Application Security — Features

Experts only: time to ditch the antivirus?

To the average IT security practitioner, the idea of disabling antivirus on new machines might seem blasphemous. After all, <a href="http://www.csoonline.com/article/342820">weren't we all told in IT Security 101 that everyone needs AV</a> to keep the malware and data thieves at bay?

Bill Brenner | 25 Jun | Read more

Phoenix Freeze auto-locks laptops via smartphone

A new product from Phoenix Technologies, <a href="http://www.phoenixfreeze.com/">called Freeze</a>, lets you use BlackBerry or iPhone Bluetooth to tell a PC that you're leaving the area and want it to lock up. When you return, Phoenix Freeze can also automatically unlock the machine so it's ready for you. However, it only works on Windows PCs, doesn't support 64-bit platforms, disables all other Bluetooth peripherals and seems to be a bit buggy for an official release. Phoenix Freeze for BlackBerry and iPhone

Al Sacco | 25 Jun | Read more

How Microsoft Influenced Adobe Security In a Good Way

When I first started writing about information security five years ago, all a writer had to do was mention Microsoft in the same headline space as "security vulnerability" to strike page-view gold. In 2004 Microsoft was a couple years into its Trustworthy Computing Initiative but it remained the software company IT security practitioners hated with glee.

Bill Brenner | 10 Jun | Read more

How Facebook and Twitter are changing data privacy rules

CIOs think about <a href="http://www.cio.com/article/32306/Privacy_Is_Your_Business">privacy</a> the way some people think about exercise: with a sigh and a sense of impending pain. Outside of regulated industries like health care--where patient privacy is paramount--privacy affects CIOs as a corollary of security when, say, a laptop holding millions of people's records is lost or hackers siphon off customer data.

Michael Fitzgerald | 12 Jun | Read more

Web App Firewalls: How to Evaluate, Buy, Implement

A Web application firewall (WAF) is designed to protect Web applications against common attacks such as <a href="http://blogs.csoonline.com/xss_the_spark_to_the_ajax_dynamite">cross-site scripting</a> and <a href="http://blogs.csoonline.com/sans_warns_of_mass_sql_injection_attacks">SQL injection</a>. Whereas network firewalls defend the perimeter of the network, WAFs sit between the Web client and Web server, analyzing application-layer traffic for violations in the programmed security policy, says Michael Cobb, founder of Cobweb Applications, a security consultancy.

Mary Brandel | 11 Jun | Read more

ATM malware spreading around the world

Cash machines around the world are hosting malware that can harvest a person's card details for use in fraud, a situation that could worsen as the malware becomes more sophisticated, according to a security researcher.

Jeremy Kirk | 06 Jun | Read more