« May 2010 | Main | July 2010 »

Posts from June 2010

28 June 2010

InfoSecElmo

Not exactly a major security awareness resource, but http://twitter.com/InfoSecElmo should be on everyone's Twitter feed. Some cute little slogans and reminders. Read more →

Posted by on 28 June 2010 at 09:01 PM in Cybersecurity Training, IT Security, Network Security, Operations Security | | Comments (2)

| |

23 June 2010

New SSL Inspection Solutions: Are they helping us or not?

I saw some presentations and papers about a new technology that is able to decrypts SSL traffic and sends it to existing security and network appliances on high speed networks. This technology enables existing IPS solutions to identify risks normally hidden by SSL such as regulatory compliance violations, viruses, malware, data loss, intrusion attempts, etc. This is a very good approach to detect/block those attacks (there are reports showing a increase on attacks using SSL traffic) but I see some risks related. If someone uses this technology to decrypt the traffic and get the info? What are the mitigation actions... Read more →

Posted by on 23 June 2010 at 05:07 PM in Insider Risk, IT Security, Network Security | | Comments (1)

| |