admini – Page 242 – CyberSecurity Institute

FCC adtops order to enable law enforcement to access certain broadband and VoIP providers

Posted on May 4, 2006December 30, 2021 by admini

The record indicates that TTPs are available to provide a variety of services for CALEA compliance to carriers, including processing requests for intercepts, conducting electronic surveillance, and delivering relevant information to LEAs. Fifth, the Order restricts the availability of compliance extensions under CALEA section 107(c) to equipment, facilities and services deployed prior to October 25, 1998 and clarifies the role and scope of CALEA section 109(b), under which carriers may be reimbursed for their CALEA compliance costs. Seventh, the Order concludes that carriers are responsible for CALEA development and implementation costs for post-January 1, 1995 equipment and facilities, and declines to adopt a national surcharge to recover CALEA costs. -FCC-

http://www.itu.int/osg/spu/newslog/FCC+Adopts+Order+To+Enable+Law+Enforcement+Access+To+Broadband+And+VoIP+Providers.aspx

Survey on Industry Measures taken to comply with National Measures

Posted on May 4, 2006December 30, 2021 by admini

Guidelines for this directive include:
· There should be an incentive for providers to contribute to the overall security of interconnected networks rather than protecting merely their own resources.
· Providers need to be more proactive and monitor their networks for risks of security breaches. Providers could also be asked to report which networks they monitor.
· This includes guidance to consumers as well as guidance to the provider’s staff, in particular with regard to incident response and emergency planning.
· The need for contact details for email abuse and security violations should also be stressed.

Providers in Europe are more concerned about spam emails that their customers receive than they are concerned with spam that their customers send.

http://www.enisa.eu.int/doc/pdf/deliverables/enisa_security_spam.pdf

CA introduces tape encryption management product

Posted on May 4, 2006December 30, 2021 by admini

An application program interface (API) is provided to enable third-parties to integrate the solution with their tape management systems. This enables organizations to select the level of encryption that is appropriate for each data set, with the option of not encrypting some data at all. In symmetric cryptography the same key is used to encrypt and decrypt the data, while in asymmetric cryptography a public and private key are used.

http://www.cbronline.com/article_feature.asp?guid=99560C5B-5D86-4768-951A-B296C240152D

Eager IT Leaders Could Swallow Security Industry

Posted on May 2, 2006December 30, 2021 by admini

“I think some people were still scratching their heads when we bought Authentica, but certainly not our customers,” said Dennis Hoffman, EMC’s vice president of information security for EMC, based in Hopkinton, Mass. “Customers are asking all the major platform providers to build security into their technologies, and we will absolutely invest, partner and when possible, acquire, to continue to build out information security in our own products.”

Hoffman said enterprises will likely always seek some form of help from independent, third-party security applications vendors, but that he believes end users have tired of the need to acquire additional technologies for protecting almost every form of IT.

Some analysts are predicting that the trend toward large IT platform providers developing greater security features will only accelerate a torrent of industry consolidation among anti-malware and network defense applications makers that could already be overdue.

http://www.eweek.com/article2/0,1759,1956656,00.asp?kc=EWRSS03119TX1K0000594

Viruses no longer top security threat

Posted on May 2, 2006December 30, 2021 by admini

“While email worms occupy the top spots, it’s clear that Trojans represent by far the most prominent threat to IT security,” said Carole Theriault, senior security consultant at Sophos.

Netsky is still the most common virus seen online, accounting for about one in five of all viruses despite a fix and removal tools being widely available for more than two years.

“The expected reign of IM worms has not arrived because virus authors are confronted with a fundamental barrier when engineering an IM worm,” stated Fortinet’s report. “While email addresses are easy to collect on the web, instant messaging IDs are generally less public, making the seeding process significantly harder to set up.”

http://www.vnunet.com/vnunet/news/2155151/viruses-longer-top-threat-april

Cingular Turns to McAfee to Protect Smartphones

Posted on May 2, 2006December 30, 2021 by admini

Kounestsov said, “The operator recognizes the importance of this technology, and works with us to provide it.

With McAfee VirusScan Mobile, they’ve taken it to other platforms and shipped it as an aftermarket solution; maintaining the same core technology to provide security functionality to the network operator and the enterprise. And while you can conceptually compare it to anti-virus or anti-spyware and all sorts of anti-malware for the desktop, the intent is to give operator or enterprise – not necessarily the end user – full control of what’s happening on the device.

AVERT Labs predicted a huge increase in mobile threats; up to about 726 from 226 from 2005. McAfee predicted that the damage caused by new mobile threats is likely to be more extensive than those caused by today’s PC threats because of the large volume of smartphones and the small percentage that are protected by mobile security. For example, in 2004, the ‘I Love You’ virus penetrated tens of millions of PCs in just a couple of hours despite the fact that half of all PCs had Internet security software installed.

By comparison, a mobile threat targeting several operating systems could infect up to 200 million connected smartphones simultaneously because the majority of these devices don’t include anti-virus protection.

http://www.pocketpccity.com/articles/2006/5/2006-5-1-Cingular-Turns-to.html