Why CISO is the hardest tech role to fill

Companies are under constant threat from cyberattacks and the situation is only getting worse with the rise of ransomware and whaling scams as a variant of phishing, according to recent cybersecurity reports. Yet the shortage of seasoned CISOs, inconsistent policies around compensation and a lack of proper metrics means some companies are under-investing in cybersecurity.To read this article in full or to leave a comment, please click here

Intro to Tcl Scripting on Cisco IOS

What is a Tcl Script?  Also known as “tickle”, Tcl (Tool Command Language) is a scripting language commonly used for rapid prototyping, scripted applications, GUIs, and … testing! Cisco IOS has a form of Tcl scripting built in which can be used for automating tests and tasks from within the IOS command line. To begin scripting with Tcl on a Cisco router for example you would first need to enter the Cisco IOS Tcl shell by typing  “tclsh” from the priviledged exec mode (Router# tclsh) which brings the router prompt to Router(tcl)#. If you are able to access this tcl-level mode it means Tcl is supported on your IOS device and you can begin to enter your script commands.

In this post we will see what it takes to use tcl scripting to automate a series of ping commands for testing layer 3 connectivity to multiple IP destinations. Before we get started we should note that it is best to first write out the script in your favorite text editor such as Notepad or Sublime Text. This way we can paste the script into the CLI when it is ready and also save it for future reference and Continue reading

Microsoft tweaks IE11-Edge interoperability in Windows 10

Microsoft yesterday said it will introduce changes in this summer's Windows 10 Anniversary Update to simplify switching from Internet Explorer 11 (IE11) to Edge, and back.The changes will be aimed at enterprises, the only customer group Microsoft recommends running IE11 in the new operating system."We recognize that some enterprise customers have line-of-business applications built specifically for older web technologies, which require Internet Explorer 11," the company said in a Thursday post.INSIDER Review: Enterprise guide to Windows 10 Previously, Microsoft included "Enterprise Mode" in Windows 10, a feature that lets an IT staff limit IE11's operation to specific legacy websites or web apps.To read this article in full or to leave a comment, please click here

LightCyber’s attack detection platform distills alerts and generates actionable information  

This column is available in a weekly newsletter called IT Best Practices.  Click here to subscribe.  The Ponemon Institute published a report called The Cost of Malware Containment that reveals some interesting statistics—none of which will surprise the people in the trenches who work hard every day to protect their organizations' networks.Ponemon surveyed 630 IT and IT security practitioners who have responsibility for detecting, evaluating and/or containing malware infections within their organization. According to the research, organizations receive an average of nearly 17,000 malware alerts a week. Of these, fewer than 20% (3,218) are considered reliable, meaning the malware poses a genuine threat and should be investigated. And even though more than 3,200 alerts are worthy of investigation, only 4% (705) actually do get investigated.To read this article in full or to leave a comment, please click here

LightCyber’s attack detection platform distills alerts and generates actionable information  

This column is available in a weekly newsletter called IT Best Practices.  Click here to subscribe.  The Ponemon Institute published a report called The Cost of Malware Containment that reveals some interesting statistics—none of which will surprise the people in the trenches who work hard every day to protect their organizations' networks.Ponemon surveyed 630 IT and IT security practitioners who have responsibility for detecting, evaluating and/or containing malware infections within their organization. According to the research, organizations receive an average of nearly 17,000 malware alerts a week. Of these, fewer than 20% (3,218) are considered reliable, meaning the malware poses a genuine threat and should be investigated. And even though more than 3,200 alerts are worthy of investigation, only 4% (705) actually do get investigated.To read this article in full or to leave a comment, please click here

DARPA extreme DDOS project transforming network attack mitigation

Researchers with the Defense Advanced Research Projects Agency (DARPA) have quickly moved to alter the way the military, public and private enterprises protect their networks from high-and low-speed distributed denial-of-service attacks with a program called Extreme DDoS Defense (XD3).The agency has since September awarded seven XD3 multi-million contracts to Georgia Tech, George Mason University, Invincea Labs, Raytheon BBN, Vencore Labs (two contracts) and this week to the University of Pennsylvania to radically alter DDOS defenses. One more contract is expected under the program.The UPenn project is developing defenses against distributed denial of service attacks that target specific protocols and their logic. These attacks are often difficult to diagnose and stop because the total volume of malicious traffic may be very low. The UPenn project attempts to pinpoint the specific protocol component that is under attack and then massively replicate that component to blunt the effects of the attack, DARPA stated.To read this article in full or to leave a comment, please click here

DARPA extreme DDOS project transforming network attack mitigation

Researchers with the Defense Advanced Research Projects Agency (DARPA) have quickly moved to alter the way the military, public and private enterprises protect their networks from high-and low-speed distributed denial-of-service attacks with a program called Extreme DDoS Defense (XD3).The agency has since September awarded seven XD3 multi-million contracts to Georgia Tech, George Mason University, Invincea Labs, Raytheon BBN, Vencore Labs (two contracts) and this week to the University of Pennsylvania to radically alter DDOS defenses. One more contract is expected under the program.The UPenn project is developing defenses against distributed denial of service attacks that target specific protocols and their logic. These attacks are often difficult to diagnose and stop because the total volume of malicious traffic may be very low. The UPenn project attempts to pinpoint the specific protocol component that is under attack and then massively replicate that component to blunt the effects of the attack, DARPA stated.To read this article in full or to leave a comment, please click here

Criminal defendants demand to see FBI’s secret hacking tool

A secret FBI hacking tool, used to compromise the Tor anonymous browser in one investigation, is facing challenges from criminal defendants, perhaps putting its future in doubt.Defendants have demanded to see details of the FBI network investigative technique (NIT), the agency's name for the relatively recent hacking tool, in a handful of criminal cases, but the agency has refused to disclose the information.A judge in a high-profile child pornography case, in which a website called Playpen was accessible only through Tor, is trying to decide whether the FBI should disclose the NIT"s source code to the defendant.If the FBI shares the source code, its hacking tools may be compromised in future cases, but the U.S. Constitution's Sixth Amendment gives the defendant a right to confront his accusers and challenge their investigation.To read this article in full or to leave a comment, please click here

Criminal defendants demand to see FBI’s secret hacking tool

A secret FBI hacking tool, used to compromise the Tor anonymous browser in one investigation, is facing challenges from criminal defendants, perhaps putting its future in doubt.Defendants have demanded to see details of the FBI network investigative technique (NIT), the agency's name for the relatively recent hacking tool, in a handful of criminal cases, but the agency has refused to disclose the information.A judge in a high-profile child pornography case, in which a website called Playpen was accessible only through Tor, is trying to decide whether the FBI should disclose the NIT"s source code to the defendant.If the FBI shares the source code, its hacking tools may be compromised in future cases, but the U.S. Constitution's Sixth Amendment gives the defendant a right to confront his accusers and challenge their investigation.To read this article in full or to leave a comment, please click here

Android apps run securely on Chrome OS in Linux containers

With first-quarter shipments exceeding Macs in the United States, Chromebooks are very popular. Schools and enterprises choose Chromebooks for their very streamlined use case: low cost, fast boot security, simplicity and ease of administration.Chromebooks just got a little more complicated, but for the better, with Google’s announcement that the Android Play Store will be available on Chromebooks and that Android apps will run on the Chrome operating system. The million Android apps—which include popular apps such as Adobe Photoshop, Microsoft Word and Skype and games such as Clash of Clans and Angry Birds—will remedy the Chromebook’s relative app sparsity.To read this article in full or to leave a comment, please click here

Android apps run securely on Chrome OS in Linux containers

With first-quarter shipments exceeding Macs in the United States, Chromebooks are very popular. Schools and enterprises choose Chromebooks for their very streamlined use case: low cost, fast boot security, simplicity and ease of administration.Chromebooks just got a little more complicated, but for the better, with Google’s announcement that the Android Play Store will be available on Chromebooks and that Android apps will run on the Chrome operating system. The million Android apps—which include popular apps such as Adobe Photoshop, Microsoft Word and Skype and games such as Clash of Clans and Angry Birds—will remedy the Chromebook’s relative app sparsity.To read this article in full or to leave a comment, please click here

IDG Contributor Network: Data is being ‘hoarded,’ not commercialized

Massive amounts of data is being collected, but isn’t being used to generate business growth, says a public body that has recently completed funding a 2.5-year research project on the subject.Big data should be used in an entrepreneurial way to create “profitable information-based products and services,” says British government agency Engineering and Physical Sciences Research Council (EPSRC) in a press release.At the moment, it’s just being “hoarded.”To read this article in full or to leave a comment, please click here

Stale beer no more: This app can tell you when it’s past its prime

There's a good chance your tastebuds would tell you when you're drinking stale beer, but now science has come to the rescue to spare them that pain.You can thank the chemists at Spain's Complutense University of Madrid, who have developed a sensor and Android app that can tell you when you shouldn't even bother having a sip.To monitor a beer's freshness, brewers often use chromatography techniques to measure indicative chemicals including furfural, a compound that appears during the aging process and gives beer a stale taste. The problem is, those techniques can be time-consuming and expensive.In this new work, published recently in the journal Analytical Chemistry, the researchers devised a system including sensor discs that detect the presence of furfural in beer. Made from a polymer similar to what's used to manufacture contact lenses, the sensors change color from yellow to pink when they come into contact with a beer containing furfural.To read this article in full or to leave a comment, please click here

Worth Reading: the “buy now” button

Enter the “Buy Now” button. A team of researchers from UC Berkeley and Case Western have published a study showing that customers think they are getting traditional ownership rights when they buy digital media online, even when a vendor’s site includes legal terms (often buried in click-wrap agreements) purporting to limit those rights. —deeplinks

LinkedInTwitterGoogle+Facebook

The post Worth Reading: the “buy now” button appeared first on 'net work.

1 … 2,940 2,941 2,942 2,943 2,944 … 3,832