The world of computer security can often be a strange and compelling one. Many outsiders, or those with little knowledge of computers, just don’t understand the whole uproar over various issues, such as whether Microsoft Vista is more secure then Linux or Mac. It’s all moot as far as the general population is concerned. But, for those of us who work in the industry, it is just more grist for the mill.
Read more at http://www.securityfocus.com/columnists/454
An article from Don Parker
Wednesday, 17 October 2007
Of hackers and ego
Friday, 5 October 2007
Oracle Database Security - Why Oracle?
For more than a quarter century Oracle has developed and refined state-of-the-art database security for government and commercial organizations worldwide. Oracle Database 11g security addresses the critical requirements around data privacy and protection, regulatory compliance, and data consolidation.
State-of-the-art security—Out-of-the-box security includes fine-grained auditing, virtual private database, row level security, database encryption, and label security
Application protection—Built-in protection at the data level means you don't have to modify your applications to secure them
Guards against inside threats—Oracle Database offers the industry's only administrative access control solution.
National Cyber Security Awareness Month
October is National Cyber Security Awareness Month. Microsoft and the National Cyber Security Alliance (NCSA) have teamed up again this year to help increase awareness about Internet security issues.
With a campaign that focuses on public relations activities, educational programs, and events for home users, small businesses, education audiences, and child safety forums, we want to encourage everyone who uses a personal computer to keep one idea in mind: protect yourself before you connect to the Internet.
Find out more at http://www.microsoft.com/protect/promotions/us/cybersecuritymonth_us.mspx
Oracle Security
If you use Oracle database software and you value the data held in the databases you have deployed then the site of Pete Finnigan is that you need to visit and digest. Check it out at http://www.petefinnigan.com
CISSP® Professional Experience Requirement
Effective 1 October 2007, professional work experience requirements for the CISSP will increase from four to five years, and direct full-time security professional work experience will be required in two or more of the ten CISSP CBK domains. A new endorsement policy will also be in effect, requiring anyone who passes a CISSP, CAP, or SSCP exam to have their qualifications endorsed by another (ISC)² credential holder. These changes will not affect those who sit for an examination on or before 30 September 2007. For more information, please refer to the Experience Requirement Change FAQs.