Stories about: IPS

What Japan lacks in geographic size, it more than makes up for in Internet attack traffic.

TippingPoint is beta-testing a Web portal that lets customers view Internet-threat intelligence the company has gathered from around the globe, as well as polls of how other customers are dealing with those threats.

The 12th Black Hat conference convened at Caesar's Palace last week, where the 4,500 attendees (a 12.5 per cent increase over last year) heard about the security problems that will plague virtualized environments, why Cisco routers are more of a hacker target than ever and a detailed explanation of DNS attacks.

Will infrastructure virtualization sweep away existing switching structures while failing to grant benefits of performance, cost or improved security? Some say yes.

Existing wireless-LAN intrusion-prevention systems have a blind spot: Until they're upgraded, they can't detect radio signals from 802.11n WLAN gear.

Last Sunday, Terry Childs, a network administrator employed by the City of San Francisco, was arrested and taken into custody, charged with four counts of computer tampering. He remains in jail, held on US$5 million bail. News reports have depicted a rogue admin taking a network hostage for reasons unknown, but new information from a source close to the situation presents a different picture.

In a not-so-surprising revelation, Sun plans to support the Python and Jython scripting languages in future releases of the open-source NetBeans IDE, which has been expanding beyond its Java origins lately.

The wide variety of so-called NAC (network access control) products on the market shows a broad range of thinking about policy-based security controls and the management of the network in general, including the end-point devices that connect to the network. Some vendors enforce policies using a client agent, some enforce them in the network, and some even use peers for enforcement. Network-based enforcement itself can take many forms, including dedicated gateway, DHCP manipulation, 802.1x authentication, and port- and VLAN-based enforcement on switches.

It was a Networkers 1998 - Philadelphia, I believe - where Cisco first announced CCNA to the general public. Now, 10 years later at Networkers 2008 (aka Cisco Live), Cisco is announcing some major additions to CCNA.

A less known part of the recent ARP attack against H D Moore's MetaSploit site was an attempted Denial of Service attack that coincided with the successful ARP attack.

Enterasys this week is expected to unveil an enhanced security appliance designed to bring distributed intrusion prevention to multigigabit LANs.