network security
1 if by land, 2 of by sea, 0 if by IP
I know I’ve said this before but it sure seems like almost daily there is a security breach somewhere. Over the years, the thought process has changed from prevent all attacks to, it is inevitable that we will be breached. The massive number of attacks occurring daily makes it a statistical reality. Now organizations are looking for the right solution (both technology and practice) to quickly detect a breach, stop it, identify what occurred and what data may have been compromised. Over the last couple of days various entities...
posted @ Tuesday, January 17, 2012 1:59 PM | >
It’s that time of year when we gift and re-gift. And the perfect opportunity to re-post, re-purpose and re-use my 2011 blog entries. If you missed any of the approximately 50 blogs, 11 audio whitepapers or 47 videos, here they are wrapped in one simple entry. I read somewhere that lists in blogs are good. Have a Safe and Happy New Year. F5 Security Vignette Series 2012 IT Staffing Crisis? The Top 10, Top Predictions for 2012 Pearl Harbor, Punchbowl and my...
posted @ Tuesday, December 20, 2011 5:04 AM | >
Over the last couple weeks, we’ve been rolling out a series of short Security Vignette videos about various IT security challenges. We’ve posted them to the F5News blog account but also wanted to share in case you missed them. If we were going to sum up the role of security in corporate IT today we'd have to say it's to "be prepared." This series looks at many of those security concerns which can be addressed proactively, before they are exploited or become a fire drill. F5 Security Vignette: Proactive Security - The F5 Security Vignette series...
posted @ Thursday, December 15, 2011 10:24 AM | >
When creating any security-enabled network device, development teams must fully investigate security of the device itself to ensure it cannot be compromised. A gate provides no security to a house if the gap between the bars is large enough to drive a truck through. Many highly effective exploits have breached the very software and hardware that are designed to protect against them. If an attacker can breach the guards, then they don’t need to worry about being stealthy, meaning if one can compromise the box, then they probably can compromise the code. F5 BIG-IP Application Delivery Controllers are positioned at...
posted @ Tuesday, November 15, 2011 11:46 AM | >
I chat with Andy Oehler, F5 Product Manager about BIG-IP Access Policy Manager, the integration with Oracle Access Manager and what APM brings to BIG-IP.
</p> <p><font size="2">ps</font></p> <p><font size="2">Related:</font></p> <ul> <li><a href="http://devcentral.f5.com/weblogs/psilva/psilva/archive/2011/10/03/oracle-openworld-2011-alohafind-f5-booth-1527.aspx" _fcksavedurl="http://devcentral.f5.com/weblogs/psilva/psilva/archive/2011/10/03/oracle-openworld-2011-alohafind-f5-booth-1527.aspx"><font size="2" face="Tahoma">Oracle OpenWorld 2011 - Aloha:Find F5 Booth 1527</font></a><font size="2" face="Tahoma"> </font></li> <li><a href="http://devcentral.f5.com/weblogs/psilva/psilva/archive/2011/10/03/oracle-openworld-2011-big-ip-wanop-amp-oracle-goldengate.aspx" _fcksavedurl="http://devcentral.f5.com/weblogs/psilva/psilva/archive/2011/10/03/oracle-openworld-2011-big-ip-wanop-amp-oracle-goldengate.aspx"><font size="2" face="Tahoma">Oracle OpenWorld 2011: BIG-IP WANOp &amp; Oracle GoldenGate</font></a><font size="2" face="Tahoma"> </font></li> <li><a href="http://devcentral.f5.com/weblogs/psilva/psilva/archive/2011/10/03/oracle-openworld-2011-f5-arx-amp-oracle-zfs-storage.aspx" _fcksavedurl="http://devcentral.f5.com/weblogs/psilva/psilva/archive/2011/10/03/oracle-openworld-2011-f5-arx-amp-oracle-zfs-storage.aspx"><font size="2" face="Tahoma">Oracle OpenWorld 2011: F5 ARX &amp; Oracle ZFS Storage</font></a><font size="2" face="Tahoma"> </font></li> <li><a href="http://www.youtube.com/user/f5networksinc" _fcksavedurl="http://www.youtube.com/user/f5networksinc"><font size="2" face="Tahoma">F5 YouTube Channel</font></a><font size="2"...
posted @ Tuesday, October 04, 2011 7:46 PM | >
As they endeavor to secure their systems from malicious intrusion attempts, many companies face the same decision: whether to use a web application firewall (WAF) or an intrusion detection or prevention system (IDS/IPS). But this notion that only one or the other is the solution is faulty. Attacks occur at different layers of the OSI model and they often penetrate multiple layers of either the stack or the actual system infrastructure. Attacks are also evolving—what once was only a network layer attack has shifted into a multi-layer network and application attack. For example, malicious intruders may start with a network-based...
posted @ Wednesday, September 28, 2011 2:00 PM | >
Founder & CTO of WhiteHat Security, Jeremiah Grossman talks about the F5/WhiteHat partnership, the benefits of the WhiteHat Sentinel & BIG-IP ASM integration, the sophistication level of some of the recent attacks/breaches reported in the media, blocking SQL Injections and why organizations should consider an integrated WAF and Scanner like the WhiteHat/F5 solution.
</p> <p><font size="2">ps</font></p> <p><font size="2">Related:</font></p> <ul> <li><a href="https://www.whitehatsec.com/index.html" _fcksavedurl="https://www.whitehatsec.com/index.html"><font size="2" face="Tahoma">WhiteHat Security</font></a></li> <li><a href="https://www.whitehatsec.com/resource/grossman.html" _fcksavedurl="https://www.whitehatsec.com/resource/grossman.html"><font size="2" face="Tahoma">WhiteHat Blog</font></a></li> <li><a href="http://jeremiahgrossman.blogspot.com/" _fcksavedurl="http://jeremiahgrossman.blogspot.com/"><font size="2" face="Tahoma">Jeremiah Grossman Blog</font></a></li> <li><a href="http://www.f5.com/solutions/technology-alliances/security/whitehat.html" _fcksavedurl="http://www.f5.com/solutions/technology-alliances/security/whitehat.html"><font size="2" face="Tahoma">F5/WhiteHat Partnership</font></a></li> ...
posted @ Monday, September 26, 2011 7:46 AM | >
Just when you were having all that fun running around the waterpark and playing those arcade games comes news that the card processing system of Vacationland Vendors Inc., a Wisconsin Dells firm that supplies arcade games and installs vending machines, was breached. From the notice on their website, they say, ‘Vacationland Vendors recently discovered that an unauthorized person wrongfully accessed certain parts of the point of sales systems that Vacationland Vendors uses to process credit and debit transactions at the Wilderness Resorts.’ Up to 40,000 debit or credit cards that were used in the arcades any time between December 2008...
posted @ Wednesday, September 14, 2011 5:11 AM | >
With an increasing number of devices, applications, and services on the Internet, it’s becoming more difficult to achieve network and application response times that deliver a quality user experience. This problem is not only a bandwidth issue—it’s also closely tied to network and infrastructure architecture. To provide high-quality user experiences on the Internet, networks must be designed with optimized, secure, highly available, and high-performance IP services. Domain Name System (DNS) is one of the most difficult, but important, IP services to optimize and secure. DNS Services in F5 BIG-IP version 11 provides an intelligent DNS architecture that delivers high performance...
posted @ Wednesday, August 24, 2011 7:56 AM | >
A couple days ago, The SANS Institute announced the release of a major update (Version 3.0) to the 20 Critical Controls, a prioritized baseline of information security measures designed to provide continuous monitoring to better protect government and commercial computers and networks from cyber attacks. The information security threat landscape is always changing, especially this year with the well publicized breaches. The particular controls have been tested and provide an effective solution to defending against cyber-attacks. The focus is critical technical areas than can help an organization prioritize efforts to protect against the most common and dangerous attacks. Automating security...
posted @ Tuesday, August 23, 2011 5:31 AM | >
Full network security Archive