My webinar this week: Data Protection: The Realities of Proactive vs. Reactive

Join me tomorrow around lunchtime (or breakfast depending on where you're at) for a webinar on Data Protection: The Realities of Proactive vs. Reactive

I'm going to talk for ~20 minutes and we'll have a Q&A at the end.

It's at 12pm ET and you can register here:
https://www1.gotomeeting.com/register/936383032

Hope to "see" you there!

Read More

View every day as a blessing

Between losing both grandmothers and helping my mom through a serious struggle she's having with cancer over the past 4 weeks combined with this news about Brian Tracy who has been a wonderful inspiration and mentor to me I'm compelled to say: View every day as a blessing for we truly don't know how much time we have here on Earth.

Read More

My 500th blog post + how does your salary compare to others?

I just realized that this is my 500th blog post. Hopefully you're up to 500 more posts of my security nonsense!

If you haven't seen it yet you should check out Global Knowledge's 2010 Salary Survey. It sheds some light on what you can and should be earning in IT and information security. Just remember that Global Knowledge is a training company and they want to tout how well -off you'll be by earning a certification. As I've ranted about in the past here and here - certifications aren't everything and are often nothing if you have little else to off your employer.

If you want to learn more about how to advance your career in IT or information security, be sure to check out the following audio programs I've developed:

Certifications, Degrees, or Experience - What's Best for Your Security Career?

Getting Started in Security

Read More

Tools & techniques for hacking Windows servers & workstations

Ever wonder how Windows servers get hacked? Perhaps you're unsure of which approach you need to use the get the most out of your security testing at the server and desktop levels? Or you may be wondering what you need to do to lock down Windows-based Web servers? Maybe you're curious about how Windows Server 2008 R2 stands up to security tests?

Well, I've got just what you need to know in the following tips I recently wrote for SearchWindowsServer.com and SearchEnterpriseDesktop.com:

How Windows Servers Get Hacked

Security testing: Finding the best method for your Windows servers

Tests for securing the internal Windows network

The right security tools for finding Windows desktop weaknesses

Web server security practices for Windows environments

How Windows Server 2008 R2 stands up to security checks

Read More

Pros and cons of disk imaging

Disk imaging is one of those awesome technologies that so many businesses can benefit from yet so few people (at least from what I see) are using it. Here's a new piece I wrote for SearchDataBackup.com where I talk about the pros and cons of disk imaging and how you can benefit from it:

Using disk imaging software in data backup and recovery

Read More

THE process for successful Web security testing

Here's a new piece I wrote for SearchSoftwareQuality.com where I talk about the lifecycle of testing for Web security flaws. From obtaining buy-in to reporting to the stakeholders, it's a process you need to master.

Security testing best practices for today's Web 2.0 applications

Read More

Two B I G reasons to secure your home computers/network

Here's a crazy story: burglar breaks into a home, uploads child pornography on the family computer, and tries to frame the husband of his co-worker who he had a crush on.

If this isn't a good enough reason to secure your home computers, I don't know what is.

Not to mention your wireless network. How'd you like one of those creeps we used to see on Dateline's To Catch a Predator doing what they do online using your Internet connection. Better hope you have some good investigators who can show what really happened.

Interestingly, most people are oblivious to this stuff...Amazing. What can you do.?

Read More