April 2008 19 4 Issue of SCMagazine

Editorial

When the auditors come around

Compliance seemed the dominating topic at this year's recent Infosec WorldConference & Expo in Florida.

Opinion

Avoid breaking the bank

With no foreseeable end to IT security risks, security programs should always remain top priorities.

The evolved help desk

The help desk is often seen as the face of the IT organization, so any drop in credibility can bring negative consequences to IT's future, ...

Features

The next generation

AIG's CSO Paul DeGraaff says security professionals must gauge the risks of a younger workforce, Dan Kaplan.reports.

Retail & IT Security

In this special section, we look at IT security implementations at several retail locations and investigate which solutions are effective for retail chains.

Fall in line

Retailers are having a tough time coming into compliance with PCI DSS, but there are solutions out there, reports Deb Radcliff.

Ski patrol: Boyne Resorts and Kaspersky Lab

Boyne Resorts needed an easier way to protect its network and retail points-of-sale. It found a solution, reports Greg Masters.

Worth the upgrade

The TJX data breach has made wireless encryption a priority for retailers and other enterprises. Frank Washkuch Jr. finds out why.

Last Word

Valid operator's permit required

Computer users could use the help of security professionals, says Michael Seese.

Product Reviews

Threats and vulnerabilities

This month we are addressing application vulnerabilities and web-based threats.

Application Security, Inc.'s DbProtect 2007

The product consists of a network-based database vulnerability assessment component, a database monitoring component and a central management console.

Fortify Source Code Analysis Suite 4.5

Fortify Source Code Analysis Suite 4.5 is a suite of components used to perform static source code analysis.Strengths Powerful analysis of source code. Solid documentation ...

HP WebInspect 7.7

HP WebInspect 7.7 (SPI Dynamics is now part of HP Software) is a standalone web application testing product.

IBM's Rational AppScan 7.7

IBM's Rational AppScan 7.7 (Watchfire is now an IBM company) is a standalone web application assessment product that is part of IBM's Rational software group.

Ounce Labs 5.0

Ounce Labs 5.0 is a static source code analysis solution based primarily on two separate components.

iSEC Partners Security QA Toolbar

iSEC Partners Security QA Toolbar is a browser-based add-in for Internet Explorer, and is used to perform web application vulnerability testing directly within the browser ...