The AusCERT 2013 security conference, which coincides with the government-sponsored <a href="http://www.staysmartonline.gov.au/awareness_week">National Cyber Security Awareness Week (NCSAW)</a>, dominated the news during the week, and the CSO Australia team was there in full force to hear the latest from industry experts from across Australia around the world.
David Braue | 27 May | Read more
Dr Lizzie Coles-Kemp is a senior lecturer in the Information Security Group, Royal Holloway University of London. She is keenly interested in how social behaviours influence our attitudes to security. For example, in communities where Internet accounts need to be shared between family members, the security professional's assumption that one account and password identifies one person is undermined. CSO spoke to Dr Coles-Kemp about the nexus between social behaviours and information security.
Richard Chirgwin | 24 May | Read more
Data is at its most valuable just after it's created, and vulnerability data in particular has a short half-life, says Packetloop's Michael Baker.
Richard Chirgwin | 24 May | Read more
Although web application attacks have existed for over the last 10 years, simple coding errors, failed input validation and output sanitization continue to exist in web applications that have led to disclosures for many well-known companies. The most prevalent web application attacks are SQL Injection, Cross Site Scripting and OS Command Injection. With an increased number of companies conducting buisness over the Internet, many attackers are taking advantage of lax security and poor coding techniques to exploit web applications for fame, notoriety and financial gain.
In a security industry that hasn't changed much in 20 years, SafeNet's Andrew Younger says, it's strange that nothing much has changed in that time – except that we keep failing.
Richard Chirgwin | 23 May | Read more
