May 18, 2013

How to Create a Vendor Shortlist

Shortlist Screenshot

Where do you go to find the optimal security tool-suite for your needs?  With the overwhelming amount of information out there, shopping for a security product often leaves one meandering around trade show floors with a focus on the Ferrari, hired models, and poker tables.  When it comes time to actually buy a product, shoppers [...]

Tips for Navigating the Vendor Expo at the RSA Conference

The 2012 RSA Conference is held at the Moscone Center in San Francisco, February 27 – 30. If you’re evaluating software solutions for your company, the RSA Expo is one of the most efficient ways to find companies that make the products you’re considering. The RSA vendor exhibition (or any other large conference) can be [...]

Web Application Firewalls (WAFs) – Intro

Long gone are the days of static geocities webpages – those relics carefully crafted with rainbow backgrounds and static jester typeface. Today’s internet relies on consistent user interaction. Modern sites request loads of data directly from users, whether that data is used to process e-commerce transactions or to log user preferences. The user-website interaction makes [...]

DAM Vendors, Products, and Intrusty Trends

Many organizations within the private and public sectors rely on database technology to store, organize, and access their most sensitive information – and access to those databases may or may not be strictly controlled. Database Activity Monitoring (DAM) attempts to close any protection gaps by allowing organizations to monitor the who, what, and where of general [...]

The “Unbiased Infosec Buyers Guide” and the “Trusted Source.” Really?

Let’s rewind to 2003. I was a freelance web developer when I got an entry level infosec consulting job at BearingPoint.  That was the beginning of a career in infosec. Eight years later, I still feel lucky to be in a dynamic industry that is always changing and presenting new things to learn. If you’ve [...]