Infrastructure Security: Page

Comparing FTP vs. TFTP

There are some differences between FTP and TFTP, but here's the catch: both are inherently insecure protocols.

By Mike Chapple • Jan. 9, 2009

What firewall features will best protect a LAN from Internet hack attacks and malware?

In the case of a small network, the necessary firewall doesn't need to be anything complicated. Network security expert Mike Chapple reviews the key features of the network device.

By Mike Chapple • Dec. 4, 2008

How to hide system information from network scanning software

Network scanning software is capable of obtaining sensitive system information. Mike Chappel explains how implementing various firewalls can stop intrusive software in its tracks.

By Mike Chapple • June 13, 2008

Should iPhone email be sent without SSL encryption?

SSL encrypts all of the communication between your iPhone and your mail server. Network security expert Mike Chapple explains how important that feature really is.

By Mike Chapple • April 16, 2008

Should a domain controller be placed within the DMZ?

When creating an Active Directory network, is it necessary to place domain controllers in the DMZ? Network security expert Mike Chapple explains.

By Mike Chapple • April 4, 2008

Network session data analysis with Snort and Argus

This edition of Snort Report departs from the standard format to introduce Argus, a session data collecting tool that can work alongside Snort. Learn how session data can complement Snort's alert data for network session analysis

By Richard Bejtlich • April 1, 2008

Is Triple DES a more secure encryption scheme than DUKPT?

Both DES and TDES use a symmetric key, but Michael Cobb explains their separate and distinct roles in protecting financial transactions.

By Michael Cobb • March 27, 2008

How to secure an FTP connection

Network security expert Mike Chapple offers three tips that enable an FTP connection without opening up an enterprise to security risks.

By Mike Chapple • March 13, 2008

Cleansing an infected mail server

Learn five measures you can take to when cleaning up a massive email virus infection

By Brien Posey • Jan. 17, 2008

Firewall redundancy: Deployment scenarios and benefits

There are, however, several good reasons to deploy multiple firewalls in your organization. Let's take a look at a few scenarios.

By Mike Chapple • Jan. 17, 2008

Does Teredo present security risks to the enterprise?

Teredo allows internal networks to transition to IPv6, interconnecting them through their NAT devices and across the IPv4 Internet. Ed Skoudis explains why this function isn't as innocent as it seems.

By Ed Skoudis • Jan. 4, 2008

Snort frequently asked questions

Snort users are asking about its capabilities. These frequently asked questions about Snort discuss what the open source security tool can do and the right ways to use Snort.

By Richard Bejtlich • Jan. 2, 2008

Preparing for uniform resource identifier (URI) exploits

URIs have always been a user-friendly way to recognize and access Web resources. By crafting malicious URLs and manipulating protocol handlers, however, attackers have devised new attacks that take advantage of the URI's locator functionality. Web security expert Michael Cobb explains how the identifier exploits may start a fresh round of problems for developers and users alike.

By Michael Cobb • Oct. 11, 2007

What are the network security risks of streaming video?

Streaming video and audio sites are frequently visited on both home computers and work computers. Learn about streaming video security risks and what to do to protect your client's network.

By Russell Vines • Sept. 13, 2007

Should a router be placed between the firewall and DMZ?

Modern firewalls have the ability to serve as a router, negating the need of another device on a network. There are exceptions to this router rule, however. Network security expert Mike Chapple explains.

By Mike Chapple • Aug. 21, 2007

How does SSL ‘sit’ between the network layer and application layer?

SSL is neither a network layer protocol nor an application layer protocol. In this SearchSecurity.com Q&A, Michael Cobb explains how SSL "sits" between both layers.

By Michael Cobb • July 31, 2007

What are the drawbacks to application firewalls?

Application-layer firewalls examine ingoing and outgoing traffic more carefully than traditional packet-filtering firewalls, so why are some holding back on deployment? In this SearchSecurity.com Q&A, Michael Cobb reveals some cost and performance issues.

By Michael Cobb • May 31, 2007

How secure are document scanners and other ‘scan to email’ appliances?

Copiers and document scanners have always posed challenges for information security teams. In this SearchSecurity.com Q&A, Michael Cobb reveals how the right policies can control the use (and abuse) of these devices.

By Michael Cobb • May 30, 2007

What is an Nmap Maimon scan?

Systems are often designed to hide out on a network. In this SearchSecurity.com Q&A, network security expert Mike Chapple explains how Nmap Maimon scans can get a response out of them.

By Mike Chapple • April 24, 2007

How do a DMZ and VPN work together?

In this SearchSecurity.com Q&A, network security expert Mike Chapple explains the three distinct network zones in a typical firewall scenario and reveals how the DMZ and VPN, in particular, co-exist.

By Mike Chapple • April 22, 2007

How can hackers bypass proxy servers?

Hackers are bypassing proxy servers all the time and doing so for a variety of reasons. In this SearchSecurity.com expert Q&A, Ed Skoudis points out the holes in your protective filtering tools.

By Ed Skoudis • April 9, 2007

Can a TCP connection be made without an open port?

A company may claim it has an "application" that allows computers to communicate without opening any ports, but network security expert Mike Chapple reveals whether you should believe the hype or not. Read more in this SearchSecurity.com Q&A.

By Mike Chapple • Feb. 19, 2007

How should security and networking groups manage the firewall?

When it comes to firewalls, the networking group often handles the installation, while the information security department writes the rules. Should these responsibilities be split? In this expert Q&A, security management pro Shon Harris reveals how each group should contribute to the firewall management process.

By Shon Harris • Feb. 12, 2007