Network World on SANs http://www.networkworld.com/topics/sans.html The latest storage-area network news, analysis and in-depth features from NetworkWorld.com Network World, Inc. Copyright(C) 1994 - 2009 Network World, Inc. Information security and business strategy Part 1 http://www.networkworld.com/news/2009/112309-stephen-northcutt-interview.html I've known David Greer for over 25 years and have always enjoyed his intelligence, good humor and creativity. And Stephen Northcutt is so widely published, cited and respected in our field that I had trouble deciding which of his many Web sites to cite. It is a great pleasure to publish Greer's interview of Nortcutt in two parts. M. E. Kabay 2009-11-23T07:00:00-04:00 Information security and business strategy Part 1 http://www.networkworld.com/newsletters/sec/2009/112309sec1.html I've known David Greer for over 25 years and have always enjoyed his intelligence, good humor and creativity. And Stephen Northcutt is so widely published, cited and respected in our field that I had trouble deciding which of his many Web sites to cite. It is a great pleasure to publish Greer's interview of Nortcutt in two parts. M. E. Kabay 2009-11-23T12:00:00-04:00 Companies patch OS holes, but biggest priority should be apps http://www.networkworld.com/news/2009/091409-application-patching.html Corporations appear to be much slower in patching their applications than their operating systems, even though attackers are mainly targeting application vulnerabilities, according to a new report based on data from TippingPoint, Qualys and the SANS Institute. Ellen Messmer 2009-09-15T12:00:00-04:00 Windows WINS attacks in the wild http://www.networkworld.com/news/2009/081809-microsoft-wins-attacks.html The "critical" WINS vulnerability that Microsoft issued a patch for last week is now being exploited actively in the wild, according to the SANS Institute. John Fontana 2009-08-18T12:00:00-04:00 Information security 'how not to's' http://www.networkworld.com/columnists/2009/012009-bradner.html It's not easy getting information security right. It is easy to get advice (often from vendors who want to sell you their semi-magic fix for all that ails you) on what you should be doing. But actually protecting your corporate or personal data turns out to be hard in the real world. Take a look at the Identity Theft Resource Center's report on what happened last year to see. Scott Bradner 2009-01-20T12:00:00-04:00 U of Tennessee finds 'bonus benefits' in log management http://www.networkworld.com/newsletters/techexec/2009/011909techexec1.html The University of Tennessee installed a log management tool last summer to address PCI and HIPAA compliance requirements. Since then, the university is finding other uses for the log data that are improving network security and operational efficiency. Linda Musthaler 2009-01-19T12:00:00-04:00 Top 25 software screw-ups http://www.networkworld.com/news/2009/011209-top-25-programming-errors.html Most IT security woes, from software patching to cyberespionage and cybercrime, can be traced to the devastating effects wrought by the Top 25 programming errors made in software, according to a broad consensus of government and security firms. Ellen Messmer 2009-01-12T08:00:00-04:00 Tell log management vendors what you think about their tools http://www.networkworld.com/newsletters/techexec/2009/011209techexec1.html The SANS Institute wants to know how you use your log management tools. Take the fifth annual Log Management Survey, which provides feedback to vendors on how to improve their products and services. Linda Musthaler 2009-01-12T12:00:00-04:00