Security research center

Breaking security news

Also see Enterprise Networks Security

ELI simplifies small office security
Aug. 29, 2005
An enterprising start-up has hatched a plan to make wireless LAN security both simple and strong for small-business users, teleworkers and consumers. The plan, from Electronic Lifestyle Integrator (ELI), marries an ...

McAfee readies home Wi-Fi security
Aug. 29, 2005
All home Wi-Fi gear comes with the bricks and mortar to put up at least a basic security wall against intruders and eavesdroppers, but McAfee wants to sell teleworkers a better trowel for building it.

SCO begins shipping OpenServer 6
Jun. 22, 2005
The SCO Group is in the headlines more often for its legal battles than its products these days, but on Wednesday the software maker wrapped up three years of development work and began shipping a major update of its ...

CA preps all-in-one bundles for SMB security and backup
Jun. 21, 2005
Computer Associates in July plans to target small businesses with the release five software packages that bundle together security, back-up and data migration applications.

McAfee offers management tool for SMB suites
Mar. 16, 2005
McAfee introduced on Wednesday a new tool to help small and medium-size businesses manage the company's enterprise security software.

Security how-to's

Malwarebytes finds pesky Trojan
01/07/09
The last Gearhead column wherein Gibbs discovered that his Windows XP machine was acting weirdly generated a huge amount of reader feedback and one recommendation -- using Malwarebytes Anti-Malware -- worked where many others hadn't.

Security forums

Security opinions

Full Disk Encryption Comes to Workgroups
May. 13, 2009
Losing your laptop can be expensive in three ways. First, you'll spend hundreds or thousands of dollars to replace the hardware. Second, you'll suffer the time and aggravation of restoring your data, all the while ...

Beware cybersquatters
Nov. 07, 2005
One reader learns a hard lesson and sends a warning

Regulating two-factor authentication
Oct. 10, 2005
When the Feds decide you need better security  New requirements for accessing the Criminal Justice Information System database require two-factor authentication, and if you're in law enforcement, CJIS is the air you ...

Eliminate static passwords
Aug. 08, 2005
CryptoCard offers guaranteed two-factor authentication security

What'sUp Gold sings
Jul. 25, 2005
Hello from the road where I'm meeting SMB business people in Chicago, Seattle, New York and Houston as host of Network World's technology event, IT Strategies for Small to Mid-size Businesses. Attendees at every stop ...

Security newsletters

Get free subscriptions to
Network World on Security | Virus and Bug Fix Alert | Security News Alert

Network-based e-mail – Ready for prime time?
11/16/09
In the prior newsletter, we raised the question of whether the time is here – or past due – for moving email from local PCs back to the network. This time we want to continue the discussion by looking at some of the key questions that need to be addressed.

Shifting mobile cost to employees? Think twice
11/13/09
I've noticed a disturbing anecdotal trend in talking to enterprise customers lately, and some recent IDC numbers I just stumbled across seem to back it up. The unfortunate movement is away from corporate-liable mobile phone models and towards individual-liable setups, where employees procure their own wireless devices and services and may be reimbursed for their expenses by their employer.

IA job prospects bright
11/11/09
No one reading this column needs general references to news about the economic difficulties we are living through in the United States and elsewhere. Just the other day, I spoke with a long-time friend and colleagues from the information security field who used to earn a decent living as a much sought-after consultant; last week he canceled his business telephone line to save money. He's looking for a permanent job.

NIST SP800-53 Rev. 3: Key to Unified Security Across Federal Government and Private Sectors
10/26/09
Standards play a critical role in information assurance. Given the impossibility of defining a deterministic model that includes billions of users, millions of computers, and thousands of programs and protocols potentially interacting with each other unpredictably, we have to rely on human consensus about best practices if we are to progress in our field. Standards also provide a basis for demonstrating due care and diligence in fulfilling our fiduciary responsibilities to stakeholders.

Understanding and implementing information security metrics
10/21/09
One of the cornerstones of the scientific method is measurability: a focus on defining the ways of counting or measuring aspects of reality that we hope will be strongly associated with the phenomena we are trying to understand.

Security training

Click for the latest security training courses