CA / National Cyber Security Alliance Survey Reveals Consumers Engage in Risky Online Behavior on So

Posted on by admini

In contrast to the popular perception that social networking is an activity enjoyed almost exclusively by tweens and teens, the CA/NCSA social networking research study reveals a large number of adults (48 percent), 18 plus, social network. The growing number of adults using social networking sites is an indicator of the increasing popularity-and potential security risks-of these sites.

“Although the general community thinks most social networking users are teens, the CA/NCSA survey showed the popularity of these sites is extending beyond young early adopters to other segments of the population,” said Ron Texeria, executive director of NCSA. ‘Giving out a social security number, paired with a birthday and name, could provide enough ammunition for criminals to hack into financial records and compromise users’ personal information.”

The CA/NCSA survey also revealed users of social networking sites are not only giving out potentially harmful information, but they are also engaging in other risky behaviors, such as downloading unknown files and responding to unsolicited emails and instant messages, all of which may lead to identity theft, computer spyware, viruses and other risks.

Of the parents that know their children under 17 use social networking sites, 64 percent monitor their children’s profiles and 49 percent have only allowed their children’s profile to be seen by his/her friends.

http://ccbn.compuserve.com/releasetext.asp?ticker=ca&coid=83100&client=compuserve&release=911888

Read more

Symantec, Intel Team On New Security Method

Posted on by admini

“We want to get away from the Windows operating system, which has quite a few vulnerabilities within the OS itself, plus any vulnerabilities in apps installed next to us on the OS,” Gary Sabala, product manager for the Symantec virtual security appliance, told internetnews.com. “What we’re trying to do is create this isolated silo of an execution environment that we think is much more tamper resistant to threats on the main Windows OS, but is also an isolated environment where the IT manager can have a high degree of control,” .

http://www.internetnews.com/security/article.php/3635806

Read more

Security firms jump in the acquisition pool

Posted on by admini

Customers want to have a smaller set of vendors accountable if their technology fails to keep information secure and in compliance with regulations–and large systems and storage companies have the financial clout to act as consolidators. “They have the ability to do the potential M&A (mergers and acquisition) deals in cash, or are large enough to do them with stock, or a combination of both,” MacLeod said.

Prior to their acquisition announcements, ISS and RSA Security, for example, had long been rumored to be potential buyout candidates. Other names analysts point to on a short list of potential targets include Trend Micro, Check Point Software Technologies, McAfee and Secure Computing.

“On one side, you have companies like Cisco (Systems) and Microsoft that will discount the price they charge for security, and on the other side, you have the best-of-breed (niche security) companies,” Kuper said.

Buyers don’t want the consumer side, so maybe it could take the consumer piece private and sell the enterprise business,” said one security analyst, who requested anonymity.

http://news.com.com/Security+firms+jump+in+the+acquisition+pool/2100-7350_3-6121403.html?tag=nefd.lede

Read more

IT security is a financial headache for business

Posted on by admini

The research, conducted by Ipsos MORI Research, revealed that in addition to multiple vendors, many businesses are deploying a large number of security technologies across their organisation.

One of the main difficulties for businesses with multiple solutions from multiple vendors is in managing the deployment of patches. The use of a single management console can significantly aid the deployment of patches, said Aminah Gianfrancesco, director of system security EMEA at McAfee.

http://www.siliconrepublic.com/news/news.nv?storyid=single7131

Read more

ISO 17799 and 27001: Setting the Standards for Information Security

Posted on by admini

ISO 17799 provides best practice recommendations for initiating, implementing, or maintaining information security management systems. The standard contains 12 sections: risk assessment and treatment; security policy; organization of information security; asset management; access control; information security incident management; human resources security; physical and environmental security; communications and operations management; information systems acquisition, development and maintenance; business continuity management; and compliance. Within each section, information security control objectives are specified and a range of controls. For each control, implementation guidance is provided.

The second standard, ISO 27001, specifies requirements for establishing, implementing, maintaining, and improving an information security management system consistent with the best practices outlined in ISO 17799. ISO 27001 is the first standard in a proposed series of information security standards which will be assigned numbers within the ISO 27000 series. ISO 17799 is expected to be renamed ISO 27002 in 2007. ISO 27001 is the formal standard against which organizations may seek independent certification of their information security management systems. It contains a total of 133 controls in eleven sections.

Certification is entirely voluntary but is increasingly being demanded from suppliers and business partners who are concerned about information security.

The management processes implemented for ISO 27001 are based on the Deming cycle of continuous improvement: Plan-Do-Check-Act. Measuring effectiveness is a critical element of improving information security management, and hence realizing business benefit and flexibility in a changing environment.

http://www.bankinfosecurity.com/articles.php?art_id=165

Read more