Security Infosec ThinkThank BigData Overload ThinkBig Security Analytics

#Security #Infosec #ThinkThank #BigData #Overload #ThinkBig #SecurityAnalytics http://www.computerweekly.com/opinion/Security-Think-Tank-Merging-big-data-and-security-is-the-way-to-go

#CrowdSourcing #Security #SecurityTesting #Bugcrowd #ShellShock #HeartBleed #Vulnerability

#CrowdSourcing #Security #SecurityTesting #Bugcrowd #ShellShock #HeartBleed #Vulnerability http://www.tripwire.com/state-of-security/security-awareness/the-power-of-the-crowd-human-automation-for-the-last-mile-of-security-testing/

#Lottery #Lotteryticket #RandomNumberGenerator #RNG #RootKit #Hacking #USB #CCTV #Security #MUSL #Iowa #USA

#Lottery #Lotteryticket #RandomNumberGenerator #RNG #RootKit #Hacking #USB #CCTV #Security #MUSL #Iowa #USA http://www.hotforsecurity.com/blog/lottery-security-director-accused-of-hacking-random-number-generator-to-win-14-3-million-11696.html

#Security #contractor breach not detected for months. #CyberAttack leads #DHS to suspend #USIS #Layoffs

#Security #contractor breach not detected for months. #CyberAttack leads #DHS to suspend #USIS #Layoffs

http://www.detroitnews.com/story/news/nation/2014/11/03/national-security-breach-hacking/18448083/

#Israeli #security agencies in #TurfBattle over #CyberWar; Netanyahu to decide... #Politics #MiddleEast #Risk

#Israeli #security agencies in #TurfBattle over #CyberWar; Netanyahu to decide... #Politics #MiddleEast #Risk

http://www.haaretz.com/news/diplomacy-defense/1.615637

Parents responsibility and security

Are parents being responsible for the security of their kids online? As a parent you must take responsibility for your kids actions online. The following video from Winn highlights this in a practical educational way:

October is security awareness month!

October is security awareness month, so here is a top 10 presentation and movie trailer from Winn Security Awareness blog:

What makes the net so different?

One of the challenges of implementing security awareness campaign is to explain to end users the internet ("net") and its complexity. One always says a picture is worth a thousand words, the following video introduces the "net" in a simple way:

Security Issues with social networks

I have been using heavily social networks for the past 3 years, started with linkedin can now reach over 7,000,000 persons online. So the power of the technology is really incredible. Theses are some of the top ones I use:

• linkedin
• xing
• ecademy
  
• plaxo
• youtube
• slideshare
  
• twitter
• mypodcast
• lastfm
  
• myspace
• face book
• ...

But these social networks practical experiences are bring in some important questions (which will try to address over this year posts). Some of the main security issues I see are:

• propagation of malware (virus, trojans, keyloggers)
• defacement of profile, impact in public image
• who owns the data? some networks make it easy to get the data in but very difficult out (usage of images to protect contact information)
• how to archive and backup this data? who is responsible?
• how to delete the data permanently if required?
  
• predator attacks against minors and kids (parents must learn new ropes)
• identity theft, impersonation
  
• how to maintain so many user IDs (opendID is trying to address this)
• how to move data from one site, application to the other (open social is work on this), some users have seen this usage blocked after using automated conversion, migration tools
  
• how to do investigations, forensics on so many sites to track down criminals effectively
• how to separate between business, and personal lives?
• effects on corporate information
  
• leakages
• effects on corporate productivity
  

In short network, do business, have fun, but becarefull out-there.

More details on:

• CSO Blog
• Parents Guide
• At security focus
• USA Cert
  

Identity Theft Slidecast

Identity Theft continuous to become an increase threat to security and must be address by using regular awareness sessions with end-users.
The following is an identity theft slidecast and podcast which is simultaneously published on slideshare (slides and audio) and mypodcast (audit only)
...

| View | Upload your own

Security for the iPod generation

The iPod generation likes to stay informed while on the move by downloading music, book, news, podcasts to their portable device. The following Podcast on security gives you a good source to stay in tune with security while on the move "Security Now!". The example of this podcast, talks about:

• latest virus and trojans
• corporate security
• security policies

The text transcript Security Now Jan 17 oryou can listen by clicking/higlight icon...


Security now full site can be found here...

Bruce Schneier on Security And Psychology

Bruce Schneier visited the Kingdom of Bahrain for the first time in 2005 for the conference HITB 2005 organized by E-Security Gulf Group - eSgulf. It was Bruce first visit to Middle East, we also toke the time to visit Riyadh in the Kingdom of Saudi Arabia as well. During this he presented security in a practical in modern way. He also authored the book beyond fear distributed during the conference. In security Psychology plays an important part to achieve the objectives of success.
At Penguicon 2007 during last year Bruce addresses Security And Psychology the podcast of this talk can be listened here...