Snort Rocks!

July 02nd, 2008 | Category: InfoSec

Ok, its been ages since I actually had snort up and running, so long in fact that the last time I used it, ACID was still the best way to deal with the alerts! Well after a couple of days (well a couple of hours here and there at least) I have a fully functional [...]

2 comments

How Security Should Work

July 01st, 2008 | Category: InfoSec

I work in a world of standards, opinions, controls and countermeasures, all encompassed in a foreign language of “InfoSec” and “ItSec”. This of course, while entertaining, is of little use to the world. I would like to propose a simple concept, probably high level, and I am sure my peers would argue is “inadequate”, that [...]

No comments

PCI-DSS Is it dead?

July 01st, 2008 | Category: InfoSec

First of all, legislation doesn’t die, it just becomes BAU. PCI is still a pain for most, but as a race, us Humans are fickle creatures who like our topics and news to be current, so the latest and greatest will always be at the top of the agenda.

No comments

IISP Top Gun event, Manchester, 30 June 2008

June 30th, 2008 | Category: InfoSec

Courtesy of the Institute for Information Security Professionals As I mentioned in the opening CEO article, the inaugural Top Gun event in Manchester was a great success on many fronts.  We had 20 participants, organised into the Red and Blue teams, plus 5 members of the Control Team, and the day just seemed to fly [...]

No comments

Layered Security

June 30th, 2008 | Category: InfoSec

The concept is simple, the more obstacles in the way the better. Let me abstract the concept for you….. …..you put your file in a safe, I crack into the safe. ………you put your file in a safe, and lock the safe in a strong/secure room, I crack the room then the safe.

No comments