Stories by: Deborah Radcliff

+

Security automation: the next wave 27 July, 2005 10:12

Go beyond virus protection and patch management. Deb Radcliff reports
+

Fighting back against phishing 21 April, 2005 16:29

First, the good news: e-businesses have moved quickly to combat phishers, consumers are learning to be more discerning, and vendors are stepping up with anti-phish tools and services.
+

The evolution of IDS 09 November, 2004 14:12

Drowning in signature libraries and reactive event information that is of little value in locating attacks in progress, network security managers are fed up with signature-based intrusion-detection systems that have been the backbone of network security. Amid an ever-shrinking time gap between vulnerabilities and exploits, signature-matching IDS already has become obsolete, analysts and users say.
+

Phear of phishing 17 June, 2004 14:33

Dear Citibank member, As part of our continuing commitment to protect your account and to reduce the instance of fraud on our Web site, we are undertaking a period review of our member accounts.
+

Case Study: The external attack 02 March, 2004 12:18

For the most part, hackers break into corporations for one reason: Status. "The hacking community is a strong meritocracy where status is determined by level of competence," says Dr. Max Kilger, a social psychologist for the Honeynet Project.
+

Help! I've been Web-jacked! 27 January, 2004 13:27

On Dec. 22, an Internet investigator got a tip that child pornography was being housed on an adult Web site. When he visited the site to verify the information, he didn't find any illegal images. But what he did find was a Trojan horse that disabled the ActiveX security controls on his browser and took control of it.
+

Tipping the security scales 06 October, 2003 16:11

Not only can the right identity management system save you money, it can make users happy and improve your secutiry. Deborah Radcliff collects some tips from the experts
+

Denying network service 17 July, 2002 07:00

Denial of service is a form of attack in which a network server is overloaded by thousands of false communications and/or requests for services originating from programs in one or more outside computers. Ultimately, the network receives so many queries that it can't keep up with them and is thus unavailable to answer or service legitimate requests.
+

Maximum security returns 16 July, 2002 10:58

Like a lot of other security professionals these days, Mike Hager, security chief at OppenheimerFunds Distributor Inc. in New York, is under excruciating pressure to provide top-notch protection of data, ensure privacy and manage user access -- all on a drum-tight budget. He also needs to justify all project costs and results to top management.
+

Chief (in)security officer 17 June, 2002 10:55

The exodus began in December. Bruce Moulton, vice president of infrastructure risk management at Fidelity Investments in Boston, was let go. That same month, Steve Katz, chief security and privacy officer at Merrill Lynch & Co. in New York, accepted a buyout. And in April, shortly after his face appeared on the cover of CIO magazine, Michael Young, chief information security officer and principal privacy officer at State Street Global Advisors in Boston, lost his job in a company reshuffle.
+

Security Under the Gun 10 June, 2002 09:14

After Bruce Lobree, an information security engineer and a 20-year IT veteran, lost his job in October, he decided to work for contracting firms such as RHI Consulting in Menlo Park, Calif., while waiting out the recession. Since then, Lobree has met client after client who wants a jack-of-all-trades-someone who can administer any brand and version of firewall and intrusion detection, is network-savvy, can code and is versed in new technologies like XML, .Net and wireless.