CoreTrace WhiteSpace

The Application Whitelisting and Security Weblog

Top Endpoint Security Stories for July 2011: New cybersecurity plans, breaches, platforms and arrests…

In response to increasing cyber threats targeting the U.S. government, defense contractors and the nation’s critical infrastructure, the Department of Defense released its new strategy for protecting our nation’s systems and networks from cyber attacks. While it’s a nice first step, many critics are wondering if the government can actually pull it off. In the same vein, the shift to virtualization has many businesses re-thinking their existing security approaches. Will virtualization mark the end of traditional host-based antivirus solutions as we know it? Here are some of the top endpoint security stories for July 2011.

DoD’s cybersecurity plan creates more questions than answers

In July, the Department of Defense released its new strategy for operating in cyberspace, and how it plans to protect our nation’s computer systems and networks from cyber attacks. The plan includes a number of initiatives such as treating cyberspace as a domain it defends (with land, air, sea and space), introducing new network defenses to detect and stop malicious code, coordinating with the private sector, and working with other countries. However, in the article, “Critics: U.S. cyber security plan has holes, few new items,” the document has many analysts like Rich Mogull of Securosis wondering if the DoD can pull it off. Continue reading this post…

Top Endpoint Security Stories for January 2011: New Platforms & Further Malware “Commercialization”…

I believe that January has given us a nice preview of what is to come in 2011. From attacks targeting new platforms to the increasing “commercialization” of malware business models and toolkits, the ongoing need to secure endpoints — from servers to laptops, from SCADA systems to tablets–shows no sign of abating. Here are some of the top endpoint security stories for January 2011. Continue reading this post…

In 2009, Symantec stopped 100 attacks per second… wonder how many were missed?

If you haven’t already come across Symantec’s new Internet Security Threat Report (ISTR), ponder this — in 2009, the world’s largest security software maker blocked an average of 100 potential attacks per second. In the article, “Cybercrime’s Financial and Geographic Growth Shows No Slowdown during the Global Economic Crisis,” last year hackers were more active than ever. According to Stephen Trilling, senior VP of Symantec’s Security Technology and Response Division, the continuing growth of more sophisticated cyber threats has become an international problem that we can no longer afford to ignore. Continue reading this post…