FEBRUARY 2003

Trustworthy Yet?
MICROSOFT SECURITY   Microsoft is making significant strides to clean up its security mess, but Trustworthy Computing still has a long way to go.
By Lawrence M. Walsh

Trustworthy Computing Milestones

Responding in Kind
Microsoft Security Response Center revamps its advisory and patch processes.

Microsoft's Internal Auditor
Scott Charney's Security Strategy Group provides checks and balances to Trustworthy Computing.




FEATURES

Gateway Guardians
E-MAIL FIREWALLS    Besieged by spam? Viruses? Afraid your employees are leaking confidential data? We tested five e-mail firewalls designed to stop the enemies at the gates.
By Fred Avolio

John Thompson
PROFILE   Symantec's CEO breaks business and cultural barriers in his drive to build a security superpower.
By Anne Saita

SIM for Windows
TEST CENTER   Even with expanded support and agents, NetIQ's Security Manager 4.1 remains a Windows-centric security information management solution.
By Scott Sidel

Talk the Talk, Walk the Walk
SECURITY BIZSPEAK   Five tips to win friends and influence C-level execs in your organization.
By Paul Proctor



COLUMNS

Next-Generation Security Training
EDITOR'S NOTE   Put your posters and buttons away. A more effective solution is at your fingertips.
By Andrew Briney

Hacking Into a Woman's Heart
ON THE LIGHTER SIDE   A hacker tries to impress his date by boasting of past "exploits." By Lawrence M. Walsh

Bait and Switch With Honeyd
COOL TOOLS   Spoofing, diversion and obfuscation are all part of honeyd's powerful arsenal.
By Marcus Ranum

Detecting Server Compromises
ASK THE LINUX GURU   How can you determine if your Linux server has been hacked? How can you be sure that you haven't been hacked?
By Jay Beale

Down With IDS
LOGOFF   Intrusion detection remains an over-hyped technology because most companies have no idea what to do with it.
By Jack Danahy



DEPARTMENTS
Viewpoint

News & Analysis
Vulnerable Commodities
IPv6 Tunneling Problem
Changing DMCA
Online Security Training
Granular Alerts
On the Move
@work
By the numbers, Funding, M&As

Products
Hot Pick   SonicWALL's 230 & 330 firewall/VPN appliances
Reviews   DataPower's XS40 XML Security Gateway; PowerWallz's ProShield V1000 firewall/VPN appliance; Vordel's VordelSecure 2.0 Web services security solution; Thor Technologies' Xellerate 7.0 provisioning application; and Daon's Daon for Windows biometric middleware.

Secure Reads
Wireless Security and Privacy is intended as a guide for security experts to learn about wireless--and wireless experts to learn about security.
Reviewed by Patrick Mueller

Happenings
CALENDAR OF EVENTS
A calendar of upcoming security conferences, tradeshows and training events.