Security Operations: Page

Comparing the best UTM products in the industry

Expert Ed Tittel examines the top unified threat management appliances to determine which one could be the best for your organization.

By Ed Tittel • July 22, 2015

Introduction to security analytics tools in the enterprise

Expert Dan Sullivan explains how security analysis and analytics tools work, and how they provide enterprises with valuable information about impending attacks or threats.

By Dan Sullivan • March 23, 2015

Beyond the Page: New SIEM Battleground Unfolds with Advanced Analytics

Robert Lemos looks at next-generation security information and event management analytic tools and cloud-based systems.

By Robert Lemos • March 3, 2015

SIEM systems: Using analytics to reduce false positives

Combining data from a variety of sources with better analytics can reduce workloads.

By Robert Lemos • March 3, 2015

Final five considerations when evaluating intrusion detection tools

Before making an investment in an intrusion detection and prevention system, be sure to read this list of five final considerations to keep in mind during intrusion detection system evaluation.

By Bill Hayes • Feb. 23, 2015

Introduction to intrusion detection and prevention technologies

Intrusion detection and preventions systems can be critical components to an enterprise's threat management strategy. Learn the history behind the technologies and why they are so important.

By Bill Hayes • Feb. 23, 2015

Evaluating enterprise intrusion detection system vendors

Selecting an intrusion detection and prevention system vendor can be a time-consuming task. Get help evaluating vendors and products with this list of must-ask questions. Plus, a comprehensive vendor list.

By Bill Hayes • Feb. 20, 2015

Benefits of the Cisco OpenSOC security analytics framework

Cisco's open source security analytics framework aims to help enterprises address visibility and incident management challenges. Expert Kevin Beaver discusses OpenSOC and what to consider when integrating it into an enterprise security strategy.

By Kevin Beaver • Feb. 17, 2015

Getting to know the new GIAC certification: GCCC

The new GIAC certification, GCCC, is not a very specific certification, but it could prove useful in organizations. Expert Joseph Granneman explains why.

By Joseph Granneman • Feb. 2, 2015

The Basics of Information Security

In this excerpt of The Basics of Information Security, author Jason Andress outlines methods for improving operating systems security.

By SearchSecurity and Syngress • Dec. 15, 2014

CISSP cryptography training: Components, protocols and authentication

Spotlight article: Shon Harris outlines the main topics in the CISSP domain on cryptography -- background information, cryptography components, digital authentication, protocols and more.

By Shon Harris • Oct. 3, 2014

FAQ: Were executives held accountable after the Target data breach?

Target Corp. has made major executive changes in the months following its massive 2013 data breach as the company strives to reassure customers and rework digital information security processes.

By Caron Carlson • Aug. 13, 2014

address space layout randomization (ASLR)

Address space layout randomization (ASLR) is a memory-protection process for operating systems (OSes) that guards against buffer-overflow attacks by randomizing the location where system executables are loaded into memory.

By Sharon Shea • June 23, 2014

Threat intelligence versus risk: How much cybersecurity is enough?

Learn how threat intelligence plays into global risk assessment as more security officers are tasked with damage control.

By Kathleen Richards, features editor • June 2, 2014

NSA TAO: What Tailored Access Operations unit means for enterprises

The NSA's top-secret Tailored Access Operations offensive hacking unit offers enterprise defense strategy lessons. Expert Nick Lewis discusses.

By Nick Lewis • April 10, 2014

Use John the Ripper to test network devices against brute forcing

Enterprise IT security organizations should test network devices using John the Ripper to ensure they are not susceptible to brute-force attacks.

By Brad Casey • Nov. 21, 2013

Inside the BREACH attack: How to avoid HTTPS traffic exploits

Enterprise threats expert Nick Lewis examines how the BREACH attack exploits HTTPS traffic and what enterprises can do to mitigate the attack risk.

By Nick Lewis • Nov. 11, 2013

Security incident response procedures: When to do a system shutdown

At times, security incident response procedures require drastic measures. Expert Nick Lewis explains when and how to perform a system shutdown.

By Nick Lewis • Aug. 15, 2013

RSA Silver Tail improves online fraud detection, enterprise security

Fraud prevention for the Web: RSA Silver Tail sets stage for enterprise-level security with big data and brand new interface.

By Kathleen Richards, Features Editor • June 19, 2013

Antivirus evasion techniques show ease in avoiding antivirus detection

In the wake of the New York Times attack, a look at antivirus evasion techniques show how easy it is to avoid antivirus detection and why new defenses are needed.

By Joe Granneman, Contributor • Feb. 26, 2013

Security incident management in the cloud: Tackling the challenges

Identifying security incidents in cloud environments isn't easy, but there are steps companies can take to ease the process.

By Dave Shackleford • Sept. 25, 2012

Comparing certifications: ISO 27001 vs. SAS 70, SSAE 16

Learn about ISO 27001 vs. SAS 70, and why enterprises should pay attention to SSAE 16 over SAS 70.

By SearchSecurity • Sept. 6, 2011

Locate IP address location: How to confirm the origin of a cyberattack

What's the best way to determine the origin of a cyberattack? Expert Nick Lewis weighs in.

By Nick Lewis • Aug. 25, 2011

The hypervisor security patch management process

Enterprises using virtualization must include hypervisor patching in their patch management process. Robbie Higgins explains why.

By Robbie Higgins • Feb. 3, 2011

Digital forensic challenges in a cloud computing environment

Cloud computing creates difficulties for digital forensic investigators.

By Cindy Casey, Ashley Podhradsky • Feb. 2, 2011