Security Operations: Page

When to take a bug bounty program public -- and how to do it

Bug-finding programs are valuable to enterprises, but they require a lot of planning and effort to be effective. Sean Martin looks at what goes into taking a bug bounty program public.

By Sean Martin • Sept. 9, 2016

Blue Coat Security Analytics Platform: Product overview

Expert Dan Sullivan takes a look at the Blue Coat Security Analytics Platform, which is designed to capture comprehensive network information and apply targeted security analytics.

By Dan Sullivan • Aug. 24, 2016

CISSP online training: Software Development Security domain

Spotlight article: Shon Harris explains the core concepts in the CISSP domain on software development security, including models, methods, database systems and security threats.

By Shon Harris • June 29, 2016

How CMMI models compare and map to the COBIT framework

Following ISACA's recent acquisition of the CMMI Institute, expert Judith Myerson takes a closer look at COBIT and CMMI models and how they compare to one another.

By Judith Myerson • June 17, 2016

Detecting and Combating Malicious Email

In this excerpt of Detecting and Combating Malicious Email, authors Julie JCH Ryan and Cade Kamachi discuss the elements of an email structure and touch on how attackers can use these elements to trick unwitting victims.

By SearchSecurity and Syngress • March 18, 2016

Designing and Building Security Operations center

In this excerpt of Designing and Building Security Operations Center, author David Nathans reviews the infrastructure needed to support a SOC and maintain SOC security.

By SearchSecurity and Syngress • March 18, 2016

Outdated apps: What are the best ways to address them?

Dead and outdated apps can pose serious security risks for enterprises. Expert Nick Lewis explains how to find and remove dead apps before they become a problem.

By Nick Lewis • March 1, 2016

How can software transplants fix bad code?

Copying and pasting bad code into an application is a big problem for developers, but software transplants can help. Expert Michael Cobb explains the technology.

By Michael Cobb • Dec. 28, 2015

Hewlett Packard Enterprise’s ArcSight ESM: SIEM product overview

Expert Karen Scarfone analyzes HPE's ArcSight Enterprise Security Management (ESM), a security information and event management (SIEM) tool used for collecting security log data.

By Karen Kent • Nov. 18, 2015

EMC RSA Security Analytics: SIEM product overview

Expert Karen Scarfone examines EMC RSA Security Analytics, a SIEM product for harvesting, analyzing and reporting on security log data across the enterprise.

By Karen Kent • Nov. 18, 2015

AlienVault OSSIM: SIEM Product overview

Expert Karen Scarfone checks out AlienVault's Open Source SIEM and Unified Security Management products for collecting event data from various security logs within an organization.

By Karen Kent • Nov. 18, 2015

Splunk Enterprise: SIEM product overview

Expert Karen Scarfone examines Splunk Enterprise, a security information and event management (SIEM) product for collecting and analyzing event data to identify malicious activity.

By Karen Kent • Nov. 18, 2015

SolarWinds Log and Event Manager: SIEM product overview

Expert Karen Scarfone examines SolarWinds Log and Event Manager, a security information and event management (SIEM) tool for collecting and analyzing event data to identify malicious activity.

By Karen Kent • Nov. 18, 2015

IBM Security QRadar: SIEM product overview

Expert Karen Scarfone takes a look at IBM Security QRadar, a security information and event management (SIEM) tool used for collecting and analyzing security log data.

By Karen Kent • Nov. 18, 2015

LogRhythm’s Security Intelligence Platform: SIEM product overview

Expert Karen Scarfone examines LogRhythm's Security Intelligence Platform, a SIEM tool for analyzing collected data.

By Karen Kent • Nov. 18, 2015

Comparing the best intrusion prevention systems

Expert contributor Karen Scarfone examines the best intrusion prevention systems to help you determine which IPS products may be best for your organization.

By Karen Kent • Nov. 12, 2015

Comparing the top Web fraud detection systems

Expert Ed Tittel explores the features of the top Web fraud detection systems and compares critical purchasing criteria.

By Ed Tittel • Nov. 4, 2015

The malware lifecycle: Knowing when to analyze threats

Not responding to low-level threats can be perilous, yet enterprises can't always examine each issue. Expert Nick Lewis explains when an investigation is imperative.

By Nick Lewis • Oct. 14, 2015

How should enterprises manage social media compliance incidents?

Social media compliance incidents in financial institutions are on the rise. Here are the most common violations and how to avoid them in the future.

By Mike Chapple • Oct. 14, 2015

How to perform a forensic acquisition of a virtual machine disk

Virtualization expert Paul Henry provides a step-by-step guide to imaging a virtual machine disk (*flat.vmdk) in a forensically sound manner.

By Paul Henry • Oct. 6, 2015

Cyber Reconnaissance, Surveillance and Defense

In this excerpt of Cyber Reconnaissance, Surveillance and Defense, author Robert Shimonski describes commonly used mobile technology and how phone tracking works.

By SearchSecurity and Syngress • Oct. 5, 2015

Choose the best vulnerability assessment tools

This Buyer's Essentials guide helps InfoSec pros assess vulnerability management products by explaining how they work and by highlighting key features corporate buyers should look for so they can evaluate vendor offerings.

By Mike Chapple • Oct. 1, 2015

Can a new encryption trick prevent reverse engineering?

Expert Michael Cobb explains how reverse engineering can be made more difficult with an approach called Hardened Anti-Reverse Engineering System or HARES.

By Michael Cobb • Aug. 17, 2015

Our AWS encryption keys were exposed accidentally -- now what?

Exposing encryption keys is never a good thing, but knowing the steps to take after such an incident can help limit damage to an enterprise. Expert Dan Sullivan explains.

By Dan Sullivan • Aug. 13, 2015

Comparing the top wireless intrusion prevention systems

Expert Karen Scarfone examines the top wireless intrusion prevention systems (WIPS) to help readers determine which may be best for them.

By Karen Kent • Aug. 4, 2015