The insider threat

Opinion
Sep 18, 20065 mins

Latest security news.

Network World Video: The insider threat, 09/18/06

The majority of focus is on outside threats to a company, but internal threats can be far more damaging and costly. Brian Contos, author of “The Enemy at the Water Cooler”, explains why and says how you can protect your organization on this week’s …

E-mail security system moves to VMware nets, 09/18/06

Proofpoint this week plans to announce a version of its e-mail security product for VMware virtual machine environments.

Video over IP the next battleground, 09/18/06

The scope of the Voice on the Network conference, which was staged for the first time 10 years ago to fight regulations stifling development of VoIP, was broadened in Boston last week to include video over IP, and the early fight might be …

Symantec, Juniper unite to fight security threats, 09/18/06

Juniper Networks and Symantec last week announced they have formed a broad strategic partnership that includes product development in areas of unified threat management, intrusion-prevention systems and endpoint compliance.

E-mail security vendor readies gateway offering, 09/18/06

Declude, which for years has been selling its e-mail security technology for use in mail servers, on Monday announced a version of its antispam and antivirus product for gateways.

Microsoft cuts intellectual-property chains from Web services protocols, 09/18/06

In a move mostly designed to open up its identity infrastructure, Microsoft said Tuesday that it would drop intellectual-property and patent claims to 35 Web services protocols it has developed making them available license-free for anyone to use.

SecureWave touts unified GUI in Sanctuary upgrade, 09/18/06

SecureWave this week is scheduled to release a new version of its Sanctuary software suite, which is designed to control user access to laptop applications and storage devices.

BitArmor rolls out data protection, security software, 09/18/06

BitArmor Systems this week is launching software designed to let IT protect and manage the lifecycle of stored data.

Test: Barracuda Web Filter 310, 09/18/06

The Barracuda appliance identifies spyware by file signature, as well as URL and IP address connection attempts. The device automatically updates its definitions at a configurable hourly or daily rate, with hourly checks recommended.

Test: The right tool for the right network, 09/18/06

We found that VoIP analysis tools are oriented toward particular VoIP protocol environments such as SIP, H.323, Cisco’s SCCP (also known as “Skinny”). Interpreting different call control protocol sequences is difficult for any one VoIP …

Test: Content Security Gateway 1500 with Web Security Suite, 09/18/06

The combination of CP Secure’s 2U gateway appliance and WebSense’s Web Security Suite derailed 69 of the 70 test malware instances.

Test: Aladdin eSafe Gateway/Web/Mail, 09/18/06

Aladdin’s environment consists of the eSafe appliance plus Spyware Neutralizer, an agentless central console for automatically removing spyware from infected clients.

Test: New approaches on attacking malware, 09/18/06

A new category of antimalware tools has emerged, neither gateway tool nor desktop cleaner.

Test: Still no ‘malware’ definition, 09/18/06

A lack of consistency in the way vendors define and recognize malware makes it impossible to enumerate the number of instances that each product recognizes.

Test: FaceTime Enterprise Edition, 09/18/06

FaceTime’s system includes an RTGuardian appliance, which caused zero latency as it inspected inbound and outbound Internet traffic for malware and malware references.

Test: How we tested antimalware, 09/18/06

Focusing on gateway products, we primarily looked for the ability to identify and block malware (such as keystroke loggers, browser hijackers, adware, rootkits, dialers, data miners and Trojans).

Test: ThreatWall 200 with Gateway Anti-Spyware SoftPak, 09/18/06

ESoft’s ThreatWall 200 1U appliance stopped 67 of the test malware instances, and it imposed a latency of 18 msec to 25 msec as it forwarded nonexecutable Internet messages to clients.

Test: Trend Micro InterScan Web Security Appliance 2500, 09/18/06

Trend Micro’s InterScan Web Security Appliance 2500 is the hardware embodiment of that software product, enhanced to handle network traffic more quickly as it detects incoming malware. In our tests, the 1U IWSA 2500 parried 68 out of 70 instances.

Test: WebWasher Secure Anti-Malware, 09/18/06

Secure Computing’s WebWasher Secure Anti-Malware, the only gateway software tested, can thwart spam and viruses in addition to malware. WebWasher disposed of 67 out of 70 test malware instances.

Test: Zero-latency approach gives FaceTime edge, 09/18/06

Ridding a desktop or server of malware is like trying to kill kudzu, an out-of-control vine in the South that can grow 12 inches a day. Rootkit-based spyware is especially tenacious. Using Task Manager doesn’t help, because the spyware process inserts …

Federal agencies scramble to meet security deadline, 09/18/06

Two years ago President George Bush ordered the federal government to be ready by this Oct. 27 to issue a standards-based identity card that federal employees and government contractors would use for computer and building access.

Company sues Microsoft over ‘Forefront’ name, 09/15/06

Microsoft may have thought it was being original when it decided to brand its security portfolio “Forefront” in July, but a Seattle software company begs to differ.

Spamhaus turns blind eye to U.S. court ruling, 09/15/06

A prominent spam-research organization based in London will ignore a $11.7 million judgment against it by a U.S. federal judge, because it can’t be enforced in the U.K.

Unisys contractor arrested in VA theft, 09/15/06

Authorities have charged a 21 year-old Unisys subcontractor with stealing a desktop computer with billing information on as many as 38,000 Department of Veterans Affairs medical patients.

New Firefox fix patches security bugs, 09/15/06

Mozilla developers have released an updated version of their Firefox browser that fixes a number of security issues, four of them rated critical.

Dallas area launches interoperable emergency network, 09/15/06

Emergency-response agencies in the Dallas area have launched a communications service designed to allow police and fire departments, U.S. law enforcement agencies and airport officials to talk to each other over their existing networks and equipment.

Twisted Pair Podcast: Throwing the book at virus authors, 09/15/06

Jason and Keith discuss the sentence handed down to the Zotob worm authors and wonder if it’s harsh enough? …

F-Secure’s former COO returns to become CEO, 09/15/06

F-Secure’s former COO is returning to the Finnish security vendor to become CEO after working for 18 months at Nokia.