URL :

Print Icon  Printable Page
Print Icon  Web Page

March 2003



MARCH 2003

How Vulnerable?
VULNERABILITY ANALYZERS   We tested five VA scanners to see how well they illuminate holes in your systems.
By Joel Snyder

Not-So-Fine Tuning
SIDEBAR   Vulnerability scanners prove mediocre tools for helping IDSes protect the network perimeter.

Comparison Chart / Report Card



FEATURES

Carrying a Bigger Load
TEST CENTER   F5 Networks beefs up its BIG-IP load balancer to take on a greater security role.
By Scott Sidel

Watching the Watchers
SECURITY AUDITS   Even if you hate security audits, it's in your best interest to make sure they're done right.
By Carole Fennelly

The Auditor's Toolbox
SIDEBAR   An auditor should be familiar with a variety of tools and utilities, not just a single packaged scanner.

Dollars & Sense
ROUNDTABLE   Four CISOs discuss practical strategies for getting the security budget you need--and spending it wisely.
Moderated by Andrew Briney

2003: Another Year of Belt-Tightening
SURVEY   Infosecurity budgets are increasing at a far slower rate than many people assume.
By Andrew Briney

For the Common Good
CORNER OFFICE   SQL Slammer was a new worm, but it's an old problem.
By William H. Murray



COLUMNS

Bottom Dollar
EDITOR'S NOTE   To get the budget you need, think like a CFO: How do we make more, or how do we spend less?
By Andrew Briney

No Quarter for Hackers
ON THE LIGHTER SIDE   The Trippin Smurfs hacker gang chose the wrong day to deface NASA.
By Lawrence M. Walsh

Merit Badge Collecting
CURMUDGEON'S CORNER   As more security certifications become available, there's an even greater opportunity for acronym abuse.
By Jay Heiser

Practical Patching
JUST THE BASICS   Six steps to help decide when you must patch...and when it's OK to wait.
By Fred Avolio

Active Directory Replication
ASK THE SURGEON GENERAL   AD-oriented traffic is mission critical and highly sensitive, and must be protected by some sort of VPN.
By Russ Cooper

Security for the Virtual Enterprise
LOGOFF   When everything's "outside," how do you secure the "inside"?
By John Taylor



DEPARTMENTS
Viewpoint

News & Analysis
Stop: Deny Everything
Georgia's Just Peachy on Defense in Depth
San Diego Builds Security from Scratch
Turning Up the Heat
Forecast: Cyberlitigation
On the Move
@work
By the numbers

Products
Hot Pick   Sana Security's Primary Response

Reviews   Microsoft's ISA Feature Pack 1, @stake's WebProxy, Palisade Systems' PacketHound 2.3, ActivCard's Trinity 4.2, OpenService's NerveCenter 3.7, Sigaba's Secure Enterprise Instant Messaging, Shavlik Technologies' HFNetChkPro 4.0, Sniffer Technologies' InfiniStream Forensics Security, Sandstorm Enterprises' NetIntercept, SecureWave's WaveLock 1.0, BMC Software's CONTROL-SA, McDATA's SANavigator.

Secure Reads
William Cheswick, Steven Bellovin and Aviel Rubin have done themselves proud with Firewalls and Internet Security, an update to their infosec classic.
Reviewed by Patrick Mueller

Happenings
CALENDAR OF EVENTS
A calendar of upcoming security conferences, tradeshows and training events.




March 2003 Table of Contents

Copyright 2003 TechTarget