Security Operations: Page

The future of SIEM: What needs to change for it to stay relevant?

Compared to security orchestration, automation and response (SOAR) software, SIEM systems are dated. Expert Andrew Froehlich explains how SIEM needs to adapt to keep up.

By Andrew Froehlich • May 30, 2019

How to find an MSP to protect you from outsourcing IT risks

Check out what questions to ask MSPs to make sure they have the right security systems in place to protect your organization against outsourcing IT risks.

By Kevin McDonald • May 28, 2019

CrowdStrike, NSS Labs settle legal disputes over product testing

CrowdStrike and NSS Labs have ended their legal dispute with a confidential settlement agreement, which resolves all lawsuits including NSS Labs' antitrust suit against the vendor.

By Rob Wright • May 24, 2019

What makes BSA’s secure software development framework unique?

BSA rolled out a new secure software development framework in an effort to promote best practices for secure software development and improve security for all.

By Peter Loshin • May 20, 2019

Women in cybersecurity work to grow voice in US lawmaking

To encourage more input from women in cybersecurity in the legislative process, the Executive Women's Forum went to Washington to discuss key issues with Congress.

By Kate Gerwig • May 15, 2019

DHS patching directive brings shorter deadlines

A new DHS directive placed new deadlines on patching critical vulnerabilities for federal agencies and experts are divided on whether the timelines are reasonable and realistic.

By Michael Heller • May 1, 2019

Take this cybersecurity-challenges quiz and score CPE credit

Just finished ISM's May 2019 issue? Solidify your knowledge, and get CPE credits too, by passing this 10-question quiz.

By Brenda Horrigan • May 1, 2019

2019’s top 5 free enterprise network intrusion detection tools

Snort is one of the industry's top network intrusion detection tools, but plenty of other open source alternatives are available. Discover new and old favorites for packet sniffing and more.

By Peter Loshin • April 29, 2019

How infrastructure as code tools improve visibility

Visibility into cloud infrastructures and applications is important for data security. Learn how to maintain that visibility while using infrastructure as code tools.

By Michael Cobb • April 26, 2019

The top 3 email security threats and how to defuse them

Understanding the nature of the top 3 email security threats -- malware, phishing and spoofed domains -- can help reduce their impact.

By Peter Loshin • April 25, 2019

The security benefits of using infrastructure as code

Infrastructure as code bolsters security and ensures security best practices are built into software development. Learn more about the use of infrastructure-as-code models.

By Michael Cobb • April 22, 2019

NSS Labs CTO Jason Brvenik talks security testing challenges

NSS Labs CTO Jason Brvenik talks about his company's relationship with security vendors following the company's antitrust suit against several endpoint protection vendors last year.

By Rob Wright • April 9, 2019

New game provides cybersecurity education for Girl Scouts

A new game provides cybersecurity education for Girl Scouts, who can earn virtual and real badges by playing. HPE's Liz Joyce talks about the partnership that led to the game.

By Madelyn Bacon • March 29, 2019

Simplify incident response for zero-day vulnerability protection and beyond

Protection against a zero-day vulnerability and other cyber-risks is complicated, but simplifying cybersecurity incident management could be the key to protecting online assets.

By Peter Sullivan • March 28, 2019

NSS Labs CTO discusses advanced endpoint protection testing, challenges

NSS Labs released the results of its new endpoint protection group test at RSA Conference 2019. NSS Labs CTO Jason Brvenik talks about the results, testing challenges and more.

By Rob Wright • March 28, 2019

Ghidra update squashes serious bugs in NSA reverse-engineering tool

The NSA answered lingering questions around what kind of support it would provide for Ghidra after releasing the tool as open source with a patch that fixed serious bugs.

By Michael Heller • March 28, 2019

How can I detect fileless malware attacks?

Monitoring process memory is one way to combat fileless malware attacks. Here's what you can do to protect your network against these campaigns.

By Nick Lewis • March 21, 2019

How automated patch management using SOAR can slash risk

Learn how to use security orchestration, automation and response, also known as SOAR, to ease the hassle of mundane tasks related to patch management.

By Mike Chapple • March 20, 2019

Automating incident response with security orchestration

Security orchestration, automation and response technology is now seen as a key aid to security pros attempting to thwart an onslaught of cyberattacks.

By Mike Chapple • March 20, 2019

How do I stop the screaming channel wireless threat?

A screaming channel attack is a new wireless threat making networks -- particularly those with IoT components -- vulnerable. Are there any safeguards to prevent these attacks?

By Nick Lewis • March 18, 2019

NSA releases Ghidra open source reverse-engineering tool

The National Security Agency launched its highly anticipated reverse-engineering tool, Ghidra. The free software offers features found in high-end commercial products.

By Antone Gonsalves • March 6, 2019

To improve incident response capability, start with the right CSIRT

Is your organization ready to build a computer security incident response team? Here are the questions that should be answered when building a CSIRT to maximize incident response capability.

By Peter Sullivan • March 4, 2019

CERT/CC’s Art Manion says CVSS scoring needs to be replaced

Security expert Art Manion discusses what he calls major problems within the Common Vulnerability Scoring System and explains why CVSS needs to be replaced.

By Rob Wright • Feb. 26, 2019

Security automation on display in 2019 RSAC Innovation Sandbox

Security automation will be a factor when most innovative startup is chosen at this year's RSAC Innovation Sandbox since almost all finalists use automation to improve security.

By Peter Loshin • Feb. 22, 2019

Why is the N-gram content search key for threat detection?

Detected malware can now efficiently be tracked due to VirusTotal's enterprise version of its software. Discover what N-gram is and how it can be used with Nick Lewis.

By Nick Lewis • Feb. 20, 2019