New Whitepapers #3

some more white papers from Source Forge for you to check out.
You must register to get these whitepapers.

Maximizing Configuration Management IT Security Benefits with Puppet

Real-time Protection for Hyper-V

Data Growth and Protection

Physical Security in Mission Critical Facilities

AES New Instructions

More SSL Issues

So it seems the high amount of SSL news will continue through this whole week. Starting off with DigiNotar filing for bankruptcy after their recent compromise. Especially when word was released that over 200 certificates were issued during the compromise.

Then we find out that researchers have discovered A vulnerability resides in versions 1.0 and earlier of TLS.  Their new tool, BEAST, is going to be released at the Ekoparty Security Conference. Our intrepid researchers say they've figured out a way to defeat SSL by breaking the underlying encryption it uses:

“While other attacks focus on the authenticity property of SSL, BEAST attacks the confidentiality of the protocol. As far as we know, BEAST implements the first attack that actually decrypts HTTPS requests.”

This is also being discussed on the ISC Diary and other places, as there is some debate on whether or not this type of attack was discussed already in an earlier paper. Google has already included a work around in the developer version of Chrome, but i don't think there has been word on when the fix/ work around will be introduced in the consumer version of the browser.




Much going on in the SSL/TLS world still........

New Whitepapers #2

Take Steps Now to Safeguard Print Devices and Printed Data


Future-Proofing Your Authentication Infrastructure


7 Criteria for Evaluating Securityas-a-Service Solutions


The Art of Teleworking


Countering modern threats requires hunting intruders


Put Together a Data Protection Plan


S e l e c t i n g a F i l e A c t i v i t y Mo n i t o r i n g S o l u t i o n

New Whitepaper #1: Musings on the PSN Attack Vector

New whitepaper available if you want to provide your information.

this one is on the Sony PSN attacks.

Here are the power point slides from the presentation.