March 2010 Archives

nFX Cinxi One Undergoes Rigorous Assessment Mandated for National Security Systems


netForensics, Inc., a leader in the Security Information Management market, today announced that it has formally entered into evaluation for Common Criteria Evaluation Assurance Level (EAL) 2+ certification for its nFX Cinxi One v.4.1 appliances. Domus IT Security Laboratory is the third-party standards testing laboratory, accredited by the Standards Council of Canada (SCC) that is responsible for evaluating technology security products that meet the highest level of standards for use by the U.S. government.

Click here for the full story

netForensics CEO Dale Cline Named to Rutgers University's CEO Roundtable

President and CEO Dale Cline has been named to Rutgers University's CEO Roundtable. Cline, one of just a handful of technology leaders selected to the roundtable, joins forty other CEOs and corporate leaders throughout the tri-state area. "We are very excited that Dale Cline has decided to participate in this roundtable," said Michael Pazzani, Vice President of Research for Rutgers University. "Dale's impressive experience in the technology industry and as a leader of one of the foremost security information management companies in the world is of great value to our community and to our students. We look forward to his feedback and expertise."

Click here for the full story

In the below article Microsoft reviews the Waledac Botnet take down, as well as, mentions a number of botnet shutdowns that have recently taken place. The article also mentions sudosecure.net a Waledac tracking site

The article goes on to talk about Operation 49, a Botnet Take Down taskforce, an "innovative application of a tried and true legal strategy"

"On February 22, in response to a complaint filed by Microsoft ("Microsoft Corporation v. John Does 1-27, et. al.", Civil action number 1:10CV156) in the U.S. District Court of Eastern Virginia, a federal judge granted a temporary restraining order cutting off 277 Internet domains believed to be run by criminals as the Waledac bot."

"This legal and industry operation against Waledac is the first of its kind, but it won't be the last"

Microsoft Technet on Waledec-takedown

Related articles by Zemanta

• Waledac Botnet TAKEDOWN: Microsoft Wins Court Approval To Topple Botnet Army (huffingtonpost.com)
• Krebs on Security: Microsoft Ambushes Waledac Botnet, Shutters Whistleblower Site (boxofmeat.net)
• Botnet Army To Be Deactivated In Microsoft Takedown (huffingtonpost.com)
• With an unusual legal move, Microsoft disrupts rampant spam botnet Waledac (seattlepi.com)
• With legal nod, Microsoft ambushes Waledac botnet (news.cnet.com)
• Microsoft's Botnet War (robbiz1978.blogspot.com)

Bill LeRoy, Security and Compliance Analyst with netForensics, will be speaking tomorrow, Friday, March 12th, at the Information Systems Security Association-Delaware Valley Chapter (ISSA-DV) meeting at the Springfield Country Club in Springfield, PA. During his presentation, Bill will explore the topic of information security management and aligning the information security program with information technology and business strategies. Attendees will have the opportunity to learn about the valuable benefits of information security management solutions as Bill examines how companies can implement real-time analytics and notifications to protect critical assets in agile business environments as well as assess one's compliance status at anytime.

Click here for the full story

The overall theme this year at the RSA 2010 Conference in San Francisco that surrounded the conference was Information Security in Cloud Technologies how to prevent the Cloud Technologies from raining on everyone's parade. The article that I am highlighting in this blog "Research Challenges in Enterprise Cloud Computing: It is important to highlight cloud computing research challenges from an enterprise perspective because cloud computing is not simply about technological improvement of data centers but a fundamental change in how IT is provisioned and used."

Another interesting insight about this article is the inclusion of Nichols Carr's book "The Big Switch: Rewiring the World, from Edison to Google" noting that in the earily 1900's companies maintained their own power plants even though it was not their main expertise and how companies are maintaining their own Data Centers even though it is not their primary expertise. It is interesting though that last week on CBS 60 minutes broadcast the topic was how Cloud Computing providers are leading the way to provide their own green technology power plants.

The effects on IT and Security roles in their relationships with the user community and service providers will continue to evolve, as IT departments must make sure their cloud services can be migrated or failed over between service providers should one cloud service provider go out of business, as well as issues concerning certification, interoperability, API's between cloud vendors as well as SLA management, Privacy Rights Protection, and Intellectual Property Protection. "It it not clear "whether a cloud will be considered to legally be in one designated location [...] or in every location that has a data center that is part of the cloud"

These research challenges are interdisciplinary in nature, and there is a need for more co-operation between researchers, cloud users, and service providers.

REF;

Research Challenges in Enterprise Cloud Computing

netForensics announced that Network Products Guide, the industry's leading information technology research and advisory guide has named nFX Cinxi One, a winner of the 2010 Product Innovation Award. This award is given to vendors that show excellence and vision in delivering best of breed technology. This honor coincides with netForensics appearance this week at the security industry's premier event, RSA Conference 2010 in San Francisco, CA, where the company will showcase the award winning nFX Cinxi One Security information and event management (SIEM) and log management appliance.

Click here for the full story