Page 107 - White Papers in Security Operations

The Role of Linux in Datacenter Modernization

Datacenters are, and always have been, investments that evolve as the industry changes, new technologies emerge, and application needs change. However, today, datacenter managers are facing a daunting future that may not include any meaningful expansion of their datacenters in terms of floor space, yet their existing...

Enterprise Grade Linux: Improved Security, Reduced Cost

The IT world is on the precipice of enormous change. While full adoption of this change will not happen overnight, it has already begun to happen in the datacenter and for a user near you. Because of the substantial investments made by organizations in building out their datacenters, and thanks to the significant risk...

The Three Phases of Securing Privileged Accounts

Attackers exploit valid credentials and/or privileged accounts 100% of the time. With those kinds of statistics, it is hard to imagine companies still turn a blind eye. The cost of doing nothing is routinely displayed in the endless stream of reports detailing yet another compromise in companies large and small around...

Implementing Essential Security Controls

Federal agencies are required by law to comply with the Federal Information Security Management Act (FISMA), which references the NIST SP 800-53 Recommendations. The long-awaited Revision 4 represents the first major review of the Recommendations in almost four years. These changes have important ramifications for...

Sponsored by RSA

Managing Cyber Risk: Are Companies Safeguarding Their Assets?

In the last few years, companies both in the United States and abroad have witnessed the steady growth of cyberattacks and corporate espionage. The financial losses and, worse, often irreparable reputational harm such incidents wreak have served to place a target squarely on the backs of board members to ensure they...

Sponsored by RSA

Breaking Through the GRC Value Ceiling

Technologies implemented to meet operational needs bring tangible benefits to an organization with focused, tactical functions. These tools bring value to organizations due to the focus on the specific business challenge at hand and most often help achieve goals at the operational level. However, certain processes...

Sponsored by RSA

Consumer Web Portals: Platforms At Significant Security Risk

The increasing number of digital identities, prevalence and impact of data breaches, and loss of customer information are driving a heightened requirement for effective consumer-facing identity and access management (IAM) solutions. Many organizations with consumer portals, however, do not have effective protections...

Sponsored by RSA

Card-Not-Present Fraud in a Post-EMV Environment: Combating the Fraud Spike

This white paper is based on data collected in two separate research efforts. In the first, Aite Group surveyed fraud executives at 36 large U.S. merchants from March to May 2014 to understand points of pain and planned solutions. Aite Group also interviewed card executives from payment networks and 18 of the top 40...

Enterprise Mobility: How to Protect Corporate Data

Every company will have a different path to mobile adoption, and final implementations will vary, depending on the needs of various business functions and on regulations that impact mobile policies. A simple way to evaluate where a business is and where it wants to be is to look at devices in terms of who owns them,...

Q2 2014 State of Infections Report

This "State of Infections" report discusses the state of the enterprise under attack and trends in threats seen in the second quarter of 2014. Key findings in this report include: The rise of ransomware; The relationship between the size of an enterprise and its infection rate....

Breach Detection System Analysis

NSS testing verifies that the breach detection system (BDS) is able to detect and log breaches and attempted breaches accurately, while remaining resistant to false positives. All tests in this section are completed with no background network load. The BDS must be able to identify known and unknown malware, and...

Case Study: Making Threat Protection More Intelligent and More Accurate

Weill Cornell Medical College, which is part of Cornell University, ranks among the top clinical and medical research centers in the country. With some 7,000 faculty, staff and students, as well as approximately 2.5 million patients under its care, the medical college also ranks as a big target for...

Application Usage and Threat Report

When asked to describe the current cyber threat landscape, one of the more balanced and objective answers might be that threats are "hiding in plain sight." Today's advanced cyber threats use applications as their infiltration vector, exhibit application-like evasion tactics, and act as, or use common network...

The 2014 Firewall Buyers Guide

Undoubtedly, your network is more complex than ever. Your employees are accessing applications, using personal or work devices, but corporate risk and security factors are often ignored. Your business is a target. Are you prepared in the best possible way? The complexity of your network and infrastructure security may...

Are You Still Using Proxies For URL Filtering? There Is a Better Way

Firewalls enforce network access via a positive control model, where only specific traffic defined in policies is granted access to the network while all other traffic is denied. Access Control Lists (ACLs) initially performed this functionality, often in routers, but their rudimentary approach gave way to dedicated...