Technology – Expert Witness : Technology – page 13

ISACA Guide Outlines Web Security Vulnerabilities and Strategies

London, UK (24 October 2011)—The use of web applications has soared recently, due to the significant value they can add to enterprises by providing innovative ways to interact with customers. However, so have the dangers. Along with the benefits of these capabilities come security vulnerabilities that create dangerous risk and exposure. ISACA, a global association of 95,000 IT security, assurance and governance professionals, has issued a new, free white paper, titled Web Application Security: Business and Risk Considerations, which outlines the causes of web application vulnerabilities, examines the associated risk and impacts, and provides advice to mitigate risk. The guidance applies to all types of software development activities.

Venafi says ‘Son of Stuxnet’ Duqu Trojan should act as an alarm for IT security professionals

Reports that the ‘Son of Stuxnet’ malware – dubbed Duqu – has been spotted in the wild represents yet another significant security threat, says Venafi. The code for this malware appears to be written by an organisation with access to the original Stuxnet source code. Since Stuxnet is estimated to have taken ten man-years to develop, and has an extremely sophisticated code base, this new development should be a major worry for all organisations, big or small.

Imperva Releases First Comprehensive Hacker Forum Analysis

Study finds hacking discussions on one forum have grown an average of 157% from 2007 – 2010 and a major focus on “how to begin hacking”

Redwood Shores, CA – (October 17, 2011) – Imperva, a pioneer and leader of a new category of data security solutions for high-value business data in the data center, announced today the release of the “The Monthly Trend Report,” the fifth in the Hacker Intelligence Initiative research series. The report analyzes the content and activities of an online hacker forum with nearly 220,000 registered members, although many are dormant.

Survey finds password misuse could be the root cause of hacking spike

48% of IT security professionals surveyed have worked in organisations that have been hacked

London – October 18th, 2011 Lieberman Software Corporation, the Pioneers of Privileged Identity ManagementSM (PIM) and leading information security specialists, today announced the result of their Password 2011 survey which revealed that 48 percent of IT security professionals surveyed have worked for organisations whose network has been breached by a hacker. The survey paints a vivid picture of password chaos amongst IT staff and apathy about password security amongst their senior management.

Red Lambda@s Metagrid Software Transforms Security Operations for Customers With Big IT, Network and Cloud Infrastructures

MetaGrid Leverages Grid Computing and Artificial Intelligence to Dramatically Increase the Scale, Speed and Efficacy of Security and Operational Intelligence for Companies with Big Data IT Challenges

Red Lambda, Inc., a software company transforming security and operational intelligence for “Big Data” IT environments, today announced an Early Release Program for MetaGrid™ – next generation security and operational intelligence software powered by the company’s AppIron™ Grid Platform. MetaGrid is designed to address the Big Data dichotomy faced by providers of IT, network and cloud infrastructures that generate up to petabytes per day of operational data: Big Data can obscure security and operational threats and, at the same time, it can reveal opportunities to increase operational efficiency and unlock enormous business potential. Red Lambda is the first to combine leading-edge Big Data technologies to create an ultra-scalable, purpose-built software platform designed to keep pace with the increasing volume, variety, and velocity of IT operational data and find the threats and opportunities buried within it.