Malta Info Security

A recent article I read on eweek talks about a different approach to achieving a solid security defense by suggesting defense at different layers.

The strategy suggested takes the form of 5 layers namely:

Layer 1: Perimeter Security
Layer 2: Host Security
Layer 3: Identity and Access Management
Layer 4: Network Access Control
Layer 5: Vulnerability Management

Continue reading "A New Security Survival Guide - A review"

Monday, May 21. 2007

CISSP new endorsement requirements Posted by Donald Tabone in Certifications at 12:52

690 hits

CISSP new endorsement requirements

(ISC)2 ('ISC-squared'), the non-profit global leader in educating and certifying information security professionals throughout their careers, has announced its board of directors has approved new professional experience and endorsement requirements for the Certified Information Systems Security Professional (CISSP) certification.

Read the whole article here
More opinions and thoughts here and here

Monday, May 14. 2007

Security Awareness Videos Posted by Sandro Gauci in Articles at 17:35

464 hits

Security Awareness Videos

The 2007 Computer Security Awareness Video Contest have just announced their winners. The videos can be downloaded from their website. My favorites so far are the ones that focus on identity theft - When you least expected it and Identity Theft for Criminals - both have a health amount of humor so thats definitely a plus.

Friday, May 4. 2007

Humor: A New FireFox Security Problem Posted by Sandro Gauci in Humor at 17:17

701 hits

Humor: A New FireFox Security Problem

Friday, May 4. 2007

InfoSec Europe pictures and more Posted by Sandro Gauci in Articles at 12:30

Comments (0)
Trackbacks (0)

465 hits

InfoSec Europe pictures and more

A few more random observations (following InfoSec expo):

As you'll probably notice from the pictures below, the place was packed with vendors and people. This was especially true on the first and second day.
The second day seemed to have more press people than the first day.
There was a lack of giveaways. Unfortunately, we didn't manage to get enough freebies.
Only a few software vendors offer trial versions of their software. A lot of products are not easily reachable - you need to go through a lot of different channels to get an evaluation.
Sourcefire have a nice and useful web interface for Sourcefire 3D System.They seem to be on the right track in trying to provide what the end user wants. But .. its an appliance - so to try it out they need to ship you an evaluation box and then you ship it back to them.

Bruce Schneier yesterday published a few comments about Infosec Europe (and RSA): basically sums up to questioning why we need security software and systems, and emphasizing the importance that systems should be secure without the need for security software. On the right is a quick shot that I took of Bruce during the presentation of his paper "The Psychology of Security".

Here are some pictures which we took at InfoSec Europe.