You are here: silicon.com > Resources > White Papers > Security > Security Administration > Security Management

Security Management White Papers

Protection Poker: Structuring Software Security Risk Assessment and Knowledge Transfer

Tags:
security management

Overview Discovery of security vulnerabilities is on the rise. As a result, software development teams must place a higher priority on preventing the injection of vulnerabilities in software as it is developed. Because the focus on software security has increased only recently, software development teams often do not have expertise in techniques for identifying security risk, understanding the impact of a vulnerability, or knowing the best mitigation strategy. The paper proposed the Protection Poker activity as a collaborative and informal form of misuse case development and threat modeling that plays off the diversity of knowledge and perspective of the participants. An excellent outcome of Protection Poker is that security knowledge passed around the team.

Further White Paper Details
Publisher	North Carolina State University	File Format	PDF
Date Published	September 2008
Format	White Papers
Topics	Security Management, Network Security

Did you find this white paper useful?

Balancing Security Against Productivity

What makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...

Publisher:
Novell

Activate Today!Realize ROI with IntelÂ® vPro Technology and Microsoft System Configuration Manager

Join the team from the Intel vPro Expert Center for an informative Webcast on the ROI savings and activation process for PCs with Intel® vPro™ technology and Microsoft System Configuration...

Publisher:
Intel

Tags:
portable computers

Animated Demo of vPro Systems

This animated demo shows how vPro offers security and manageability on the chip.

Publisher:
Intel

Tube Lines reaps rewards of upgrading to IntelÂ®CoreÂ™2 processor with vProÂ™technology

Tube Lines has a 30-year Public Private Partnership (PPP) contract with London Underground. It is responsible for the maintenance and upgrade of the infrastructure on the Jubilee, Northern and Piccadilly...

Publisher:
Intel

Tags:
portable computers

Video Case Study: Verizon UK

This video case study looks at how Chris Maylor, head of architecture services at Verizon UK, went about implementing vPro.

Publisher:
Intel

Security giant hit by hacker attack

But we can't fault them for being imperfect," he said, "BugTraq plays a valuable role. This was probably a revenge attack for telling the world about the vulnerability," said McNab. Postings are monitored for malicious content, but the DoS software...

Channel:
Security Strategy

Universities study dangers of tech "monoculture"

The researchers intend to create an application that could generate diversity in key aspects of software programs, thus making the same vulnerability less effective as a means of attack against the population as a whole.

Channel:
Security Strategy

Firefox open to exploit code attacks

A second vulnerability exists in the IconURL parameter in InstallTrigger.install(). Information passed to this parameter is not properly verified before it's used, allowing an attacker to gain user privileges.

HP to hack its customers

We could do as little as pop up a window saying 'this machine is vulnerable to Sasser' but we can escalate the mitigation if necessary to take the system completely offline. For example, Code Red exploited a vulnerability in MS IIS web service...

Will Mac security fears rise in line with growth?

The level of vulnerability is a function of the size of the code-base and it is inevitable that the Mac OS contains a significant number of unrecognised vulnerabilities. There have been more vulnerabilities discovered in OS X than in XP over the...

Channel:
Security Strategy
Tags:
mac,
apple

Web 2.0 threat looms

XSS is one of the top 10 web application vulnerabilities identified by the Open Web Application Security Project (OWASP), along with injection attacks and malicious file execution. Earlier this year, Fortify Software undertook some research into...

Featured White Papers

The Value of Location Intelligence in the Communications Industry

Public Services are under pressure, the challenge is to do more with less. How do you improve citizen satisfaction, increase cost efficiencies and improve service delivery? The power of location intelligence is helping many local authorities and government departments make more informed decisions and derive greater value from current location-based information and data. Read this whitepaper to see how you can take advantage of location intelligence.

Publisher:
Pitney Bowes

Best Practices for Translating Customer Satisfaction into Revenue

Today's support organisations are focused on two top-level metrics: financial results and customer satisfaction. For most, it's easy to track financial performance, but customer satisfaction is akin to speaking a foreign language. How do you quantify customer satisfaction? Download the Best Practices for Benchmarking Customer Satisfaction to get industry research the Association of Support Professionals (ASP) on how to measure and leverage customer satisfaction.

Publisher:
Citrix Online

HP print solutions and 3M

the objective for 3M was to optimize office printing infrastructure at 3Mlocations worldwide Reduce total cost and environmental footprint. Some of the business benefits acheived by switching to HP print soultions, More than $3 million in savings in first two years and Per page costs reduced by up to 90 percent.