A core component of any curriculum in modern information security is the security of the operating systems that reside on the workstations and servers of a network. Effective information security depends on addressing all facets of how information is stored, moved, and modified. Since the operating system of a computer is the primary means of implementing the security of the information on that computer, it must be configured to minimize the risks of losing or compromising the data being processed. . Durham Technical Community College, as part of its new Information Systems Security curriculum, is developing a security course based on securing operating systems. This course will instruct students in the fundamentals of designing security architectures and provide an overview of security administration of several operating systems, focusing primarily on Windows and Linux. Additionally, students will also learn the design of basic security defenses and the use of network analysis tools. Topics covered will be essential foundation for later courses which will cover intrusion detection, Defense-in-Depth, attack methodologies, and firewall security and configuration. The link for this article located at Info Sec Writers is no longer available. . Durham Technical Community College is creating a new course in cybersecurity that emphasizes operating systems, specifically targeting Linux and Windows platforms.. Operating Systems Security, Information Systems Curriculum, Network Analysis Tools, Security Architecture, Linux Administration. . LinuxSecurity.com Team
"If you can't afford the security, you can't afford the project," says Rosaleen Citron, CEO of Toronto-based security firm WhiteHat Inc., citing a well-known axiom in the information security industry. On the other hand, "most businesses, big or small, can't afford to defend everything," says Mary Kirwan, an independent security expert in Toronto. Indeed, they would impede their productive business activity if they tried. . . .. Companies, like the humans who make them run, are creatures of habit. Some of those habits can make information systems more secure, rather than less. There's no such thing as absolute security, of course. But the seven best practices of highly secure companies are a standard against which CEOs can measure their organizations. "If you can't afford the security, you can't afford the project," says Rosaleen Citron, CEO of Toronto-based security firm WhiteHat Inc., citing a well-known axiom in the information security industry. On the other hand, "most businesses, big or small, can't afford to defend everything," says Mary Kirwan, an independent security expert in Toronto. Indeed, they would impede their productive business activity if they tried. An effective approach to information security involves making choices. Companies must compromise, deciding what are the most important assets that need to be protected and then deploying a proportionate level of security around them. 1. Assess and audit Have a risk assessment and a regular security audit performed by an outside pair of eyes. The risk assessment creates an inventory of assets and undertakes a detailed threat assessment. It assigns ratings to threats, and proposes a list of counter-measures. The security audit is designed to show whether those measures have been adequately implemented. How "regular" a security audit should be depends on the business and how much information is being exchanged with customers and suppliers. The link for this article located at itbusiness.ca is no longer available. . Businesses need to evaluatevulnerabilities and review safety measures to safeguard essential resources efficiently, all while ensuring operational efficiency.. Security Practices, Risk Management, Information Systems, Security Assessments, Data Integrity. . Anthony Pell
In today's society, much depends on networks and information systems. Additional requirements for security will rapidly increase as networking and computing develop further and electronic communications become part of all aspects of our daily lives. For instance broadband connections offer people the possibility to be "always on". . . .. "Network and information security has become increasingly important with growing usage of the Internet and other information and communication technologies. In today's society, much depends on networks and information systems. Additional requirements for security will rapidly increase as networking and computing develop further and electronic communications become part of all aspects of our daily lives. For instance broadband connections offer people the possibility to be "always on". This, of course, increases the vulnerability of systems and multiplies the probability of some sort of cyber-attack. Enhanced security is therefore a key element for the success of broadband. New wireless applications will enable people to access the Internet from anywhere. The tendency to connect to the Internet everything from printers to central heating systems will continue. Just as people expand the ways they use the Internet, so the potential security risks multiply. The link for this article located at PublicTechnology.net is no longer available. . The importance of data and network protection has escalated with the rise in online activities and the advancement of digital threats.. Network Security,Cyber Threats,Wireless Applications,Broadband Security,Information Systems. . Anthony Pell
The FBI runs major risks of having its information systems infiltrated despite the agency's recent overhaul efforts, top FBI officials said Tuesday. After the capture of Robert Hanssen, who worked at the FBI for more than 20 years while spying for . . . . The FBI runs major risks of having its information systems infiltrated despite the agency's recent overhaul efforts, top FBI officials said Tuesday. After the capture of Robert Hanssen, who worked at the FBI for more than 20 years while spying for the Soviet Union, the FBI has taken steps to bolster its security and revamp its information management practices. But Kenneth Senser, the FBI's assistant director for security, told members of the Senate Judiciary Committee that the agency, along with other U.S. intelligence departments, still suffers from the threat of security breaches. The link for this article located at GovExec is no longer available. . Security experts express concern that government networks still face significant vulnerabilities even after implementing new protective measures.. FBI Information Systems, Risk Management, Security Breach, Intelligence Security, Information Security. . Anthony Pell
A House panel last week gave two-thirds of all federal agencies a failing grade for efforts to secure information systems -- a worse showing than last year attributed to greater awareness of security vulnerabilities. Rep. Stephen Horn (R-Calif.), who has graded . . . . A House panel last week gave two-thirds of all federal agencies a failing grade for efforts to secure information systems -- a worse showing than last year attributed to greater awareness of security vulnerabilities. Rep. Stephen Horn (R-Calif.), who has graded agencies on several information technology management topics over the years, gave the government an overall grade of F for its effort to secure IT systems, with 16 of 24 agencies surveyed receiving the failing grade. Only one agency received a grade higher than a C-plus. "It is a disappointing feeling to announce that the executive branch of the federal government has received a failing grade for its computer security efforts," said Horn, chairman of the House Government Reform Committee's Government Efficiency, Financial Management and Intergovernmental Relations Subcommittee, at the Nov. 9 hearing during which he released the grades. The grades are disappointing, even if they help wake up agency managers to the fact that there's a lot of work to be done to secure the systems, said Sallie McDonald, assistant commissioner for information assurance and critical infrastructure protection at the General Services Administration. The link for this article located at FCW is no longer available. . A Senate committee assessed national organization safety protocols, deeming a significant portion inadequate, highlighting serious technological oversight issues.. Federal Agencies, IT Security Assessment, Government Information Systems. . Anthony Pell
Lately, reactions to non-intrusive probes and network activity that is merely unexpected are becoming increasingly hostile; a result from increasing amounts of incidents and security threats. From my perspective of security, overreactions to activities not crossing authorization and legal boundaries, are . . . . Lately, reactions to non-intrusive probes and network activity that is merely unexpected are becoming increasingly hostile; a result from increasing amounts of incidents and security threats. From my perspective of security, overreactions to activities not crossing authorization and legal boundaries, are leading to a scenario where anyone acquiring basic information about a system needs to be afraid about potential consequences. Seen under a wide scope, this leads to network security no longer being transparent. Why a non-transparent security situation on the Internet is bad? Obviously, it is a big advantage to malicious intruders who have no legal concerns because they can conceal their identity through compromised systems, and a big disadvantage to security firms, admins and individuals who depend on a complete picture of Internet security problems to solve them. Non-malicious, beneficial large scale scans like the broadcast amplifier scanning projects are becoming harder and riskier to perform using legal resources. The link for this article located at Mixter Help Net Security is no longer available. . Adverse responses to unobtrusive assessments are undermining clarity in digital security. Grasping this is essential.. Internet Security, Security Threats, Network Scans, Transparency Impact, Security Reactions. . Anthony Pell
Federal agency heads must ensure that their information systems are secure under a provision of the fiscal 2001 defense authorization bill that gained Senate approval late last week.The provision, S. 1993, co-sponsored by Sens. Fred Thompson, R-Tenn., and Joseph Lieberman, D-Conn., . . . . Federal agency heads must ensure that their information systems are secure under a provision of the fiscal 2001 defense authorization bill that gained Senate approval late last week.The provision, S. 1993, co-sponsored by Sens. Fred Thompson, R-Tenn., and Joseph Lieberman, D-Conn., provides a managerial framework for protecting federal computer records from hackers, cyberterrorists, and accidental or careless unauthorized disclosure. Thompson has called agencies' current method of dealing with such problems a "band-aid approach." The link for this article located at GovExec is no longer available. . Leaders of federal agencies must improve safeguards for data systems as stipulated by S. 1993.. Federal Agencies,Cybersecurity Compliance,System Protection. . Anthony Pell
Army officials are worried that sophisticated hackers and other cybercriminals, including military adversaries, may soon have the ability to hack their way into and take control of major military weapon systems such as tanks and ships. Speaking this month at . . .. Army officials are worried that sophisticated hackers and other cybercriminals, including military adversaries, may soon have the ability to hack their way into and take control of major military weapon systems such as tanks and ships. Speaking this month at the annual Army Directors of Information Management Conference in Houston, Army Maj. Sheryl French, a program manager responsible for the Army’s Information Assurance Architecture for the Digitized Force, said the potential exists for hackers to infiltrate the computer systems used in tanks and other armored vehicles. Unlike in the past, today’s modern tanks and ships are almost entirely dependent on computers, software and data communications links for functions such as navigation, targeting and command and control. The link for this article located at FCW is no longer available. . Defense leaders express concerns regarding cyber intrusions aimed at military armaments, stressing immediate necessity for enhanced protective measures.. Military Security,Cyber Threats,Armored Vehicles,Information Systems,Hacking Risks. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.