Mobile security problems & solutions: our podcast from Gartner

Eric Green has put together a very-well produced podcast from last week's Gartner conference where Larry Ponemon, Stan Gatewood, and I discussed mobile security risks and metrics on the show floor.

Also, check out Eric's other podcasts on his site...very sharp guy.

Read More

Responsibility & action come from individuals not government

Being in DC and Chicago this week watching local news and observing all the bumper sticker slogans reminds me of the saddening enormity of how all this change we can believe in is impacting our country and the future of our families. The thing that stands out the most is the lack of personal responsibility and the dependence on government to handle all our woes - both in our personal lives and as it relates to information security. It's always someone else's problem....and the government can come to everyone's "rescue" such as Joe Lieberman's ridiculous "Cybersecurity (Government Growth) Bill" government growth bill. [I haven't even gotten started this...more to come].

Well, I was reading in USA Today today about how locals in Orange Beach, AL are NOT waiting on Obama or BP to protect their coastline. Instead, the local government hired engineers themselves to fix the problem. And it's working! You've got to read the story. It's very inspiring and it shows that there is hope in mankind - like these people who take the initiative to fix what's happening in their area. No big government needed to do that.

Read More

Dario Franchitti and I

As many of you know I'm a motorsports nut -both as a driver and a fan. This provided the influence for my Security On Wheels logo. Well, after my speaking session at Gartner yesterday I headed out of DC early this morning. Unfortunately, we had a long flight delay heading over to Chicago where I'm taking a class but the wait and the hassle were worthwhile. I got to meet and briefly chat with Indy Car driver Dario Franchitti (this year's Indy 500 winner and super nice guy) at O'Hare:






















I've had the pleasure of meeting Bob Varsha, now Dario. Who will I run into next? I'm kinda hoping for Scott Pruett or Michael Schumacher. :-)

Read More

Like Metasploit? You've gotta check out Metasploit Express.

Here's a piece I just wrote for SearchEnterpriseDesktop.com where I talk about Rapid7's new Metasploit Express. It has its kinks and was a bit finicky to use but Metasploit Express will no doubt provide a breath of fresh air for pen testers - and now, less technical auditors - all around.

Read More

Ethical hacking and Windows

I recently recorded a podcast with my esteemed editor at SearchWindowsServer.com, Brendan Cournoyer, where we talked about ethical hacking, finding the things that matter in your environment, testing tools and my new book Hacking For Dummies, 3rd edition. Check it out:

How ethical hacking fits into Windows security tests

Read More

Looking under the hood of the new OWASP Top 10 for 2010

While I'm on a roll posting some recent content I thought I'd list this one as well:

The new OWASP Top 10 for 2010 – Risk and Realities

In this piece I wrote for Acunetix's blog I talk about what the new OWASP Top 10 for 2010 is about, what it's not, and some considerations for leveraging it to help you minimize your business risks.

Read More

Using Windows 7's virtual machine for security testing

Outside of those executives who have their heads in the sand over security there's hardly anything that can keep you from getting your work done more than a Windows system junked up with a bunch of security testing tools.

Well, if VMware or VirtualBox haven't been a good fit, perhaps Windows XP Mode in Windows 7 will be. It's a cheap and seamless way to run your security testing tools in an isolated environment while maintaining the integrity of your host computer. Check out this piece I wrote for SearchEnterpriseDesktop.com:

Using Windows XP Mode for security testing in Windows 7

Read More