Infrastructure Security: Page

Are FedRAMP security controls enough?

Cloud service providers are working with authorized third-party auditors to meet FedRAMP security controls. The 3PAOs tell us how it’s going, so far.

By Joseph Granneman • June 3, 2013

Amazon S3 encryption overview: How to secure data in the Amazon cloud

Learn details for employing Amazon S3 encryption features. Expert Dave Shackleford compares S3 encryption to other cloud provider offerings.

By Dave Shackleford • May 31, 2013

How to configure a VLAN to achieve the benefits of VLAN security

Expert Brad Casey explains how to configure a VLAN in order to achieve the benefits of VLAN security, including protection against insider attacks.

By Brad Casey • April 23, 2013

BYOD security: How to remotely wipe iPhone and Android devices

Remote data wipe is key to any BYOD security policy, but each OS handles it differently. Lisa Phifer covers how to use it with other controls to protect data.

By Lisa Phifer • Jan. 10, 2013

Windows Server 2012 security: Is it time to upgrade?

Expert Michael Cobb wades through the security features of Windows Server 2012 to find out what's new and beneficial in Microsoft's latest release.

By Michael Cobb • Jan. 8, 2013

Examining Kindle Fire security, Silk browser security in the enterprise

Do Kindle Fire security issues, combined with weak Silk browser security, make the red-hot consumer device too risky for enterprises? Michael Cobb explains.

By Michael Cobb • May 7, 2012

P2P encryption: Pros and cons of point-to-point encryption

P2P encryption is an emerging technology; one that may be helpful for many companies, especially merchants. Mike Chapple dissects the pros and cons.

By Mike Chapple • Dec. 6, 2011

IEEE 802.11: Handling the standard’s wireless network vulnerabilities

IEEE 802.11 has several known vulnerabilities, so what's the best way for enterprises to handle them? Expert Anand Sastry explains.

By Anand Sastry • Aug. 24, 2011

Securing a multi-tenant environment

Learn some of the key elements for secure multi-tenancy.

By Robbie Higgins • March 11, 2011

Why it’s important to turn on DEP and ASLR Windows security features

In the quest for application security, many developers are disabling or incorrectly implementing two important Windows security features. In this expert response, Michael Cobb explains why ASLR and DEP should always be turned on.

By Michael Cobb • July 5, 2010

Your USB port management options

When it comes to managing USB ports, the choice is yours. Mike Chapple reviews your three best options.

By Mike Chapple • June 14, 2010

Secure DMZ Web server setup advice

Network security expert Anand Sastry describes how to ensure a secure DMZ Web server setup involving network attached storage (NAS).

By Anand Sastry • June 2, 2010

MD5 security: Time to migrate to SHA-1 hash algorithm?

Many organizations have been replacing the MD5 hash algorithm with the SHA-1 hash function, but can the MD5 hash algorithm still be used securely?

By Michael Cobb • May 19, 2010

Using Windows software restriction policies to stop executable code

Software restriction policies are one way to prevent known malware and file-sharing applications from taking control of your network.

By Tom Chmielarski, Contributor • March 30, 2010

Security benefits of virtual desktop infrastructures

In a highly regulated industry where security is critical, financial-services firms are turning to virtual desktop infrastructures. In this tip, Eric Ogren explains the security benefits of virtualized desktops and virtual workspace projects, including malware-resistant software configurations and enhanced data loss prevention.

By Eric Ogren • Nov. 3, 2009

How to prevent ActiveX security risks

Application expert Michael Cobb explains why ActiveX security relies entirely on human judgment.

By Michael Cobb • Sept. 22, 2009

What are new and commonly used public-key cryptography algorithms?

Expert Michael Cobb breaks down a variety of encryption algorithms and reviews the use cases for several types of cryptography.

By Michael Cobb • Aug. 28, 2009

How to defend against rogue DHCP server malware

Rogue DHCP server malware is a new twist on an old concept. The good news is that effective threat mitigation strategies exist; the bad news is that many organizations haven't bothered to deploy them.

By Sherri Davidoff • July 2, 2009

Should enterprises be running multiple firewalls?

While there may be scenarios where a single firewall is an appropriate architecture for an organization, it's equally true that many environments may benefit from the use of more than one network device

By Mike Chapple • June 22, 2009

Comparing an application proxy firewall and a gateway server firewall

There are many types of firewalls in use in today's enterprises, so it's easy to get confused about the functions of each. In this expert response, learn the difference between a proxy server firewall and a gateway server firewall.

By Mike Chapple • May 26, 2009

Do you need an IDS or IPS, or both?

Cut through the hype and learn the differences and benefits of intrusion detection and prevention systems.

By Joel Snyder • May 7, 2009

How to analyze a TCP and UDP network traffic spike

What does it mean when TCP and UDP network traffic spikes? Network security expert Mike Chapple explains what this means for enterprise network security management.

By Mike Chapple • April 14, 2009

How many firewalls do you need?

Whether your organizations needs multiple sets of firewalls depends on whether they will protect clients, servers or both and what kind of traffic they will monitor.

By Joel Snyder • March 2, 2009

How does a Web server model differ from an application server model?

A Web server model and an application server model share many similarities but require different defense methods. Each model, for example, calls for distinct placement of application servers.

By Michael Cobb • Feb. 11, 2009

How to perform a network device audit

From unauthorized applications to rogue devices like data-slurping USB sticks, enterprise networks face a growing number of security risks. For financial-services firms, the data loss or network intrusions that can result from unauthorized network devices can be devastating. Network device audits are critical to ensure devices such as routers and firewalls are configured properly. In this tip, Judith Myerson explains how to prepare and initiate a network device audit

By Judith M. Myerson, contributor • Jan. 27, 2009