Feeds

Why conventional protection fails against web threats

White paper trail

  • alert
  • submit to reddit

Next gen security for virtualised datacentres

And so to the Reg whitepaper library to inspect some security pitches. Here's a couple we thought deserved a wider airing.

Web threats: Why conventional protection doesn't work

This white paper from Trend Micro describes web threats, how they function, and their impacts. The paper argues that conventional security practices cannot cope with today's "blended techniques, an explosion of variants, and targeted regional attacks often based on social engineering to defraud users".

Trend calls for a "multi-layered, comprehensive set of techniques" - to ensure security, regulatory compliance, and business continuity. Sure enough, the IT security firm has its own version of this, the Trend Micro Smart Protection Network,. This is a "new type of security model that marries a lightweight desktop agent to Trend’s vast network-based resources in the cloud". An interesting read, nevertheless.

Seven essential steps to achieve, measure and prove optimal security risk reduction

This Qualys white paper also bangs on the security and the regulatory compliance drum. Rapid technology changes, new server and software deployments, and more sophisticated attack methods create the "greatest set of challenges faced by security and IT administrators trying to keep their systems secure and within regulatory compliance".

Sound similar to the Trend pitch? Qualys has a different take on how to keep the barbarian hordes at the gates. Noting that it is "impossible to secure what isn’t measured", the company advocates that organisation adopt sustainable vulnerability and risk management programs. These can identify real-world security threats and evaluate your organization’s ability to respond and quantify security progress to maintain the confidentiality, integrity and availability of business data and networks. Without an accurate depiction of your network, there’s "no way to improve, let alone understand, the true security posture of your infrastructure".

In case you are wondering, "posture" is computer industry jargon for "strategy" or "plan". ®

The essential guide to IT transformation

More from The Register

next story
Goog says patch⁵⁰ your Chrome
64-bit browser loads cat vids FIFTEEN PERCENT faster!
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Chinese hackers spied on investigators of Flight MH370 - report
Classified data on flight's disappearance pinched
NIST to sysadmins: clean up your SSH mess
Too many keys, too badly managed
Attack flogged through shiny-clicky social media buttons
66,000 users popped by malicious Flash fudging add-on
Think crypto hides you from spooks on Facebook? THINK AGAIN
Traffic fingerprints reveal all, say boffins
prev story

Whitepapers

A new approach to endpoint data protection
What is the best way to ensure comprehensive visibility, management, and control of information on both company-owned and employee-owned devices?
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Maximize storage efficiency across the enterprise
The HP StoreOnce backup solution offers highly flexible, centrally managed, and highly efficient data protection for any enterprise.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.