Page 109 - White Papers in Security Operations

Securing the Blended Data Center

Analysts including John Grady, Christian Christiansen, and Charles Kolodgy discuss how security must change to address the new dynamics of Virtualization, Cloud and Software-defined Networking (SDN) technologies. As Data Centers become more shared, automated, and elastic, typical IT deployments will become a mix of...

Vulnerability Management: Think Like an Attacker to Prioritize Risks

To most effectively manage vulnerabilities, you need to think like the attacker: how would you go about doing damage, exfiltrating valuable information and making money? What are the key assets in your network that you would target? How would you get to these assets? Drawing on decades of real-world experience,...

AlienVault USM- A Security Operations Center for the SMB

AlienVault's USM is tailor-made for the needs of the security-savvy SMB. It offers affordability, and a comprehensive and ever-increasing feature set powered by the respectable AV Labs and Open Threat Exchange." In this analyst report, Javvad Malik of 451 Research, reviews AlienVault's SMB-focused approach to SIEM and...

SANS 2014 Security Analytics and Intelligence Survey

Based on the results of this year's survey, there are several key takeaways for the security community. The use of analytics and threat intelligence to ferret out complex and stealthy threats from advanced attackers and insiders is improving security for some; automation is improving; and intelligence providers are...

Managing Cybersecurity Risk in a HIPAA-Compliant World

Organizations are at a crossroads when deciding on the proper course of action for compliance with regulations applicable to the healthcare industry and how to manage risk to the security of sensitive health information. This is an important decision that shapes the foundation of an organization's security culture and...

IT Security by the Numbers: Calculating the Total Cost of Protection

Humorist Franklin P. Jones may have said it best: "When you get something for nothing, you just haven't been billed for it yet." These are wise words of warning for businesses counting on so-called "free" IT security software. Kaspersky Lab has created an eBook to help you calculate the true cost of protecting...

Security Technologies for Mobile and BYOD

Businesses today are faced with the almost insurmountable task of complying with a confusing array of laws and regulations relating to data privacy and security. These can come from a variety of sources: local, state, national, and, even, international law makers. This is not just a problem for big businesses. Even a...

Sponsored by RSA

Managing Cyber Risk: Are Companies Safeguarding Their Assets?

In the last few years, companies both in the United States and abroad have witnessed the steady growth of cyberattacks and corporate espionage. The financial losses and, worse, often irreparable reputational harm such incidents wreak have served to place a target squarely on the backs of board members to ensure they...

Sponsored by RSA

Breaking Through the GRC Value Ceiling

Technologies implemented to meet operational needs bring tangible benefits to an organization with focused, tactical functions. These tools bring value to organizations due to the focus on the specific business challenge at hand and most often help achieve goals at the operational level. However, certain processes...

Sponsored by RSA

Consumer Web Portals: Platforms At Significant Security Risk

The increasing number of digital identities, prevalence and impact of data breaches, and loss of customer information are driving a heightened requirement for effective consumer-facing identity and access management (IAM) solutions. Many organizations with consumer portals, however, do not have effective protections...

Sponsored by RSA

Card-Not-Present Fraud in a Post-EMV Environment: Combating the Fraud Spike

This white paper is based on data collected in two separate research efforts. In the first, Aite Group surveyed fraud executives at 36 large U.S. merchants from March to May 2014 to understand points of pain and planned solutions. Aite Group also interviewed card executives from payment networks and 18 of the top 40...

Enterprise Mobility: How to Protect Corporate Data

Every company will have a different path to mobile adoption, and final implementations will vary, depending on the needs of various business functions and on regulations that impact mobile policies. A simple way to evaluate where a business is and where it wants to be is to look at devices in terms of who owns them,...

Q2 2014 State of Infections Report

This "State of Infections" report discusses the state of the enterprise under attack and trends in threats seen in the second quarter of 2014. Key findings in this report include: The rise of ransomware; The relationship between the size of an enterprise and its infection rate....

Breach Detection System Analysis

NSS testing verifies that the breach detection system (BDS) is able to detect and log breaches and attempted breaches accurately, while remaining resistant to false positives. All tests in this section are completed with no background network load. The BDS must be able to identify known and unknown malware, and...

Case Study: Making Threat Protection More Intelligent and More Accurate

Weill Cornell Medical College, which is part of Cornell University, ranks among the top clinical and medical research centers in the country. With some 7,000 faculty, staff and students, as well as approximately 2.5 million patients under its care, the medical college also ranks as a big target for...