<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" media="screen" href="/~d/styles/rss2full.xsl"?><?xml-stylesheet type="text/css" media="screen" href="http://feeds.feedburner.com/~d/styles/itemcontent.css"?><rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:feedburner="http://rssnamespace.org/feedburner/ext/1.0" version="2.0">

<channel>
	<title>The InfoSec Blog</title>
	
	<link>http://infosecblog.antonaylward.com</link>
	<description>System Integrity: Without Integrity you don't have Security</description>
	<lastBuildDate>Thu, 26 Jan 2012 14:26:06 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" type="application/rss+xml" href="http://feeds.feedburner.com/SystemIntegrity" /><feedburner:info uri="systemintegrity" /><atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="hub" href="http://pubsubhubbub.appspot.com/" /><feedburner:browserFriendly></feedburner:browserFriendly><item>
		<title>How to decide on what DVD backup software to use</title>
		<link>http://infosecblog.antonaylward.com/2012/01/17/how-to-decide-what-backup-software-to-use/</link>
		<comments>http://infosecblog.antonaylward.com/2012/01/17/how-to-decide-what-backup-software-to-use/#comments</comments>
		<pubDate>Tue, 17 Jan 2012 14:24:57 +0000</pubDate>
		<dc:creator>antonaylward</dc:creator>
				<category><![CDATA[How-to]]></category>
		<category><![CDATA[Policy]]></category>
		<category><![CDATA[backups]]></category>
		<category><![CDATA[K3b]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=889</guid>
		<description><![CDATA[You do do backups don&#8217;t you?  Backups to DVD is easy, but what software to use? Why not simply k3b ? But if it some down to it, there&#8217;s a decision tree you can and should work though. Do you want the DVD backup &#8216;mountable&#8217;? If it is then you can see each file and [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2012/01/17/how-to-decide-what-backup-software-to-use/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Doubts about “Defense in Depth”</title>
		<link>http://infosecblog.antonaylward.com/2011/11/30/doubts-about-defense-in-dept/</link>
		<comments>http://infosecblog.antonaylward.com/2011/11/30/doubts-about-defense-in-dept/#comments</comments>
		<pubDate>Wed, 30 Nov 2011 15:02:13 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Crime]]></category>
		<category><![CDATA[Failures]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Standards]]></category>
		<category><![CDATA[controls]]></category>
		<category><![CDATA[Defece in depth]]></category>
		<category><![CDATA[Ken Thompson]]></category>
		<category><![CDATA[perimeter]]></category>
		<category><![CDATA[trust]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=888</guid>
		<description><![CDATA[ So to have great (subjective) protection your layered protection and controls have to be &#8220;bubbled&#8221; as opposed to linear (to slow down or impede a  direct attack). I have doubts about &#8220;defence in depth&#8221; analogies with the military that many people in InfoSec use. Read what they are really talking about in those military examples: [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/11/30/doubts-about-defense-in-dept/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>On the HP Printer Hack</title>
		<link>http://infosecblog.antonaylward.com/2011/11/30/on-th-hp-printer-hack/</link>
		<comments>http://infosecblog.antonaylward.com/2011/11/30/on-th-hp-printer-hack/#comments</comments>
		<pubDate>Wed, 30 Nov 2011 12:45:36 +0000</pubDate>
		<dc:creator>antonaylward</dc:creator>
				<category><![CDATA[FAQ]]></category>
		<category><![CDATA[Policy]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Alan Cooper]]></category>
		<category><![CDATA[HP]]></category>
		<category><![CDATA[Printer]]></category>
		<category><![CDATA[Risk analysis]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=887</guid>
		<description><![CDATA[The hack to make the HP printers burn was interesting, but lets face it, a printer today is a  special purpose computer and a computer almost always has a flaw which can be exploited. In his book on UI design &#8220;The Inmates are Running the Asylum&#8221;, Alan Cooper makes the point that just about everything [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/11/30/on-th-hp-printer-hack/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Warning – they are out to get you.</title>
		<link>http://infosecblog.antonaylward.com/2011/09/08/warning-they-are-out-to-get-you/</link>
		<comments>http://infosecblog.antonaylward.com/2011/09/08/warning-they-are-out-to-get-you/#comments</comments>
		<pubDate>Thu, 08 Sep 2011 17:22:06 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Crime]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[McAfee]]></category>
		<category><![CDATA[paranoia]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=867</guid>
		<description><![CDATA[McAfee has released a new study on malware in cars: http://www.mcafee.com/autoreport Now you may think that this is scaremongering on the part of McAfee because their traditional market is drying up. Not so, this is actually a threat we have been aware of or nearly half a century: http://www.amazon.com/four-weekend-Belmont-Science-Fiction/dp/B0007FCDJY/ref=sr_1_8?s=books&#38;ie=UTF8&#38;qid=1315499979&#38;sr=1-8 &#160;]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/09/08/warning-they-are-out-to-get-you/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The real reasons for documentation – and how much</title>
		<link>http://infosecblog.antonaylward.com/2011/08/24/reason-for-documentation/</link>
		<comments>http://infosecblog.antonaylward.com/2011/08/24/reason-for-documentation/#comments</comments>
		<pubDate>Wed, 24 Aug 2011 12:14:09 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Human Factors]]></category>
		<category><![CDATA[ISO27K]]></category>
		<category><![CDATA[Standards]]></category>
		<category><![CDATA[documentation]]></category>
		<category><![CDATA[meetings]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=866</guid>
		<description><![CDATA[he documentation required and/or needed by ISO-2700x is a perenial source of dispute in the various forums I subscribe to. Of course management has to define matters such as scope and applicability and the policies, but how much of the detail of getting there needs to be recorded?  How much of the justification for the [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/08/24/reason-for-documentation/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Your Asset is my Consumable</title>
		<link>http://infosecblog.antonaylward.com/2011/08/22/your-asset-is-my-consumable/</link>
		<comments>http://infosecblog.antonaylward.com/2011/08/22/your-asset-is-my-consumable/#comments</comments>
		<pubDate>Mon, 22 Aug 2011 17:23:26 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Human Factors]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Standards]]></category>
		<category><![CDATA[Asset]]></category>
		<category><![CDATA[Cooking]]></category>
		<category><![CDATA[Grace Hopper]]></category>
		<category><![CDATA[Grace Murray Hopper]]></category>
		<category><![CDATA[History]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=838</guid>
		<description><![CDATA[We&#8217;ve had the &#8216;what is an asset&#8216; debate a few times in Gary Hinson&#8217;s ISO27001 forum on Googlegroups, but I&#8217;d like to re-iterate that an asset is not necessarily (or even) a material object such as a computer, laptop, router or the like. &#8216;Some day, on the corporate balance sheet, there will be an entry [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/08/22/your-asset-is-my-consumable/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>TV kills!</title>
		<link>http://infosecblog.antonaylward.com/2011/08/18/tv-kills/</link>
		<comments>http://infosecblog.antonaylward.com/2011/08/18/tv-kills/#comments</comments>
		<pubDate>Thu, 18 Aug 2011 12:19:44 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Human Factors]]></category>
		<category><![CDATA[Humour]]></category>
		<category><![CDATA[Four Arguments for the Elimination of Television]]></category>
		<category><![CDATA[Policy]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[Television]]></category>
		<category><![CDATA[Vulnerability]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=837</guid>
		<description><![CDATA[I keep telling everybody that TV is injurious to your (mental) health, but does anyone listen? Why should they? They didn&#8217;t when Gerry Mander presented his Four Arguments for the Elimination of Television, and he was in a position to know. A total departure from previous writing about television, this book is the first ever [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/08/18/tv-kills/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>His Bipolar made him do it</title>
		<link>http://infosecblog.antonaylward.com/2011/08/09/his-bipolar-made-him-do-it/</link>
		<comments>http://infosecblog.antonaylward.com/2011/08/09/his-bipolar-made-him-do-it/#comments</comments>
		<pubDate>Tue, 09 Aug 2011 21:09:50 +0000</pubDate>
		<dc:creator>antonaylward</dc:creator>
				<category><![CDATA[Crime]]></category>
		<category><![CDATA[Human Factors]]></category>
		<category><![CDATA[Humour]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=836</guid>
		<description><![CDATA[http://compliancesearch.com/compliancex/current-affairs/his-bipolar-made-him-do-it/ An accused hedge fund fraudster’s mother is showing support, by claiming her son is not to blame for defrauding investors out of over $2.3 million, its his bipolar’s fault. Well, its better than &#8220;The Dog Ate My Homework&#8221;. Keep taking the tablets, Mr Klatch! &#160;]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/08/09/his-bipolar-made-him-do-it/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Using ALE … inappropriately</title>
		<link>http://infosecblog.antonaylward.com/2011/08/07/using-ale-inappropriately/</link>
		<comments>http://infosecblog.antonaylward.com/2011/08/07/using-ale-inappropriately/#comments</comments>
		<pubDate>Sun, 07 Aug 2011 13:16:38 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Failures]]></category>
		<category><![CDATA[Rants and Raves]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[ale]]></category>
		<category><![CDATA[Business]]></category>
		<category><![CDATA[Risk analysis]]></category>
		<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=813</guid>
		<description><![CDATA[Like many forms of presenting facts, not least of all about risk, reducing complex and multifaceted information to a single figure does a dis-service to those affected. The classical risk equation is another example of this;  summing, summing many hundreds of fluctuating variables to one figure. Perhaps the saddest expression of this kind of approach [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/08/07/using-ale-inappropriately/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Schneier on Security: Hacking Cars Through Wireless Tire-Pressure</title>
		<link>http://infosecblog.antonaylward.com/2011/08/06/schneier-on-security-hacking-cars-through-wireless-tire-pressure/</link>
		<comments>http://infosecblog.antonaylward.com/2011/08/06/schneier-on-security-hacking-cars-through-wireless-tire-pressure/#comments</comments>
		<pubDate>Sat, 06 Aug 2011 20:24:48 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Human Factors]]></category>
		<category><![CDATA[Rants and Raves]]></category>
		<category><![CDATA[Social]]></category>
		<category><![CDATA[Standards]]></category>
		<category><![CDATA[nanny state]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=834</guid>
		<description><![CDATA[http://www.schneier.com/blog/archives/2010/08/hacking_cars_th.html A few alarming things here. More nanny State : In other words, the nanny state is forcing upon us expensive and insecure systems that aren&#8217;t as effective as a human being just doing what he&#8217;s supposed to, but we should just think of the children we&#8217;re &#8220;protecting&#8221; with this misguided effort. Never mind the [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/08/06/schneier-on-security-hacking-cars-through-wireless-tire-pressure/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Would you buy a computer from a company like this?</title>
		<link>http://infosecblog.antonaylward.com/2011/08/06/would-you-buy-a-computer-from-a-company-like-this/</link>
		<comments>http://infosecblog.antonaylward.com/2011/08/06/would-you-buy-a-computer-from-a-company-like-this/#comments</comments>
		<pubDate>Sat, 06 Aug 2011 20:18:50 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Rants and Raves]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Social]]></category>
		<category><![CDATA[obsolete]]></category>
		<category><![CDATA[Sony]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=831</guid>
		<description><![CDATA[http://consumerist.com/2011/05/security-expert-sony-knew-its-software-was-obsolete-months-before-psn-breach.html Its not a camera, its computer that takes pictures Its not a car, its a computer that gets you from place to place Its not a watch, its a computer that tells you the time Its not a radio, tv, hi-fi, phone &#8230;. its a computer Would you buy a computer from a company [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/08/06/would-you-buy-a-computer-from-a-company-like-this/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mistaken Thinking – Risk not threats</title>
		<link>http://infosecblog.antonaylward.com/2011/08/04/mistaken-thinking-risk-not-threats/</link>
		<comments>http://infosecblog.antonaylward.com/2011/08/04/mistaken-thinking-risk-not-threats/#comments</comments>
		<pubDate>Thu, 04 Aug 2011 11:34:47 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Rants and Raves]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Android]]></category>
		<category><![CDATA[Information security]]></category>
		<category><![CDATA[IPhone]]></category>
		<category><![CDATA[LinkedIn]]></category>
		<category><![CDATA[Mobile Computing]]></category>
		<category><![CDATA[Mobile device]]></category>
		<category><![CDATA[Wireless Data]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=808</guid>
		<description><![CDATA[Via a LinkedIn posting in the Infosecurity magazine forum titled &#8220;Internet Threats Posed By Mobile Devices: How Can We Prevent Them?&#8221; I came to http://www.mxsweep.com/blog/bid/65075/Internet-Threats-Posed-By-Mobile-Devices-How-Can-We-Prevent-Them OUCH OUCH OUCH! The mobile devices don&#8217;t pose threats. The mobile devices represent risks. Threats are external. They are not under your control. The article title is clearly confusing THREATS [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/08/04/mistaken-thinking-risk-not-threats/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Economic Impact: Patent trolls chase app developers out of the U.S</title>
		<link>http://infosecblog.antonaylward.com/2011/07/21/economic-impact-patent-trolls-chase-app-developers-out-of-the-us/</link>
		<comments>http://infosecblog.antonaylward.com/2011/07/21/economic-impact-patent-trolls-chase-app-developers-out-of-the-us/#comments</comments>
		<pubDate>Thu, 21 Jul 2011 11:46:43 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[11th Domain]]></category>
		<category><![CDATA[Human Factors]]></category>
		<category><![CDATA[Law]]></category>
		<category><![CDATA[Politics & Economics]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Social]]></category>
		<category><![CDATA[Economic]]></category>
		<category><![CDATA[England]]></category>
		<category><![CDATA[IntellectualVentures]]></category>
		<category><![CDATA[off-shore]]></category>
		<category><![CDATA[Patent]]></category>
		<category><![CDATA[PatentTroll]]></category>
		<category><![CDATA[United States]]></category>
		<category><![CDATA[Wall Street]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=781</guid>
		<description><![CDATA[http://www.linuxfordevices.com/c/a/News/Kootol-joins-Lodsys-as-a-patent-troll/?kc=LNXDEVNL072111 The Debt ceiling crisis will pass; even if there is a crash, the USA can recover from it &#8230; IF its core economic worth, that is its industrial productivity, is unharmed. There are a number of ways this can be harmed, poor credit rating among them, lack of availability for investments. But &#8220;off-shoring&#8221; has [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/07/21/economic-impact-patent-trolls-chase-app-developers-out-of-the-us/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>He’s not Ian Paisley</title>
		<link>http://infosecblog.antonaylward.com/2011/07/08/hes-not-ian-paisley/</link>
		<comments>http://infosecblog.antonaylward.com/2011/07/08/hes-not-ian-paisley/#comments</comments>
		<pubDate>Fri, 08 Jul 2011 12:07:13 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[11th Domain]]></category>
		<category><![CDATA[Failures]]></category>
		<category><![CDATA[Human Factors]]></category>
		<category><![CDATA[Social]]></category>
		<category><![CDATA[CISSP]]></category>
		<category><![CDATA[hectoring]]></category>
		<category><![CDATA[Ian Paisley]]></category>
		<category><![CDATA[One True Faith]]></category>
		<category><![CDATA[Religion]]></category>
		<category><![CDATA[Risk assessment]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=780</guid>
		<description><![CDATA[I was at a presentation yesterday. One of the vendor&#8217;s speakers, I&#8217;m sorry to say, was a CISSP. OK, he wasn&#8217;t Ian Paisley or any other radical religious zealot. BUT his was hectoring us and telling us that the Devil is out there gathering sinners (aka botnets) and tempting us (with web sites and spam) [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/07/08/hes-not-ian-paisley/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Risk Models that hide important information</title>
		<link>http://infosecblog.antonaylward.com/2011/07/02/models-that-hide-important-information/</link>
		<comments>http://infosecblog.antonaylward.com/2011/07/02/models-that-hide-important-information/#comments</comments>
		<pubDate>Sat, 02 Jul 2011 13:44:26 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[ISO27K]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Classical Risk Equation]]></category>
		<category><![CDATA[Residual Risk]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=778</guid>
		<description><![CDATA[Some people seem to be making life difficult for themselves with risk models such as &#8220;Impact * Probability&#8221; and as such have lead themselves into all manner of imponderable &#8230; since this model hides essential details. I discuss the CLASSICAL risk equation in my blog http://infosecblog.antonaylward.com/2010/05/19/the-classical-risk-equation/ There is a good reason for, no make that [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/07/02/models-that-hide-important-information/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Compliance?  What Compliance?</title>
		<link>http://infosecblog.antonaylward.com/2011/07/01/compliance-what-compliance/</link>
		<comments>http://infosecblog.antonaylward.com/2011/07/01/compliance-what-compliance/#comments</comments>
		<pubDate>Fri, 01 Jul 2011 11:21:42 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Failures]]></category>
		<category><![CDATA[Rants and Raves]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Business]]></category>
		<category><![CDATA[compliance]]></category>
		<category><![CDATA[Securities & Exchange Commission]]></category>
		<category><![CDATA[U.S. Securities and Exchange Commission]]></category>
		<category><![CDATA[Wall Street]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=772</guid>
		<description><![CDATA[Sometimes I wonder why we bother &#8230; The Securities and Exchange Commission doesn&#8217;t just enforce the rules that govern Wall Street. When asked, it often grants individual companies exemptions from the rules. Related articles Recently Updated &#8220;Securities Law Deskbook&#8221; &#8211; A Resource to Help Achieve Compliance and Avoid Regulatory Problems, From Bradford Publishing Co. (prweb.com) [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/07/01/compliance-what-compliance/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Sony backs U.S. ineffective cybersecurity legislation</title>
		<link>http://infosecblog.antonaylward.com/2011/07/01/re-cisspforum-sony-backs-us-cybersecurity-legislation/</link>
		<comments>http://infosecblog.antonaylward.com/2011/07/01/re-cisspforum-sony-backs-us-cybersecurity-legislation/#comments</comments>
		<pubDate>Fri, 01 Jul 2011 11:20:31 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Crime]]></category>
		<category><![CDATA[Failures]]></category>
		<category><![CDATA[Law]]></category>
		<category><![CDATA[Politics & Economics]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[compensatory]]></category>
		<category><![CDATA[Computer security]]></category>
		<category><![CDATA[controls]]></category>
		<category><![CDATA[detective]]></category>
		<category><![CDATA[Legislation]]></category>
		<category><![CDATA[preventative]]></category>
		<category><![CDATA[Sony]]></category>
		<category><![CDATA[United States Congress]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=771</guid>
		<description><![CDATA[http://www.vancouversun.com/news/Sony+backs+cybersecurity+legislation/5030033/story.html &#8220;If nothing else, perhaps the frequency, audacity and harmfulness of these attacks will help encourage Congress to enact new legislation to make the Internet a safer place for everyone,&#8221; the Sony executive said. &#8220;By working together to enact meaningful cybersecurity legislation we can limit the threat posed to U.S. all,&#8221; he said. To people [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/07/01/re-cisspforum-sony-backs-us-cybersecurity-legislation/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>A large scale failure of information security</title>
		<link>http://infosecblog.antonaylward.com/2011/06/28/a-large-scale-failure-of-information-security/</link>
		<comments>http://infosecblog.antonaylward.com/2011/06/28/a-large-scale-failure-of-information-security/#comments</comments>
		<pubDate>Tue, 28 Jun 2011 12:49:31 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Crime]]></category>
		<category><![CDATA[Failures]]></category>
		<category><![CDATA[Risk]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=766</guid>
		<description><![CDATA[http://www.informationweek.com/news/security/attacks/231000472 Does LulzSec&#8217;s nonstop hacking campaign, and apparent success at taking down everyone from Sony to the U.S. Senate, point to fundamental flaws in website security? &#8220;One of the assertions made by the recent run of high profile attacks was that all networks are vulnerable, and the groups behind these attacks either had or could [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/06/28/a-large-scale-failure-of-information-security/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>In praise of OSSTMM</title>
		<link>http://infosecblog.antonaylward.com/2011/06/21/in-praise-of-osstmm/</link>
		<comments>http://infosecblog.antonaylward.com/2011/06/21/in-praise-of-osstmm/#comments</comments>
		<pubDate>Tue, 21 Jun 2011 13:48:31 +0000</pubDate>
		<dc:creator>Anton Aylward</dc:creator>
				<category><![CDATA[Policy]]></category>
		<category><![CDATA[Rants and Raves]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Standards]]></category>
		<category><![CDATA[Consultants]]></category>
		<category><![CDATA[governance]]></category>
		<category><![CDATA[Open Source Security Testing Methodology Manual]]></category>
		<category><![CDATA[osstmm]]></category>
		<category><![CDATA[pen test]]></category>
		<category><![CDATA[Penetration test]]></category>
		<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[testing]]></category>
		<category><![CDATA[Vulnerability]]></category>
		<category><![CDATA[Web application]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=755</guid>
		<description><![CDATA[In case you&#8217;re not aware, ISECOM (Institute for Security and Open Methodologies) has OSSTMM3 &#8211; The Open Source Security Testing Methodology Manual &#8211; http://www.isecom.org/osstmm/ There&#8217;s an interesting segue to this at https://www.infosecisland.com/blogview/14651-How-to-Pen-Test-Crazy.html Skip over his ranting about the definition of &#8220;hackers&#8221; This is the meat: Wewrote the OSSTMM 3 to address these things. We knew [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/06/21/in-praise-of-osstmm/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Congressman blames U.S. unemployment crisis on iPad</title>
		<link>http://infosecblog.antonaylward.com/2011/04/19/congressman-blames-u-s-unemployment-crisis-on-ipad/</link>
		<comments>http://infosecblog.antonaylward.com/2011/04/19/congressman-blames-u-s-unemployment-crisis-on-ipad/#comments</comments>
		<pubDate>Tue, 19 Apr 2011 17:49:03 +0000</pubDate>
		<dc:creator>antonaylward</dc:creator>
				<category><![CDATA[Human Factors]]></category>
		<category><![CDATA[Politics & Economics]]></category>
		<category><![CDATA[Social]]></category>
		<category><![CDATA[IPad]]></category>
		<category><![CDATA[Jesse Jackson Jr]]></category>
		<category><![CDATA[off-shore jobs]]></category>
		<category><![CDATA[Steve Jobs]]></category>
		<category><![CDATA[The Godfather]]></category>
		<category><![CDATA[unemployment]]></category>
		<category><![CDATA[United States]]></category>

		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=832</guid>
		<description><![CDATA[http://www.zdnet.com/blog/apple/congressman-blames-us-unemployment-crisis-on-ipad/9968?tag=nl.e539 In it U.S. Representative Jesse Jackson Jr (D-IL) blasts Apple and Steve Jobs claiming that the iPad is responsible for killing thousands of American jobs. In the rambling manifesto Jackson claims that the iPad is to blame because it enables anyone to easily download books and newspapers. Thus everyone who works at bookstores (i.e. [...]]]></description>
		<wfw:commentRss>http://infosecblog.antonaylward.com/2011/04/19/congressman-blames-u-s-unemployment-crisis-on-ipad/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

