Posted By News | November 10th, 2010
Chris Merritt, ProSo CEO, had his article published as the featured article in the fourth quarter IATAC Newsletter. The article, “Looking for a New FISMA,” outlines some of the problems with compliance paradigms – especially as implemented in the federal space. The article is available @ http://iac.dtic.mil/iatac/download/Vol13_No4.pdf. About the IATAC Newsletter This free quarterly publication … Continue reading
Tags: Compliance, Consensus Audit Guidelines, FISMA, IATAC, Metrics
Filed In: Compliance, IATAC SME Program, IT Infrastructure Security, News & Events, Press Releases, Security Testing
Posted By Nick | November 2nd, 2010
It has been quite a few weeks since my last blog post. I have been very busy with the PWB course from offensive security, as well as the daily grind to put food on the table. But, that’s no excuse! Hard core *nix enthusiasts will no doubt say “duh” to the knowledge I’m attempting to … Continue reading
Tags: account creation, Backtrack, guid, Information Security, Linux, non interactive, OCSP, pen test, penetration testing, pw, PWB, Root, root user, second root user, Security, uid, useradd
Filed In: IT Infrastructure Security, Security Testing
Posted By Nick | August 12th, 2010
Malware analysis is not a skill that every IT security professional has. It comes with a heavy amount of programming experience, an understanding of assembly, computer memory, debuggers and decompilers. Malware analysis can take a lot of time and skill, and is usually not done by organizations’ security staff. The staff leaves it to AV … Continue reading
Tags: analysis, joebox.org, malware
Filed In: IT Infrastructure Security, Security Testing
Posted By Nick | August 10th, 2010
I recently had an opportunity to do some research into a large volume of Snort IDS rules that had begun to fire (to the tune of millions of alerts a day) for an organization. At first glance these alerts appeared to be false positives, but they smelled like a lazy application DDoS attempt from some … Continue reading
Tags: False Positive, Snort
Filed In: IT Infrastructure Security, Security Testing