tutorial about web security computer networking

I just read a blog post (no need to direct traffic there with a link) that included the following content: This week, I had the opportunity ...

In May I was pleased to attend Lessons from Our Cyber Past: The First Cyber Cops hosted by Jay Healey at the Atlantic Council and featuring...

Today I was fortunate to attend a hearing of the US House Permanent Select Committee on Intelligence (HPSCI). That's me on the far lef...

Thanks to this Tweet by @ryancbarnett, I learned of the lessons learned of the Level II component of the ModSecurity SQL Injection Challen...

If you've read the blog for a while you know I promote threat-centric security in addition to vulnerability-centric security. I think ...

A number of people, inside and outside the security world, think that any discussion of real threats is a manufactured justification for int...

Volume 13 Issue 2 of IATAC's IA Newsletter features an article titled Apples and Oranges: Operating and Defending the Global Informatio...

I was not surprised to read China’s hawks demand cold war on the US in the Times Online. [A]lmost 55% of those [in China] questioned for Gl...

Some of you may remember me mentioning the 2008 SANS WhatWorks in Incident Response and Forensic Solutions Summit organized by Rob Lee. I ...

In December 2007 I wrote Predictions for 2008 . They included 2) Expect greater military involvement in defending private sector networks; ...

In my last post I mentioned the need to take threat-centric approaches to advanced persistent threat . No sooner than I had posted those ...

The aftershocks of Google v China continue to rumble as more companies are linked to the advanced persistent threat . Mark Clayton from th...

The post One Exploit Should Not Ruin Your Day by Dino Dai Zovi made me think: Finally, the larger problem is that it only took one exploit ...

My post Attribution Is Not Just Malware Analysis raised some questions that I will try to address here. I'd like to cite Mike Cloppert...

In a recent Tweet I recommended reading Joe Stewart's insightful analysis of malware involved in Google v China . Joe's work is s...

Jeremiah Grossman made the following request via Twitter today: @taosecurity blog post request. Signs that an individual or organization is...

This has been the week to discuss the advanced persistent threat , although some people are already telling me Google v China with respect ...

I've been reading various comments on the Google v China issue. One caught my eye: Security experts say Google cyber-attack was routin...

After reading this statement from Adobe , they seem to be using the same language that described the Google v China incident: Adobe became ...

I'm wondering if China has crossed a line with its Google hack . It's relatively easy for the Obama administration to pretend that ...