RSS MAD

RE: Information Security in Mergers and Acquisition

Posted by Daniel I. Didier on Jul 18

Alfred,
Haven't I seen you in some splendid mysteries? :)

While I can't provide you with a complete overview of this process, I
will provide some valuable insight. Recently we had a very similar
situation and the topic of legal liability over licensing came into
question (Any hardware /...

Re: Shrepoint as an CSIRMS

Posted by Jason Ross on Jul 18

On Thu, Jul 17, 2008 at 1:30 PM, Brooks Garrett <bg_at_brooksgarrett.com>
wrote:

> We have settled on SharePoint as our Computer Security Incident
> Response Management System. It seems the ability to modify the system
> is a key factor with us!

... must. resist. urge. to...

Re: Application Firewall

Posted by Bryan S. Sampsel on Jul 18

Sidewinder from Secure Computing is an excellent application-proxy firewall.

So is Borderware.

IPCOP has aspects that qualify.

No, the ASA is a packet filter only firewall. It's quite good at what it
does, but it does not handle the application layer. And no, deep packet
inspection does...

Re: Application Firewall

Posted by Adriel Desautels on Jul 18

Ams,
        Do you have a specific type of application that you are trying to
protect? If so, what are the specifics of it. Certain solutions are
better fit for certain technologies.

Regards,
        Adriel T....

Re: Information Security in Mergers and Acquisition

Posted by Meenal Mukadam on Jul 18

Hello Alfred,

You are very correct. Addressing security does start at the pre-merger
and is equally critical till the post-merger! I have researched on
this topic and have come up with a frame work and guidelines.

For success of a M&A first one has to understand the 'Driver for that
...

RE: Information Security in Mergers and Acquisition

Posted by Lubrano di Ciccone Christophe on Jul 18

I would see this global strategy :

What are the standard/policy in your company
What are the standard/policy in the acquired company
What are the legal and others constraints behind this standard/policy
Apply any standard/policy you have in the acquired company in the limit
of the legal and...

Re: Application Firewall

Posted by aditya mukadam on Jul 18

Application level firewalls are actually not firewalls but can be
called as intelligent proxies. Cisco ASA is a stateful firewall.

I know BlueCoat proxy which would categorize as application level firewall.

Thanks,
Aditya Govind Mukadam

On Thu, Jul 17, 2008 at 7:44 PM,...

GIAC Information Security Fundamentals (GISF) - Looking for Books

Posted by Razorren on Jul 17

Hi,

Can someone recommend a good book or books to prepare me for this
certification? Paying for the SANS course is too expensive right now so I
planned to try and self study.

I was able to find books on Amazon for the GSEC, but nothing for the entry
level GISF course.

For someone who is a...

Re: Re: Fwd: How does the Cain and Abel SAM dump works?

Posted by anon_at_anon.com on Jul 18

('binary' encoding is not supported, stored as-is) Here is the source code for pwdump tool: http://us1.samba.org/samba/ftp/pwdump/pwdump.c

You need to be running with system privelages to access:

HKEY_LOCAL_MACHINE\SAM
AND
HKEY_LOCAL_MACHINE\SECURITY

SAM will give you the windows hashes and...

Information Security in Mergers and Acquisition

Posted by alfredhitchcock_007_at_yahoo.com on Jul 17

('binary' encoding is not supported, stored as-is) Hi,
I have been tasked to develop a competency in "Information Security in Mergers and Acquisition". I do not know where to start. Since addressing security would start at pre-merger till the analysis of post merger. Here I would like...

Re: GIAC certification question

Posted by Rob Thompson on Jul 17

Clement Dupuis wrote:
> Good day Rob,
>
> Unfortunately when you deal with companies such as Kinkos, or other
> companies that mass produce book, this is bound to happen.

Understood.

I can definitely say that it was in two books. I never bothered
inquiring into the rest of my...

Re: How does the Cain and Abel SAM dump works?

Posted by Rob Thompson on Jul 17

Carlos Madrid wrote:
> Some advice.. only try to crack the LM hashes. They won't be longer
> then 14 chars.

It's even better than that. You're cracking two seven character hashes.
 For a total of fourteen. It's faster to crack two seven character
passwords, than it is to crack...

Re: password protect pen drive

Posted by Rob Thompson on Jul 17

krymson_at_gmail.com wrote:
> First, I'm curious, can TrueCrypt passwords actually have rainbow tables? I don't think so, depending which password encryption/hash you use with TrueCrypt. I'm pretty sure they're exempt from realistic rainbow table use.

When you generate a password, if the...

Application Firewall

Posted by ams.sec_at_gmail.com on Jul 17

('binary' encoding is not supported, stored as-is) Hi everyone,

Can anyone please list out some name of application level firewalls. Would Cisco ASA qualify as a application firewall? I have heard it needs certain addons to provide application screening functionality. Thanks a zillion.

Ams
...