Page 114 - White Papers in Security Operations > Network Detection & Response

SANS 2014 Security Analytics and Intelligence Survey

Based on the results of this year's survey, there are several key takeaways for the security community. The use of analytics and threat intelligence to ferret out complex and stealthy threats from advanced attackers and insiders is improving security for some; automation is improving; and intelligence providers are...

Executive Summary: Security Benefits of Linux Based Infrastructure

Enterprises are increasingly adopting Linux as a secure, reliable, and high-performing platform that lowers acquisition and operating costs while providing the agility needed to anticipate and react to changing business conditions. In particular, the Red Hat Enterprise Linux (RHEL) operating environment, which is...

The Role of Linux in Datacenter Modernization

Datacenters are, and always have been, investments that evolve as the industry changes, new technologies emerge, and application needs change. However, today, datacenter managers are facing a daunting future that may not include any meaningful expansion of their datacenters in terms of floor space, yet their existing...

Enterprise Grade Linux: Improved Security, Reduced Cost

The IT world is on the precipice of enormous change. While full adoption of this change will not happen overnight, it has already begun to happen in the datacenter and for a user near you. Because of the substantial investments made by organizations in building out their datacenters, and thanks to the significant risk...

Managing Cybersecurity Risk in a HIPAA-Compliant World

Organizations are at a crossroads when deciding on the proper course of action for compliance with regulations applicable to the healthcare industry and how to manage risk to the security of sensitive health information. This is an important decision that shapes the foundation of an organization's security culture and...

The Three Phases of Securing Privileged Accounts

Attackers exploit valid credentials and/or privileged accounts 100% of the time. With those kinds of statistics, it is hard to imagine companies still turn a blind eye. The cost of doing nothing is routinely displayed in the endless stream of reports detailing yet another compromise in companies large and small around...

Implementing Essential Security Controls

Federal agencies are required by law to comply with the Federal Information Security Management Act (FISMA), which references the NIST SP 800-53 Recommendations. The long-awaited Revision 4 represents the first major review of the Recommendations in almost four years. These changes have important ramifications for...

IT Security by the Numbers: Calculating the Total Cost of Protection

Humorist Franklin P. Jones may have said it best: "When you get something for nothing, you just haven't been billed for it yet." These are wise words of warning for businesses counting on so-called "free" IT security software. Kaspersky Lab has created an eBook to help you calculate the true cost of protecting...

Security Technologies for Mobile and BYOD

Businesses today are faced with the almost insurmountable task of complying with a confusing array of laws and regulations relating to data privacy and security. These can come from a variety of sources: local, state, national, and, even, international law makers. This is not just a problem for big businesses. Even a...

Sponsored by RSA

Managing Cyber Risk: Are Companies Safeguarding Their Assets?

In the last few years, companies both in the United States and abroad have witnessed the steady growth of cyberattacks and corporate espionage. The financial losses and, worse, often irreparable reputational harm such incidents wreak have served to place a target squarely on the backs of board members to ensure they...

Sponsored by RSA

Breaking Through the GRC Value Ceiling

Technologies implemented to meet operational needs bring tangible benefits to an organization with focused, tactical functions. These tools bring value to organizations due to the focus on the specific business challenge at hand and most often help achieve goals at the operational level. However, certain processes...

Q3 2014 State of Infections Report

Damballa's Q3 State of Infections report discusses the state of continuous breach that enterprises face today. Key findings in this report include: Malware dwell time equates to loss; How to minimize risk of a POS malware breach; Where the security gaps are and how to close them....

Sponsored by RSA

Consumer Web Portals: Platforms At Significant Security Risk

The increasing number of digital identities, prevalence and impact of data breaches, and loss of customer information are driving a heightened requirement for effective consumer-facing identity and access management (IAM) solutions. Many organizations with consumer portals, however, do not have effective protections...

Sponsored by RSA

Card-Not-Present Fraud in a Post-EMV Environment: Combating the Fraud Spike

This white paper is based on data collected in two separate research efforts. In the first, Aite Group surveyed fraud executives at 36 large U.S. merchants from March to May 2014 to understand points of pain and planned solutions. Aite Group also interviewed card executives from payment networks and 18 of the top 40...

Enterprise Mobility: How to Protect Corporate Data

Every company will have a different path to mobile adoption, and final implementations will vary, depending on the needs of various business functions and on regulations that impact mobile policies. A simple way to evaluate where a business is and where it wants to be is to look at devices in terms of who owns them,...