial Benefits of Spend on Security

· How High Performance Organizations Manage IT

I’m beginning with their work because I...

Facing authentication threats: one time passwords and transaction signing

Antonio Ricci | 28 Mar 2013 | 0 comments

Authentication is one of the oldest problems of the information security, and it is always a living matter. Getting a user password is the easiest way to gain access to critical systems, steal confidential information, etc. And this is why attackers are really interested in stealing passwords. The evolution of information security brought several technologies to improve the protection of user authentication systems, but at the same time attackers improved technique and tools to steal valuable information. Not always attacks are based on technology and software. In most cases the easiest way to get a password from a user is asking. This is not a joke. Unfortunately this is the reality. Social engineering techniques evolved during the time, and nowadays a smart attacker can cheat a user telling him he needs is password to complete his work, or to fix a broken system. And this is just an example of how attackers get the password from users without using sophisticated tools. ...

Student wins Brussels cyber readiness challenge

Tim Van Honsté | 27 Mar 2013 | 0 comments

40 security and technology-savvy enthusiasts have participated in Symantec’s first Cyber Readiness Challenge on Belgian soil, last week at Belgium’s Infosecurity 2013 fair in Brussels Expo. The interactive ‘capture the flag’ style competition is designed for all levels of technical expertise and puts participants in the role of a hacker seeking to infiltrate and exploit an organization.

The CRC experience is intended to help participants better understand the targets, technology tricks and thought processes of a cyber criminal - with an ultimate goal of enabling them to be more effective in their work.

IT security is an industry where you are supposed to defend yourself against attacks that you can’t rehearse for. There’s no practice that you go to after school to attack other people in a safe and clean learning event – this is exactly what an event like the Cyber Readiness Challenges offers the IT security community.

...

Security and the City: Symantec Brings the Cyber Readiness Challenge to New York

Pamela Reese | 25 Mar 2013 | 0 comments

The latest stop on the Symantec-sponsored series of Cyber Readiness Challenge events was New York City where close to 80 people gathered on March 20, 2013 to talk about cyber security and test their knowledge. To help organizations better understand cybercriminals, and improve businesses’ ability to defend against today’s threats, Symantec has hosted games in Toronto, Chicago and Mountain View, California. The competition pits users against each...

How to manually update Scan engine with Intelligent updater / Rapid Release

ABN | 01 May 2013 | 0 comments

#1. Pre Requisites:

User must have administrator privilege on machine.
User must have the required intelligent updater IU / Rapid release RR downloaded.
All commands are in assumption that install directory is C. Command needs to be changed as per requirement

#2. Purpose :

The usual process of updating Scan engine for NAS is through Live Update or internal LUA.
In scenarios of threat or where manual updated is required, this method can be used.

#3. Location:

Symantec Endpoint Protection 12.1 “This software requires the Mac OS X BSD package.”

BSD package | 22 Mar 2013 | 0 comments

Here is a work around (below) for this issue. I tried the above method must the Info.plist file want not in the format shown) -

1. Log into your Mac as an account with administrator rights

2. Open TextEdit - Go > Applications > TextEdit

3. Type a letter into the blank document

4. File > Save As... > save the docuemnt as "BSD" (without quotes), leave the default file format with is "Rich Text Format" and save it somewhere you can easly get to e.g. your desktop

NOTE: You have now created a "BSD.rtf" file. You will need to change the file extension to .pkg and move this file to the location the symantec installer is searching for, which is /Library/Receipts

5. Next, locate the file you created, select the file, then press the cmd + i keys (cmd key is also know as the apple key) this will give you the information about the file...

Through a Handset Darkly: Grasping the BYOD Security Paradigm Shift

Mike Maxwell | 21 Mar 2013 | 0 comments

* This article originally ran on StateScoop on March 19, 2013.

"The golden age never was the present age."

That's a quote from Benjamin Franklin, who was about as close to a State CIO as you could get back in 18th century Pennsylvania.

And while it may seem jarring to think that we've progressed in just a few short years from a "golden age" of simple-to-secure state-owned mobile IT to a turbulent new era of employee-owned mobile IT, it's a reasonable assessment.

In state government today, attempting to own, distribute, and manage all of the mobile devices connecting to your network is about as practical as catching lightning with a kite.

The more I think about it, the more I'm convinced that the best lens through which to look at this issue is a historical one; by...

Silicon Valley Tests Its Cyber Readiness at Symantec Competition

Pamela Reese | 19 Mar 2013 | 0 comments

Symantec brought its Cyber Readiness Challenge to the Silicon Valley on March 13, 2013 where more than 50 participants gathered at the Computer History Museum (how appropriate!) to engage in the evening’s friendly competition. This event series promotes discussions about the evolving cyberthreat landscape with the objective of helping organizations mitigate risk and maintain their security posture. Symantec previously hosted games all over the U.S., including Dallas and Chicago.

The evening began with a keynote presentation by Kevin Haley, director of Symantec Security Response, that covered some key trends in the evolving and sophisticated nature of today’s threat landscape. Highlights included...

Security Community Blog

How much should I spend?

Links

About Security Community Blog

Filter by:

Blog Tags