-
The Open Group's standard could help government ensure that COTS products do not contain backdoors or counterfeit components.
-
Although direct attacks against agency systems have decreased, attackers appear to be targeting upstream companies to get around government defenses, Symantec says.
-
The Digital Forensics Challenge gives would-be investigators a chance to test their ability by completing increasingly difficult challenges across five levels of difficulty.
-
Patches, idle accounts, mobile devices not in use and, yes, disgruntled workers have to be accounted for.
-
Co3's system can help agencies identify an attack or breach, in part by putting users on the case, and then lead officials through the response.
-
In the face of growing use of stolen and fake certificates to deliver malicious code, NIST and an industry alliance are working to improve what has become an automated, online process.
-
Shodan scours the Web for connected devices that aren't looking to be found, such as traffic lights, door locks and power systems. And many of them aren't secured.
-
Former Air Force CIO Lt. Gen. William Lord (retired) says the installed base of outdated code in government systems is "the next Achilles' heel."
-
The services have obvious appeal to employees, but have a history of breaches. Pennsylvania's CISO, for one, steers agencies to in-house or enterprise storage services.
-
DHS has warned about recent denial of service attacks against PSAPs and other government phone lines, but the attacks are nothing new.