(ISC)² Blog

The virtual aspects of security

Security in the virtual world. It's impressive as people abandon concepts due to simple "name changes"... I'm referring here to network and system admins that stop deploying some traditional control measures as network segregation, traffic monitoring, security zones and others just because their virtual servers are now connected in a virtual switch... So, what? Even with technology changes, a network, even a virtual one is still a network and should be secured properly. It's not because we're consolidating and putting all together that old practices and rules are not valid. They might need to be adapted to the new technology... Read more →

Of Mice and Men

I’ve noticed a number of articles recently based on historical summaries of threats past – for instance, a ‘brief history of Apple hacking’ (see also my commentary for Infosecurity Magazine) and SC Magazine’s Ten Devastating Computer Viruses. In general, I’m more fascinated by the fact that the media and the reading public are so taken with top ten lists – in fact, I’ve considered the phenomenon a couple of times with some seriousness, as in Perfect Ten: Truth and Prognostication – than I am by the prospect of putting my own lists together. Though I have done from time to... Read more →