Predictions for 2015 In the world of business, correctly seeing the future even a few months out can provide a leg up on the competition or, in the case of cybersecurity, on ever-present attackers. A missed guess can leave one scrambling to catch up. So, here are some predictions for 2015 on security from research firms Gartner and Forrester Research, and from Arthur W. Coviello Jr., executive chairman of RSA.
02 Jan | View galleries
Well-entrenched reporting structures and stilted conversations about risk are still preventing many CISOs from effectively communicating with their direct reports and company executives, a security analyst has warned as Melbourne prepares to welcome thousands of networking and security specialists for the annual Cisco Live! conference.
David Braue | 28 Feb | Read more
Enterprises are rushing to implement security tools to protect their networked environments – but those same tools comprised more than half of the 20 most vulnerability-ridden software products based on regular testing during the last quarter, according to new figures from Flexera Software.
David Braue | 30 Nov | Read more
A growing number of organisations are turning to telecommunications service providers to provide early-intervention defences against a climate in which distributed denial of service (DDoS) attacks are rapidly growing in size and severity, according to executives of DDoS mitigation specialist Arbor Networks.
David Braue | 31 Mar | Read more
In the wake of widely publicized breaches at firms like Target and Home Depot, retail CIOs are nearly unanimous in naming data security as one of their top priorities for 2015, according to a new survey.
Kenneth Corbin | 21 Feb | Read more
Predictions for 2015 In the world of business, correctly seeing the future even a few months out can provide a leg up on the competition or, in the case of cybersecurity, on ever-present attackers. A missed guess can leave one scrambling to catch up. So, here are some predictions for 2015 on security from research firms Gartner and Forrester Research, and from Arthur W. Coviello Jr., executive chairman of RSA.
Taylor Armerding | 02 Jan | Read more
Many Starbucks customers got a jolt in May when cyberthieves were discovered stealing money from their credit cards and payment accounts by first tapping into their Starbucks mobile apps. The culprit was believed to be a hole in an application-programming interface (API), though perhaps not on Starbucks' site but on another app where overused passwords were stolen and reused, according to reports.
Stacy Collett | 08 Aug | Read more
As natural philosopher and onetime baseball catcher Yogi Berra reportedly said: "It's tough to make predictions, especially about the future."
Taylor Armerding | 16 Dec | Read more
If you think the phrase "It's in the cloud" means that your data resides on the Internet and is thus accessible everywhere equally, think again. Most infrastructure-as-a-service (IaaS) cloud services share the same residence model as traditional hosting and outsourcing deployments -- they live in specific data centers in specific geographies. This means that customer data is generated and most likely stored in this physical location, giving it legal and privacy implications.
James Staten | 19 Apr | Read more
Deep packet inspection (DPI) is a technique that has seen success in traffic management, <a href="http://www.csoonline.com">security</a>, and network analysis. It is a technology that performs content analysis of network packets at line speed but is different from header or metadata-based packet inspection, which is typically performed by switches, firewalls, and IDS/IPS devices. A general DPI solution provides deep packet inspection for different applications.
Chenxi Wang | 10 Jun | Read more
How do you ensure you are choosing the right threat intelligence solution for your organization? The recent Forrester Research, Inc. report, “Use Actionable Threat Intelligence to Protect Your Digital Business,” describes the characteristics of effective threat intelligence and what to look for in a threat intelligence vendor (August 2014).