It is important to understand the concepts of a database before one can grasp database security. A generic database definition is “a usually large collection of data organized especially for rapid search and retrieval (as by a computer)” (Database). This is not much different than Oracle’s database definition, “An Oracle database is a collection of [...]
Oracle Database Security
April 21st, 2006 · No Comments
Checklist: Secure domain controller settings
April 21st, 2006 · No Comments
In order to protect domain controllers from local and network attacks, you should use Group Policy settings. Ideally, you will modify the Default Domain Controllers Policy or create a new Group Policy Object (GPO) and link it to the Domain Controllers organizational unit (OU). In either case, you should configure the following settings to protect [...]
Beware Bagel Worms Updating
April 21st, 2006 · No Comments
A new round of Bagle worm updates are going out to already-infected PCs, a security company warned Monday, and although one site spewing out the new versions has been shut down, another has popped up.
One of the download sites monitored by PCs compromised by earlier Bagles went live Sunday, said Helsinki-based F-Secure. The site, which [...]
Analysts Speak Out on the Wireless Security Hype
April 21st, 2006 · No Comments
Some industry watchers contend that the threat of malware aimed at mobile handsets is over-hyped; others say enterprises preparing for such threats will be better off when attacks arrive.
Security software vendor Kaspersky Labs joined the ranks of anti-malware specialists introducing applications designed for use on mobile devices with the launch of its new beta [...]
So you think you’re safe?
April 21st, 2006 · No Comments
Well you’re not — if you’re only using a firewall. Here’s what else you need to know to secure your network.
Sure, network firewalls will help protect you against a wide variety of threats. But if your security plans stop and start with a firewall, you’re in big trouble.
So network security extends beyond simply setting up [...]
HDCP: Why So Weak?
April 21st, 2006 · No Comments
Today I want to wrap up (I think) the discussion on security weaknesses in HDCP, the encryption scheme used for sending very high-def video from a device like a next-gen DVD player to a TV monitor. I wrote previously (1, 2, 3) about how HDCP will inevitably fail — catastrophically — when somebody manages to [...]
Two attacks against VoIP
April 21st, 2006 · No Comments
VoIP is here to stay. In fact many incumbent telecommunication carriers have started offering VoIP service for sometime and several new VoIP service providers have emerged. Aside from issues such as quality of service, the aspect of security, or lack thereof, is misunderstood by some of the VoIP service providers.
This purpose of this article is [...]
Wireless Intrusion Detection Systems
April 21st, 2006 · No Comments
Wireless has opened a new and exciting world for many of us. Its technology is advancing and changing every day and its popularity is increasing. The biggest concern with wireless, however, has been security. For some time wireless has had very poor, if any, security on a wide open medium. Along with improved encryption schemes, [...]
Managing Printers with Windows Server 2003 R2
April 21st, 2006 · No Comments
This article examines some of the enhanced capabilities for managing printers in Windows Server 2003 R2 using the new Print Management console. These capabilities can greatly simplify the management of printers and print servers in enterprise environments.
Managing printers is one of the pains of an administrator’s life. For one reason or another the promises of [...]
How to use Kerberos Authentication in a Mixed (Windows and UNIX) Environment
April 21st, 2006 · No Comments
Kerberos is the protocol of choice for mixed network environments. This article explains how to use Kerberos authentication in these mixed environments. The Kerberos authentication method originated at the Massachusetts Institute of Technology in the 1980s, as part of a project called Athena that involved integrating the computers on the MIT campus, which ran on [...]