Infrastructure Security: Page

Introduction to wireless intrusion prevention systems in the enterprise

Expert contributor George V. Hulme explains how wireless intrusion prevention systems (WIPS) protect enterprise networks from attacks and prying eyes.

By George Hulme • March 3, 2015

Business-use scenarios for a Web application firewall deployment

Web application firewalls can be a critical security layer for many companies. Expert Brad Causey explains when and how to deploy a WAF in the enterprise.

By Brad Causey • Feb. 19, 2015

Introduction to Web application firewalls in the enterprise

Expert Brad Causey takes a close look at Web application firewalls, explains how WAF technology can prevent Internet-based attacks from known and unknown applications threats, and offers advice on WAF management and deployment.

By Brad Causey • Feb. 17, 2015

SSL/TLS security: Addressing WinShock, the Schannel vulnerability

Schannel is the latest cryptographic library to encounter SSL/TLS security issues. Expert Michael Cobb discusses the WinShock vulnerability and how to mitigate enterprise risks.

By Michael Cobb • Feb. 6, 2015

How emerging threat intelligence tools affect network security

Up and coming threat intelligence tools aim to improve data security and even standardize threat intelligence across the industry. Expert Kevin Beaver explains how.

By Kevin Beaver • Feb. 2, 2015

The importance of email encryption software in the enterprise

Expert Karen Scarfone explains how email encryption software protects messages and attachments from malfeasance.

By Karen Kent • Jan. 23, 2015

The POODLE vulnerability and its effect on SSL/TLS security

The POODLE vulnerability was patched in October, yet new vulnerabilities are causing concern. Expert Michael Cobb discusses how to maintain SSL/TLS security in the enterprise.

By Michael Cobb • Jan. 16, 2015

Lessons learned: Network security implications of Shellshock

Shellshock had a tremendous impact on network security, affecting many popular vendors and products. Expert Kevin Beaver discusses what Shellshock means to network security, and the lessons that can be learned from the vulnerability.

By Kevin Beaver • Jan. 13, 2015

What is endpoint security? What benefits does it offer?

The increased number of smartphones, laptops and other endpoints in the enterprise is a major security concern. Learn what endpoint security is and how it can help combat your enterprise security woes.

By Karen Kent • Jan. 9, 2015

The fundamentals of FDE: Comparing the top full disk encryption products

Expert Karen Scarfone examines the top full disk encryption products to determine which one may be best for your organization.

By Karen Kent • Dec. 5, 2014

Are LibreSSL and BoringSSL safe OpenSSL alternatives?

Since the revelation of the Heartbleed flaw, OpenSSL security has been put into question. Expert Michael Cobb discusses whether LibreSSL and BoringSSL could serve as OpenSSL alternatives.

By Michael Cobb • Dec. 1, 2014

The fundamentals of FDE: Procuring full-disk encryption software

Expert Karen Scarfone examines the most important criteria for evaluating full disk encryption options for deployment within an enterprise.

By Karen Kent • Nov. 25, 2014

The fundamentals of FDE: Full disk encryption in the enterprise

Expert Karen Scarfone examines full disk encryption, or FDE, tools and describes how the security technology protects data at rest on a laptop or desktop computer.

By Karen Kent • Nov. 12, 2014

Inside the four main elements of DLP tools

Security expert Rich Mogull outlines the four elements of a DLP tool: the central management server, network monitoring, storage and endpoint DLP.

By Rich Mogull • Nov. 10, 2014

CISSP quiz: System architecture, security models, system evaluation

Test your knowledge of the CISSP exam's Security Architecture and Design domain by taking this practice quiz that covers topics including system architecture, security models and more.

By Shon Harris • Oct. 17, 2014

SHA-2 algorithm: The how and why of the transition

Is it time to make the move to the SHA-2 algorithm? Application security expert Michael Cobb discusses and offers tips to ease the transition.

By Michael Cobb • Oct. 17, 2014

Evaluating next-gen firewall vendors: Top 11 must-ask questions

Evaluating potential firewall vendors and choosing the one that best aligns with your enterprise's needs can be a tricky task. This tip offers 11 questions any organization should ask vendors prior to making a firewall purchase.

By Diana Kelley • Sept. 5, 2014

Cloud Controls Matrix

The Cloud Controls Matrix is a baseline set of security controls created by the Cloud Security Alliance to help enterprises assess the risk associated with a cloud computing provider.

By Marcia Savage • July 21, 2014

How Cisco’s ‘Application Centric Infrastructure’ differs from SDN

As Cisco rolls out a hardware-based alternative to software-defined networking approaches, what does it all mean for security?

By Sally Johnson • April 1, 2014

Authentication caching: How it reduces enterprise network congestion

Michael Cobb explores the pros and cons of authentication caching and whether the practice can truly calm network strain.

By Michael Cobb • March 28, 2014

Why TCP traffic spikes with source port zero should sound an alarm

Are spikes in TCP traffic with source port zero warning signs that future attacks are imminent? Discover why enterprises should be concerned.

By Brad Casey • Feb. 11, 2014

Tor networks: Stop employees from touring the deep Web

Are employees using Tor to view blocked Web sites, or mining Bitcoins on corporate resources? Sinister or not, it needs to stop.

By Adam Rice • Feb. 3, 2014

Alternatives to RESTful API for accessing object storage

This tip examines other options for connecting to object storage when an application isn't compatible with the RESTful API.

By Marc Staimer • Dec. 31, 2013

HP introduces ‘self-healing’ BIOS protection with SureStart

HP's new SureStart feature detects and 'heals' corrupted BIOS code.

By Robert Richardson • Sept. 20, 2013

Can an unqualified domain name cause man-in-the-middle attacks?

An unqualified domain name can make reaching internal resources easier, but expert Michael Cobb warns that man-in-the-middle attacks could result.

By Michael Cobb • Sept. 10, 2013