Copyright Dexa Systems http://www.dexasystems.com/rss/Dexa-Blog-Feed en-us Sat, 19 May 2012 20:03:12 CDT 5 http://www.dexasystems.com/rss/Dexa-Blog-Feed http://www.dexasystems.com/Themes/Admin/logo_captavi.jpg http://www.dexasystems.com/blog/2012/04/The-Vaccine-Approach-to-Cyber-Security http://www.dexasystems.com/blog/2012/04/The-Vaccine-Approach-to-Cyber-Security Fri, 20 Apr 2012 11:43:00 GMT A feeling of general malaise in the IT Security Industry prompted us to take a closer look at the current state of affairs. Despite the pervasive doom and gloom, there is perhaps a silver lining. Let’s take a look at malware, botnets and the other pesky critters wreaking all the havoc and how they may actually be serving a useful purpose. http://www.dexasystems.com/blog/2012/04/What-is-Threat-Modeling? http://www.dexasystems.com/blog/2012/04/What-is-Threat-Modeling? Wed, 11 Apr 2012 13:04:00 GMT Threat Modeling is a process which leads to better architecture, design, function and long-term security of software, hardware, information systems and even entire organizations. http://www.dexasystems.com/blog/2012/03/You’re-Not-Gonna-Put-That-in-Your-Computer,-Are-You? http://www.dexasystems.com/blog/2012/03/You’re-Not-Gonna-Put-That-in-Your-Computer,-Are-You? Wed, 07 Mar 2012 11:15:00 GMT In multiple research studies, USB devices that have been left in public places have been plugged into company PCs by those who have picked them up, despite no information on their origin. If the researchers had left spoons instead of USB devices, how many people would pick them up and put them in their mouth? http://www.dexasystems.com/blog/2012/01/Use-of-Special-Characters-in-Usernames-Can-Cause-Problems http://www.dexasystems.com/blog/2012/01/Use-of-Special-Characters-in-Usernames-Can-Cause-Problems Mon, 30 Jan 2012 12:15:00 GMT The use of multiple accounts, to handle separation of roles and responsibilities for a single person, has resulted in the increased use of special characters in usernames. http://www.dexasystems.com/blog/2012/01/openSource-DropBox http://www.dexasystems.com/blog/2012/01/openSource-DropBox Wed, 04 Jan 2012 10:33:00 GMT At long last, one is no longer beholden to DropBox or hacking away on command line with rsync for a convenient cloud file storage and synchronization service! http://www.dexasystems.com/blog/2011/11/Cyber-security,-the-SEC-and-You! http://www.dexasystems.com/blog/2011/11/Cyber-security,-the-SEC-and-You! Wed, 02 Nov 2011 15:21:00 GMT On October 13th the Corporate Finance division of the Securities and Exchange Commission (SEC) quietly released a document, CF Disclosure Guidance: Topic No. 2 , on the web that has the potential to make a major impact on the way that corporations look at cyber-security. http://www.dexasystems.com/blog/2011/10/Cyber-security,-the-SEC-and-You! http://www.dexasystems.com/blog/2011/10/Cyber-security,-the-SEC-and-You! Mon, 31 Oct 2011 19:26:00 GMT On October 13th the Corporate Finance division of the Securities and Exchange Commission (SEC) quietly released a document on the web that has the potential to make a major impact on the way that corporations look at cyber-security. What does it mean to you? http://www.dexasystems.com/blog/2011/09/What-does-a-Full-IT-Security-Assessment-look-like? http://www.dexasystems.com/blog/2011/09/What-does-a-Full-IT-Security-Assessment-look-like? Mon, 26 Sep 2011 14:09:00 GMT There are two orthogonal stacks in an IT ecosystem: Implementation or Doing and Parametric or Directing. A full security assessment covers all aspects of security that impact on an IT ecosystem and its supporting services. http://www.dexasystems.com/blog/2011/09/Spear-Phishing-Gets-More-Aggressive http://www.dexasystems.com/blog/2011/09/Spear-Phishing-Gets-More-Aggressive Mon, 19 Sep 2011 10:28:00 GMT A new technique for phishing has emerged. Dubbed “spear phishing,” it targets specific individuals or groups to gather information. The FBI documented spear phishing attacks in early 2009 , and since then the frequency, complexity, and motives behind spear phishing have grown more sophisticated and dangerous. http://www.dexasystems.com/blog/2011/09/What-are-the-Chances? http://www.dexasystems.com/blog/2011/09/What-are-the-Chances? Fri, 09 Sep 2011 09:59:00 GMT Other than divine intervention, the best answer is to rely on mathematical and statistical models along with computer simulation to help forecast, predict and control risk.