IT security

Passwords still the weakest link

Businesses are still struggling to convince their staff of the importance of password security, according to a survey of 67,000... Continue Reading

By

• Antony Savvas

A sound architecture involves both strong technology and a professional approach

Although many large organisations need to respond rapidly to changes in the market as well as to competition and globalisation... Continue Reading

By

• Alan Brown

Windows vulnerable to LAND attack

Security researchers say this type of attack leaves enterprise customers of popular Windows products open to a denial of service. There is good news, though. Continue Reading

By

• Bill Brenner

SMBs' real risk of being online

Stuart King CISSP, is responsible for online security and risk assessment for the Reed Elsevier Group. Continue Reading

Security Bytes: Cisco patch available for ACNS flaws

Workaround outlined for new php exploit. IBM issues patch for DB2 flaw. Payroll service goes offline to investigate security claims , and BoA loses personal data on customers. Continue Reading

By

• SearchSecurity.com Staff

Federal agency security still poor, but improving

Report cards give federal security a D-plus average, but the Homeland Security Department is still failing. Continue Reading

By

• Keith Regan, Contributing Writer

Local mirror

 Continue Reading

By

• Maryann Tripp

Local backup

 Continue Reading

By

• Maryann Tripp

Strategic Storage: DR planning blueprint

Developing a good disaster recovery (DR) plan is similar to good dental hygiene -- and almost as exciting. Similar to going to the dentist twice a year, you should also test your DR plan with the same frequency. Wait too long to clean up your plan and you'll be stuck with the root canal of recovering your data. Continue Reading

By

• Garry Kranz

The Controversy of Hacking Books and Classes

Read this excerpt and download Chapter 1, Ethics of Ethical Hacking from Shon Harris' All-in-One Gray Hat Hacking. Continue Reading

CEOs and CIOs split on IT success

Business and IT directors are still at loggerheads on key technology issues, according to a new survey by the Economist... Continue Reading

By

• Nick Huber

Compressed files strike another blow to AV

The "alternative" .rar files are picking up where popular .zip files left off as attack vectors. Continue Reading

By

• Shawna McAlearney, News Editor

ID theft remains No. 1 worry

For the fifth straight year, the FTC said most complaints came from identity theft victims. And that's a problem for enterprises. Continue Reading

By

• Bill Brenner

Cyberstorm chasers: The folks who look out for the latest Internet threats

They keep a 'round-the-clock watch on conditions in cyberspace. CTO Johannes Ullrich discusses the volunteer effort behind the SANS Internet Storm Center. Continue Reading

By

• Bill Brenner

Sun develops Centera competitor

 Continue Reading

By

• Jo Maitland, TechTarget

Financing the future

Don't get a headache working out the best ways to pay for hardware and software. Danny Bradbury offers a user-friendly guide to... Continue Reading

By

• Danny Bradbury

A 'critical' Patch Tuesday

Microsoft issues three security bulletins for January, two of them critical. Attackers have already exploited some of the vulnerabilities. Continue Reading

By

• Bill Brenner

Security Bytes: George Mason U. hacked; new Trojans on the loose

Hackers steal personal data of more than 30,000 members of George Mason University. Two new Trojans emerge. BMC Software buys a Parisian company. Continue Reading

By

• SearchSecurity.com Staff

Security on a Shoestring: Creating Internet policies on the cheap

No matter how small the organization, it's impractical to stand over employees and make sure they properly use the Internet. So here's how to write a decent acceptable use policy, and make sure everyone abides by it. Continue Reading

By

• Mathew Schwartz, Contributor

New solutions for the zero hour

IT vendors are looking to fill the gap between when a virus first hits and when its remedy is released. Continue Reading

By

• Jennifer Lawinski, News Writer

Fixes, workaround for Kerberos 5 vulnerability

A security hole could be exploited to launch malicious code. But there are fixes and a workaround. Continue Reading

By

• Bill Brenner

Transforming the cybersecurity culture

Eleven New Year's resolutions can help employees at all levels empower the security function at their organization. Continue Reading

By

• Shawna McAlearney, News Editor

The security lingo of 2004

This was the year of botnets, zombie PC armies and phishying online schemes. Continue Reading

By

• Bill Brenner

Think Sarbanes Oxley extension changes things? Think again

 Continue Reading

By

• David Foote, Foote Partners LLC

Botnets target the enterprise warn experts

Versatile and increasingly vicious bots will cause enterprises a lot of grief in 2005, security experts say. Continue Reading

By

• Bill Brenner

Crash Course: Recovery

What good is backing up your data if you can't get it back? The goal of this Crash Course on recovery is to make sure you can effectively and efficiently recover data no matter what iteration of the lifecycle it's in. Included here are also hints on how to construct a rock solid disaster recovery plan. Continue Reading

NTFS permissions

This excerpt from Chapter 5 of "The definitive guide to Windows 2000 security" discusses the advantages of using NTFS for access control. Continue Reading

By

• Paul Cooke

MoD may write off £200m Chinook helicopters

The Ministry of Defence could write off more than £200m spent on eight Chinook Mk3 helicopters. Continue Reading

By

• Tony Collins

Spamming the universe

 Continue Reading

By

• Douglas Schweitzer, Contributing Writer

IP everything, essentially

What are the fundamental deliverables of IP networks? How can you use IP networks to gain financial benefits in addition to... Continue Reading

The basis of profitability

Not so long ago, you didn't have much choice - your IT and communications requirements were acquired, implemented and maintained... Continue Reading

Symantec offers bare metal restore software

 Continue Reading

By

• Shane O'Neill

Training for CISSP Certification: SearchSecurity.com's Security School

Study guides for each of the ten domains of the CBK for those preparing to take the CISSP exam or expanding their knowledge of security concepts and practices. Continue Reading

Authorize.Net says it has 'learned' from attack

The credit card processing service was unprepared for the kind of attack it suffered last week, but it will use the experience to improve security. Continue Reading

By

• Bill Brenner

Survey shows SOX bringing IT, business together

 Continue Reading

By

• Ed Parry, News Editor

Hackers costing enterprises billions

Symantec's semi-annual Internet Threat Report finds hackers continued adding billions to the cost of doing business on the Internet. Continue Reading

By

• Mark Baard

Management matters

Cath Everett finds out how you stay on top of networking. What are the management issues related to your telecoms and networks... Continue Reading

Over-specify when buying low cost replacement for Frame Relay

A project manager reveals how a VPN saved £275,000 a year Continue Reading

By

• Peter Skipwith

Latest worm uses IM to lure victims

A version of the worm which spread from infected Microsoft Internet Information Services (IIS) web servers in June has been... Continue Reading

Undercover operations

Computer crime is on the rise, but collecting admissible evidence is a tricky business. Helen Beckett gets expert advice on what... Continue Reading

New attacks and vulnerability trends highlighted at Black Hat

Presentations beginning today will analyze vulnerabilities, zero-day code, phishing and secure wireless deployment, among many other topics. Continue Reading

By

• Shawna McAlearney, News Writer

Fewer IT supplier conflicts are going to court

Law firms have reported a sharp fall in the number of IT disputes reaching the courts over the past 12 months as more users turn... Continue Reading

By

• Bill Goodwin, Investigations Editor

Know Your Enemy -- Learning about Security Threats: Chapter 8, Legal Issues

Find out more about the legal issues swirling around the use of Honeypots. Continue Reading

Learning about Security Threats: Profiling

A look at what it means to be a hacker. Continue Reading

Debian fixes multiple flaws

Denial-of-service, buffer overflow and format string vulnerabilities in Debian GNU/Linux that an attacker could use to remotely execute malicious code has been fixed. Continue Reading

By

• Bill Brenner

Enterprise-class RAID functions, part 2: N-way mirroring, splitting and more

With the convergence of RAID and lower-priced storage technologies, advanced RAID functions can be enjoyed by any small-to-medium sized organization with critical data. Continue Reading

By

• Randy Arnott

Continuous backup gains traction

For continuous backup technology, 2004 is the year that vendors have moved from promises to actual products. Although the market is still small -- inhabited by startups such as Revivio, Mendocino Software, Alacritus and XOsoft -- the buzz is relatively loud. Continue Reading

Users at risk after web host attack

Users have been warned to brace themselves for attacks on sites which provide patch downloads and web hosting services. Continue Reading

By

• Arif Mohamed

From exposition to exploit: One security book's story

A new manual that discloses vulnerabilities may have had a hand in compromises at supercomputing centers this spring. Continue Reading

By

• Anne Saita, News Writer

Hacking for Dummies: Chapter 10 -- Wireless LANs

Read Chapter 10, Wireless LANs, from the book "Hacking for Dummies" written by Kevin Beaver. Continue Reading

IT experts not losing sleep over code theft

Days after Cisco acknowledged someone may have stolen source code from its network, IT experts said they doubt it will amount to anything catastrophic. After all, source code has made it onto the Internet before, and there's no proof it has ever led to an attack. For them, the bigger question is how to prevent such a thing from happening to their organization. Continue Reading

By

• Bill Brenner

Consequences of Cisco source code theft unclear

Opinions are divided on the impact of stolen data now circulating on the Internet. Continue Reading

By

• Bill Brenner

Hacking For Dummies: Chapter 7 -- Passwords

In his latest book, "Hacking For Dummies," Kevin Beaver takes the reader into the mindset of a hacker in order to help admins fend off vulnerabilities and attacks. Continue Reading

Return to sender?

Several researchers have identified a new e-mail attack that can be used to swamp enterprise e-mail servers, as well as some secondary systems. Continue Reading

By

• Hank Hogan, Contributing Writer

Bacs launches online billing service

UK clearing house Bacs has embarked on a joint venture with a US software company to provide an online bill presentation and... Continue Reading

By

• Nick Huber

IBM and Cisco battle remote attack vulnerabilities

 Continue Reading

By

• Edmund X. DeJesus, Contributing Writer

Best practices for enabling and maintaining compliance

As part of our Storage Decisions conference preview series, Shaun Mahoney, senior storage engineer for Citigroup, Randy Wilson, assistant vice president of IT at Essex Investment Management Company and Enterprise Storage Group's Peter Gerr discussed the best practices for enabling compliance. Continue Reading

By

• Mark Lewis, Editor

Achieving the goal of CIO

What exactly does a chief information officer do?Paul Burfitt, global CIO at AstraZeneca, analysed the various aspects of his job... Continue Reading

By

• Julia Vowler

There's no government like no government

 Continue Reading

By

• Niall McKay, Contributing Writer

Exploiting Software: How to Break Code, Chapter 7 -- Buffer Overflow

This excerpt is from Chapter 7, Buffer Overflow of Exploiting Software: How to Break Code written by Greg Hoglund and Gary McGraw. Continue Reading

Security legislation: Where's the breach?

Security legislation isn't all that it's cracked up to be. Find out how California's SB 1386 is letting some breaches fall through the cracks. Continue Reading

By

• Michael Fitzgerald, Contributing Writer

NHS IT plan risky but will not fail, says OGC

The £2.3bn national programme to modernise health service IT systems is "risky and ambitious" but it has sufficient safeguards in... Continue Reading

By

• Nick Huber

What's in an IT name?

What exactly does a chief information officer do?Paul Burfitt, global CIO at AstraZeneca, analysed the various aspects of his job... Continue Reading

By

• Nick Huber

Users warned as number of software holes soars

IT departments were put on alert this week after it emerged that the number of security vulnerabilities discovered in commercial... Continue Reading

By

• Bill Goodwin, Investigations Editor

Courts Libra system 'is one of the worst IT projects ever seen'

The cost of the Libra project to provide a national system for 385 magistrates courts soared from £146m to £390m, and the main... Continue Reading

By

• Tony Collins

Essential contacts

The security arena is like every other aspect of the IT industry, suppliers and special interest groups come and go. However,... Continue Reading

Who watches the watchers?

The Civil Aviation Authority must come clean about how it has policed Nats' computer systems Continue Reading

Victory! Lords confirm CW stand - software flaw could have caused Chinook crash

An historic House of Lords report has this week vindicated a five-year campaign by Computer Weekly for justice after the crash of... Continue Reading

By

• Tony Collins

CBI warns on cybercrime

A new survey warns that UK e-commerce is being stifled by rising crime and consumer caution about buying goods on the Internet Continue Reading

By

• Bill Goodwin, Investigations Editor

Government picks pathfinder councils

 Continue Reading

By

• Chris Mugan

Government makes grants to council IT schemes

 Continue Reading

By

• Chris Mugan

Government trials digital signatures on mobile phones

 Continue Reading

By

• Arlene Martin

Why PKI?

Public Key Infrastructure could revolutionise the way companies do business online - if only anyone would use it, says Danny... Continue Reading

By

• Danny Bradbury

Government Gateway due to launch today

Ministers were today (25 January) hoping to officially launch the Government Gateway, the middleware project that will allow... Continue Reading

By

• James Rogers

The VPN dilemma

With traditional networks choking on data, Liz Biddlecombe investigates the pros and cons of managing a VPN yourself or... Continue Reading

Chinook: a breach of natural justice

MPs slam MoD over 1994 crash whitewash. Software, not pilot error, could have killed 29 Continue Reading

By

• Tony Collins

Computer Weekly's evidence to the Public Accounts Committee

We write to the Public Accounts Committee in relation to its consideration of the Chinook's FADEC computerised engine control... Continue Reading

By

• Computer Weekly Staff

Solution: Internet misuse at work

Like the technology, Internet abuse appears to have proliferated in recent years. There are, however, two ways to tackle this... Continue Reading

By

• Paul Grant

Tackling Internet misuse at work

Like the technology, Internet abuse appears to have proliferated in recent years. There are, however, two ways to tackle this... Continue Reading

By

• Paul Grant

MoD kept RAF chief in the dark

New evidence shows that the air chief marshal who blamed the pilots for the Chinook crash on the Mull of Kintyre in 1994 was not given potentially vital information related to the helicopter's safety-critical software Continue Reading

By

• Tony Collins

Pathway and the Post Office: the lessons learned

The infamous 1996-1999 Pathway project aimed to computerise the nation’s post offices and tackle benefit fraud. But 18 months... Continue Reading

By

• Computer Weekly Staff

How to scour the world when outsourcing

Thanks to Y2K compliance programmes, it is now perfectly acceptable for a firm to consider moving all or part of its systems development and support... Continue Reading

MoD slated for unresolved Chinook testing issues

BCS member Andrew Rivers has raised a series of questions with his local MP about the computer systems on board the Chinook helicopter which crashed over the Mull of Kintyre in 1994, killing 29 security officers and four crew Continue Reading

By

• Tony Collins

Lifting the lid on secret stiffing techniques

One of the UK's most experienced IT negotiators lifts the lid on some of the sharp practices used by software suppliers to get... Continue Reading

By

• Karl Schneider

MoD did not tell the whole truth on Chinook software

Letters from software experts to Computer Weekly show the Ministry of Defence omitted to mention it sanctioned the very testing... Continue Reading

Leaked RAF memo scathing of safety software evaluation

Computer Weekly's Tony Collins uncovers evidence that the MoD has consistently undermined the authority of its software assessors... Continue Reading

By

• Computer Weekly's Tony Collins

January-February

Tesco target of 300 online shops within one year Continue Reading

Chinook software probe due

MPs are next week expected to investigate the air-worthiness of the engine control software on the type of Chinook helicopter involved in the crash Continue Reading

By

• Tony Collins

NAO report puts software at the heart of Chinook debate

Tony Collins

Government auditors will report tomorrow (Friday) that defence staff put into operational service a fleet of Chinook...

 Continue Reading

By

• Tony Collins

Was Y2K a costly non-event?

Many expected catastrophe. In reality, the industry coped well and is now in good shape for the future, writes Bill Goodwin Continue Reading

By

• Bill Goodwin, Investigations Editor

White Paper: Software solutions for effective network power management

Uncertain power conditions can wreak havoc on small businesses, however, there are ways to limit the risk of computer data loss Continue Reading

By

• na