http://www.sans.edu/research/security-laboratory en-us (C) SANS Institute 2012 webmaster@sans.org (SANS Webmaster) http://www.sans.edu/research/security-laboratory/article/2012_emerging_trends http://www.sans.edu/research/security-laboratory/article/2012_emerging_trends An emerging trends analysis and a stab at predictions for IT and security coming 2012-2014.

]]> http://www.sans.edu/research/security-laboratory/article/northcuttpredict2012 http://www.sans.edu/research/security-laboratory/article/northcuttpredict2012 Stephen Northcutt identifies emerging trends in information security for the 2012, 2013 timeframe.

]]> http://www.sans.edu/research/security-laboratory/article/certificate_signing http://www.sans.edu/research/security-laboratory/article/certificate_signing A common part of the security model for industrial IT applications is to never accept or run a program or driver that has not been signed by the appropriate publisher. However, while it appears to be strong protection against malicious code, in fact it is not.

]]> http://www.sans.edu/research/security-laboratory/article/pfeifer_thought_lead http://www.sans.edu/research/security-laboratory/article/pfeifer_thought_lead Bill Pfeifer is a Product Line Engineer at Juniper Networks supporting security software and data center firewalls. He has been in the IT field for 15 years, including stints at an Army tank base, a technology reseller, and some time at a financial services ASP. He holds a Bachelor’s degree in Civil Engineering from Penn State and an MBA with a human resources focus from Oakland University.

]]> http://www.sans.edu/research/security-laboratory/article/security_predict2011 http://www.sans.edu/research/security-laboratory/article/security_predict2011 A look at some of the potential emerging trends and security threats for 2012 and 2013. File was started to help prepare for a panel on the same subject at SANS Security West, May 6 - 11 2011 San Diego and also for an upcoming Keynote. Love to hear your thoughts on the subject.

]]> http://www.sans.edu/research/security-laboratory/article/did_attack_surface http://www.sans.edu/research/security-laboratory/article/did_attack_surface
One of the most important things to understand about defense in depth is attack surface. We can define attack surface as our exposure, the reachable and exploitable vulnerabilities that we have.

]]> http://www.sans.edu/research/security-laboratory/article/mgt512sections http://www.sans.edu/research/security-laboratory/article/mgt512sections This document is known as the "fairway markers" for SANS Security Essentials. It reflects the newest version of the course which will be taught for the first time December 2010 in Washington DC ( SANS CDI ). We invite alumni of the course to review the list and make suggestions as to what should be added or removed, prioritized or deprecated.

]]> http://www.sans.edu/research/security-laboratory/article/cole_predictions_10 http://www.sans.edu/research/security-laboratory/article/cole_predictions_10 Here are Dr. Eric Cole's top eleven security issues for 2011 - 2012.

]]> http://www.sans.edu/research/security-laboratory/article/2011_2012_predict http://www.sans.edu/research/security-laboratory/article/2011_2012_predict In addition to the work that I have done rounding up other people's thoughts, I also work as a futurist for IT and IT Security, and this is my set of predictions for 2011 and 2012. I hope they are useful to you.

]]> http://www.sans.edu/research/security-laboratory/article/2010_error_omission http://www.sans.edu/research/security-laboratory/article/2010_error_omission Alan Paller, Director of Research at the SANS Institute asked me to put together a list of the prominent security errors and omissions organizations are making as we enter 2010 and I have updated it for 2011. The following is taken straight from one of the courses I research, author and teach, Management 512 Security Leadership Essentials.

]]> http://www.sans.edu/research/security-laboratory/article/christopher_pogue http://www.sans.edu/research/security-laboratory/article/christopher_pogue Chris Pogue is a Senior Security Analyst for the Spiderlabs Incident Response and Digital Forensics team at Trustwave. He has over ten years of administrative and security experience including three years on the IBM ISS X-Force Emergency Response Services Team, five years with IBM’s Ethical Hacking Team, and 13 years of Active Military service in the US Army Signal Corps.

]]> http://www.sans.edu/research/security-laboratory/article/john_kanen_flowers http://www.sans.edu/research/security-laboratory/article/john_kanen_flowers John is a truly unique security thought leader. He has been involved in a number of start ups and is currently working on something fairly radical カネ|box (or kane|box).

]]> http://www.sans.edu/research/security-laboratory/article/sec_west10_predict http://www.sans.edu/research/security-laboratory/article/sec_west10_predict Stephen Northcutt thought it might be fun to interview the instructors in the speaker room at SANS Security West 2010 and get their take on the future. Sometimes your answer is different when it is given verbally.

]]> http://www.sans.edu/research/security-laboratory/article/weatherford http://www.sans.edu/research/security-laboratory/article/weatherford Mark is the CISO of the State of California and is a valued thought leader in Information Security.

]]> http://www.sans.edu/research/security-laboratory/article/2010_predictions http://www.sans.edu/research/security-laboratory/article/2010_predictions A look at some of the more well known 2010 security predictions and a quick check to see how they are doing.

]]> http://www.sans.edu/research/security-laboratory/article/kees_leune_leader http://www.sans.edu/research/security-laboratory/article/kees_leune_leader Kees has made many contributions to the information assurance community, but one, the use of rubrics to help guide the peer review of GIAC Gold papers means a lot to me. It means a lot to you as well, because it created a state change for higher quality in the Gold program. So those of us at the Security Laboratory are excited that he has chosen to be a part of the SecurityThought Leadership Project.

]]> http://www.sans.edu/research/security-laboratory/article/joel_yonts_leader http://www.sans.edu/research/security-laboratory/article/joel_yonts_leader Joel Yonts is a seasoned security executive with a passion for information security research.He has over 20 years of IT experience with certifications in the areas of Security Leadership, Computer Forensics, Malware Analysis, Incident Handling, and Reverse Engineering. His research interests include malware analysis and defense, computer forensics, and enterprise security.

]]> http://www.sans.edu/research/security-laboratory/article/maury_shenk_leader http://www.sans.edu/research/security-laboratory/article/maury_shenk_leader Maury Shenk, TMT Advisor at Steptoe and Johnson, working with a focus on intellectual property, information security and encryption issues, has agreed to be interviewed for the Security Thought Leadership project, Maury has also recently embarked on a consultancy business to build on new approaches for realizing value in technology and intellectual property He has agreed to be interviewed for the Security Thought Leadership project, and we certainly thank Maury for his time.

]]> http://www.sans.edu/research/security-laboratory/article/chris_wysopal_lead http://www.sans.edu/research/security-laboratory/article/chris_wysopal_lead Veracode’s CTO and Co-Founder, Chris Wysopal, was named one of InfoWorld's Top 25 CTO's and one of the 100 most influential people in IT by eWeek. One of the original vulnerability researchers and a member of L0pht Heavy Industries, he has testified on Capitol Hill in the US on the subjects of government computer security and how vulnerabilities are discovered in software. He is the author of “The Art of Software Security Testing” published by Addison-Wesley.

]]> http://www.sans.edu/research/security-laboratory/article/voip_se_asia http://www.sans.edu/research/security-laboratory/article/voip_se_asia An interview by Stephen Northcutt with Eric Cole, PhD and Paul Henry on the rise of VoIP in SE Asia and the unique security concerns inherent to VoIP.

]]> http://www.sans.edu/research/security-laboratory/article/benefraim_thought http://www.sans.edu/research/security-laboratory/article/benefraim_thought Amir Ben-Efraim, CEO and co-founder of Altor Networks has agreed to be interviewed for the Security Thought Leadership project. His company's booth at RSA2009 piqued my interest because they deal with one of my favorite subjects, Defense-in-Depth, but specifically in the virtual environment.

]]> http://www.sans.edu/research/security-laboratory/article/ed_hammersla http://www.sans.edu/research/security-laboratory/article/ed_hammersla Ed Hammersla has a background in trusted systems, as in the Orange Book. He understands the mechanics of low to high information transfer.

]]> http://www.sans.edu/research/security-laboratory/article/sec_thought_leader http://www.sans.edu/research/security-laboratory/article/sec_thought_leader With the Security Thought Leader project Stephen hopes to introduce you to some really great men and women. A security thought leader can be defined by certain criteria: a person who is recognized by their peers as a thought leader, who passes their information on to help others, who has innovative ideas, and who shares ideas as actionable distilled insights.

]]> http://www.sans.edu/research/security-laboratory/article/get_started_infosec http://www.sans.edu/research/security-laboratory/article/get_started_infosec This article considers getting started in computer and network security (physical or facilities security is out of the scope of this writing). This is an introduction; you may want to consider our introductory course that covers information security basics if you find you are interested in learning more about security, intro to Information Security.

]]> http://www.sans.edu/research/security-laboratory/article/currency_hackers http://www.sans.edu/research/security-laboratory/article/currency_hackers Growing evidence indicates a variety of attacks could cause significant economic harm to a target, an attack specifically designed to destabilize a currency might now be possible especially if sponsored by a party with significant economic power (i.e., a major country) or executed with precise timing during a high stress period on the economy.

]]>