Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Boom times ahead for IT security profession

Posted on November 9, 2004December 30, 2021 by admini

Approximately 680,000 of this expanded workforce will work in Europe.

IDC analysed responses from 5,371 full-time information security professionals in 80 countries worldwide, with nearly half employed by organisations with $1bn or more in annual revenue. The web-based study is described as the first major study of the global information security profession ever undertaken.

On average survey respondents had 13 years work experience in IT and seven years specialised security experience. This wealth of skill is often well rewarded.

Around 10 per cent of the survey participants in both the US earned more than $125,000 per annum; 22 per cent of US residents who took part in the survey earned between $100,000-$120,000 a year (Europe 16 per cent).

At the other end of the scale, five per cent of security pros in the states and nine per cent in Europe earn less than $50,000.

In Asia, 60 per cent of security professionals earn less than $50,000.

Managers hiring security professionals (93 per cent) said certification was important in choosing potential recruits; but commercial awareness is also becoming increasingly important.

“The study shows a shift in the information security profession, indicating that business acumen is now often required along with technology proficiency,” said Allan Carey, the IDC analyst who led the study. “This widening responsibility means information security professionals not only have to receive a constant refresh of the best security knowledge but also must acquire a solid understanding of business processes and risk management to be successful in their roles.”

“With competing demands on industry and government to expand access to services and information, the highly trained and experienced information security professional must now be an active participant to fulfil stringent regulatory requirements and provide proactive solutions to circumvent emerging risks,” he added.

http://www.theregister.co.uk/2004/11/09/isc2_security_job_survey/

Read more

Small Vendors Issue Security Challenge To Large Competitors

Posted on November 9, 2004December 30, 2021 by admini

Their stated goal is to promote more consistent metrics for customers to evaluate products.

The situation, as these upstarts describe it, is a growing market for Web application security–which the Yankee Group tags at $2 billion over the next five years–and suspect claims from vendors about the capabilities of their products.

In a prepared statement, the foursome suggests that some vendors are selling security short. “We are united regarding the minimum criteria that any security product must meet to provide acceptable protection for mission-critical Web applications,” the companies state.

“It’s pretty remarkable that these companies have come together,” says James Slaby, an analyst with the Yankee Group.

http://www.informationweek.com/showArticle.jhtml;jsessionid=J3XAEQLVWKL4KQSNDBNCKHSCJUMEKJVN?articleID=52600320

Read more

CA gives anti-spyware a consumer face

Posted on November 8, 2004December 30, 2021 by admini

While the business-oriented products stand as updates from the anti-spyware applications marketed by PestPatrol before the CA buyout, the consumer package marks the first time the technology has been tailored specifically for home users by either company.

Sam Curry, vice president of eTrust security management at CA, said the company has identified more than 1,200 new strains of spyware over the last eight months–a sign of the growing threat of the nefarious software.

Spyware applications are typically installed without a user’s permission via Web browser exploits or e-mail programs, with the intent of surreptitiously tracking computer usage, stealing personal information or sending spam.

Among the primary changes CA said it made to the PestPatrol technology for business customers are improved reporting capabilities, faster spyware scanning tools and expanded customer support. The corporate version also provides security administration controls to manage protection for large numbers of desktops. In addition, executives said that CA has reworked the products’ licensing terms for companies.

The PestPatrol interface has been redesigned in the consumer package to make it easier to use by people who are not IT professionals, CA said. For instance, the Anti-Spyware r5 software, which will retail for $39, enables people to set up automated scanning schedules and receive reports on what has been fixed. That contrasts with a process where they would have to manually fix and test systems using a readout of what the software had found.

Curry said that consumers are finding that Spybot and other anti-spyware applications available for free download over the Internet can no longer tackle all varieties of spyware. He believes that customers will be willing to pay for tools that do a better job. “The most important thing for people to realize about spyware is that it doesn’t function like a virus, where you can find it and clean it off your computer fairly easily,” Curry said. “When you look at spyware, there could be hundreds more points of infection. It may not be as life or death to your computer as a virus, but there are certainly big implications about how personal a spyware attack can be.”

While many companies have identified spyware as a major concern, research shows that few are using technology specifically designed to combat the problem. In a nationwide survey of IT managers and executives released by Equation Research, 70 percent expressed growing concern over the issue, but fewer than 10 percent said they have installed anti-spyware software.

http://news.com.com/CA+gives+anti-spyware+a+consumer+face/2100-1029_3-5443428.html?part=rss&tag=5443428&subj=news.1029.5

Read more

Check Point Adds Intrusion-Prevention Services

Posted on November 5, 2004December 30, 2021 by admini

Fred Felman, vice president of marketing at Check Point, said the new intrusion-prevention services will empower solution providers to guarantee customers up-to-the-minute protection against viruses and other network threats.

Calling upon the SmartDefense service and Zone Labs Security Advisories, Check Point will upgrade the service automatically, so its list of vulnerabilities is always up-to-date, he said. The new capabilities are part of the Redwood City, Calif.-based vendor’s Total Access Protection initiative to extend cooperation between its Integrity end-point security solution and other offerings in the Check Point product portfolio, such as the integrated firewall, VPN-1 Pro; the internal security gateway, InterSpect; and Connectra, the company’s Web security gateway.

The strategy is intended to help enterprises defend their network-connected PCs with unified remote access, end-point security, policy enforcement and hosted intrusion prevention. Eric Eder, president of Intelligent Connections, a security solution provider in Detroit, said his customers have needed more automation for handling incidents. “The ability to have centralized management control and have it be consistent across a variety of areas is really something [customers] like.”

http://www.securitypipeline.com/news/52200275;jsessionid=53OLQAFAE5TAQQSNDBCCKH0CJUMEKJVN

Read more

CA Airs Wireless Manager

Posted on November 5, 2004December 30, 2021 by admini

WSM features a variety of wireless management functions to streamline the administration of 802.11x networks: automatic WLAN (define) discovery and mapping; automatic detection and disabling of unauthorized wireless connections; access point load balancing and automatic channel allocation; and WEP (define) key management.

To take advantage of this feature, network users need to install a WSM agent — which authenticates the user — on their laptop, PDA or other mobile device.

Sumit Deshpande, vice president of development in CA’s wireless solutions group, said enterprises have been for the most part good at securing their networks from wireless snoops or unauthorized users. “What we do is make it easier for enterprises to use those standard measures to protect their environment. ”

Deshpande said the next version of WSM will be available in the next six to nine months, with 802.11i — the Wi-Fi security standard slowly wending its way through the Institute of Electrical and Electronics Engineers (IEEE) process — support at the top of the list.

http://www.wi-fiplanet.com/news/article.php/3429691

Read more

Counting the cost of security training

Posted on November 5, 2004December 30, 2021 by admini

This quickly adds up to a rather tidy sum for managers trying to maximize their often decreasing budgets. They believe that if they provide training for their analysts that they will lose them to other firms.

While this can be a very valid argument, it is also one on the razor’s edge – by that I mean you run the risk of your employee becoming irritated at any lack of investment in them and their future, and they simply leave.

As a security analyst, for example, you must not only stay current with technology, but also improve your core skill set.

Right or wrong, many employees believe that it is up to the employer to provide that training – and with that same reasoning, most believe it should not be the employee who pays out of pocket for these courses.

Reality dictates that most companies simply do not provide adequate training for their staff simply due to financial constraints – and in fact, it may not be important to their long-term objectives.

If you own or manage staff in a small-to-mid size company, it would pay you great dividends to set aside some money for training. These initiatives would show your next prospective hire that you are definitely serious about helping to maintain their skills and investing in them as an employee. It is largely due to the fact that because the latest worm or virus has not affected them, and thus they do not see the need to provide training for their security staff. However, we all know that the very reason they were not affected is because they had trained and competent security staff.

For the many people out there who pull double or triple duty at times, getting the latest training is even more important.

Nowadays having the system administrator deal with related technology such as routers, in addition to all his other security functions, is all too common.

Learning on the job is a good way to learn, but it still cannot replace the proper training – yet so few want to shell out the money for it.

I believe this is why you see so many network security jobs with an insanely long list of required skills, often starting with a particular certification.

http://www.theregister.co.uk/2004/11/05/cost_of_security_training/

Read more

Posts navigation

  • Previous
  • 1
  • …
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • …
  • 421
  • Next

Recent Posts

  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15
  • IT Security News – 2023-09-25
  • IT Security News – 2023-09-20

Archives

  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme