NETWORK WORLD NEWSLETTER: M. E. KABAY ON SECURITY 11/23/04 Today's focus: A stroke of LURHQ
Dear [EMAIL PROTECTED], In this issue: * Lots of resources at Web site of LURHQ Managed Security ��Services * Links related to Security * Featured reader resource _______________________________________________________________ This newsletter is sponsored by SBC Gimme Shelter! Converged Services Spell Relief For Beleaguered Network Managers Switched IP networks are rapidly becoming the corporate communications architecture of choice. By converging voice, data and video onto IP telephony platforms and Virtual Private Networks, enterprises can supply bandwidth when and where end users need it, while significantly lowering administrative and equipment costs. Click here to download this Whitepaper now http://www.fattail.com/redir/redirect.asp?CID=88643 _______________________________________________________________ THE 2005 IT ROADMAP: Future Vision - Attend the Technology Tour Event of the Year! Where is IT headed? Which technologies are the new must-haves? Which look good now but are dangerous risks? Find out first and see solutions free at this exclusive reserve-now-or-you're-on the-outside-looking-in event! http://www.fattail.com/redir/redirect.asp?CID=88563 _______________________________________________________________ Today's focus: A stroke of LURHQ By M. E. Kabay I'm always happy to find new security resources on the Web for my students and readers, so I was particularly pleased to run across the excellent work posted on the research pages of LURHQ Managed Security Services while I was looking for information on DNS cache poisoning the other day. The research area can be found here: <http://www.lurhq.com/research.html> I found a very nice analysis of the situation by Joe Stewart of the LURHQ Threat Intelligence Group. Like almost all the articles, it is available in both HTML and PDF. The abstract reads: "The old problem of DNS cache poisoning has again reared its ugly head. While some would argue that the domain name system protocol is inherently vulnerable to this style of attack due to the weakness of 16-bit transaction IDs, we cannot ignore the immediate threat while waiting for something better to come along. There are new attacks, which make DNS cache poisoning trivial to execute against a large number of nameservers running today." There are 28 other professional articles in the Technical Research section alone, including analyses of specific malicious software and vulnerabilities and more general papers such as: * A Firewall Log Analysis Primer. ��* Crossing the Line: Ethics for the Security Professional. ��* Intrusion Detection: In-Depth Analysis. ��* Managed Security Services and the Incident Handling Process. ��* Wormsign: Predicting the Next Outbreak. The Advisories page includes 19 papers on important vulnerabilities and exploits: <http://www.lurhq.com/advisories.html> The Industry Whitepapers section is the only section that requires registration, although these papers are also free. Topics include: * Achieving GLBA Compliance with Managed Security Services. ��* Achieving HIPAA Compliance with Managed Security Services. ��* Allocating Threat Management Resources. ��* An Introduction to Threat Intelligence Presentation. ��* LURHQ Solution to MSBlast Worm. ��* People, Process and Technology: The Foundation for Effective �� Incident Handling. ��* Reducing Risk with Effective Threat Management. ��* Threat Management in Action: SOC War Stories Webinar. Congratulations to LUHRQ on providing such a useful collection of thoughtful writing. RELATED EDITORIAL LINKS DNS Cache Poisoning - The Next Generation http://www.lurhq.com/cachepoisoning.html _______________________________________________________________ To contact: M. E. Kabay M. E. Kabay, Ph.D., CISSP, is Associate Professor in the Division of Business and Management at Norwich University in Northfield, Vt. Mich can be reached by e-mail <mailto:[EMAIL PROTECTED]> and his Web site <http://www2.norwich.edu/mkabay/index.htm>. A Master's degree in the management of information assurance in 18 months of study online from a real university - see <http://www3.norwich.edu/msia> _______________________________________________________________ This newsletter is sponsored by Intel IT Productivity; Increasing ROI Learn how to effectively measure employee productivity, manage IT investments and reduce the Total Cost of Ownership in enterprise data management. Visit Intel's IT Productivity center. Click here to download white papers, books and IDC Research. http://www.fattail.com/redir/redirect.asp?CID=88593 _______________________________________________________________ ARCHIVE LINKS Archive of the Security newsletter: http://www.nwfusion.com/newsletters/sec/index.html Breaking security news: http://www.nwfusion.com/topics/security.html _______________________________________________________________ FEATURED READER RESOURCE NW FUSION PARTNERS' SITES NOW AVAILABLE Network World Fusion Partners is a collaborative effort between Network World and sponsoring Partner companies. Each microsite contains best-of-breed information as well as custom content not found anywhere else, including a custom email newsletter and special offers. It is current, top-of-mind information that is readily accessible and bundled into one comprehensive package. Visit the NWFusion Partner sites to learn about storage solutions, network access solutions, optical networking and more. Visit NWFusion Partners at: <http://www.nwfusion.com/go/nwprr> _______________________________________________________________ May We Send You a Free Print Subscription? You've got the technology snapshot of your choice delivered at your fingertips each day. Now, extend your knowledge by receiving 51 FREE issues to our print publication. Apply today at http://www.subscribenw.com/nl2 International subscribers click here: http://nww1.com/go/circ_promo.html _______________________________________________________________ SUBSCRIPTION SERVICES To subscribe or unsubscribe to any Network World e-mail newsletters, go to: <http://www.nwwsubscribe.com/Changes.aspx> To unsubscribe from promotional e-mail go to: <http://www.nwwsubscribe.com/Preferences.aspx> To change your e-mail address, go to: <http://www.nwwsubscribe.com/ChangeMail.aspx> Subscription questions? Contact Customer Service by replying to this message. This message was sent to: [EMAIL PROTECTED] Please use this address when modifying your subscription. _______________________________________________________________ Have editorial comments? Write Jeff Caruso, Newsletter Editor, at: <mailto:[EMAIL PROTECTED]> Inquiries to: NL Customer Service, Network World, Inc., 118 Turnpike Road, Southborough, MA 01772 For advertising information, write Kevin Normandeau, V.P. of Online Development, at: <mailto:[EMAIL PROTECTED]> Copyright Network World, Inc., 2004 ------------------------ This message was sent to: [EMAIL PROTECTED]
