Steve Riley on Security

Browse by Tags

If you know the Conficker dude, we've got a prize for you: Yesterday (12 February 2009) Microsoft announced a partnership with technology industry leaders and academia to implement a coordinated, global response to the Conficker (aka Downadup) worm. Together with security researchers, Internet Corporation for Read More...
Posted 13 February 09 09:39 by Steve Riley | 5 Comments
Filed under protection, patch management, malware, home and family security
Attacks against integrity: I’ve been mentioning this frequently during my talks in the last 12 months: that accidental or malicious data modification is yet something else we need to defend against. Richard Bejtlich wrote last year about attack progressions , and this year summarized Read More...
Posted 20 January 09 08:28 by Steve Riley | 3 Comments
Filed under security policies, protection, integrity
Poll: do you use scheduled scans for malware?: An interesting comment recently appeared on my older post about whether or not to use antimalware software. Peter van Dam wondered whether scheduled scans are really necessary, given that anti-malware products scan files as they enter (and sometimes Read More...
Posted 05 January 09 12:03 by Steve Riley | 18 Comments
Filed under risk mitigation, protection, malware
Throw away your digital picture frames: Surely time itself has warped and it's suddenly April 1st. Come on, if you read the following, wouldn't you first think it was a hoax, as did I? Virus from China, the gift that keeps on giving An insidious computer virus recently discovered on digital Read More...
Posted 18 February 08 07:36 by Steve Riley | 4 Comments
Filed under threats, protection, things that make me laugh, things that make me worried, malware, home and family security
Supporting your family, friends, and neighbors: By Steve Riley Senior Security Strategist Trustworthy Computing Group, Microsoft Corporation (originally published at http://www.microsoft.com/technet/community/columns/secmgmt/sm0208.mspx ) I’ve met thousands of IT pros during my years speaking at conferences Read More...
Posted 13 February 08 09:45 by Steve Riley | 5 Comments
Filed under protection, home and family security
More on Autorun: Last month, in my post " Autorun: good for you? " I described why I believe you should disable Autorun on all computers in your organization. I also explained how you can do this for XP and Vista computers. Well, it turns out that Windows will override Read More...
Posted 30 October 07 03:12 by Steve Riley | 24 Comments
Filed under risk mitigation, threats, protection, malware
What's your data worth? More importantly, to whom?: This week, I'm attending and spoke at a cybercrime conference in Singapore. One of the presenters made a very good point, and I want to share it with you. When considering how to protect your data, don't consider how valuable it might be to an attacker. Read More...
Posted 24 October 07 11:49 by Steve Riley | 6 Comments
Filed under security policies, risk mitigation, protection, security science
More on the necessity of antivirus software: A few days ago, I wrote a brief post about my non-use of antivirus software on my own computers. A number of people have asked me privately if I am recommending such a stance to other individuals or to organizations. Let me be perfectly clear: absolutely Read More...
Posted 25 September 07 10:53 by Steve Riley | 14 Comments
Filed under security policies, risk mitigation, protection, malware
Autorun: good for you?: Yes, if you're a five-year-old and you're tired of always asking mom or dad how to start the game on the CD. No need to know how! Just pick up the disc (a little peanut butter on your fingers helps with the grip), slide it in the drive, and wait for the Read More...
Posted 22 September 07 10:29 by Steve Riley | 11 Comments
Filed under risk mitigation, threats, protection, malware
Antivirus software -- who needs it?: In the newsgroups a few weeks ago, someone asked about which anti-virus software is best for experts. This is a really curious question. I've been involved in computer security -- as a practitioner, a consultant, and an instructor/speaker -- for several Read More...
Posted 22 September 07 09:14 by Steve Riley | 22 Comments
Filed under security policies, risk mitigation, protection, malware
Windows Integrity Mechanism: more than you ever wanted to know: A while back, the technology in Vista called mandatory integrity control got a new name: Windows integrity mechanism. Recently the folks responsible for developing the technology have posted a good amount of documentation on it. Read the Windows Vista Read More...
Posted 13 July 07 10:49 by Steve Riley | 0 Comments
Filed under Windows Vista, protection
Protect your data: everything else is just plumbing: Take a few moments and indulge in a thought exercise with me. Consider your company’s complete collection of information processing assets—all the computers, the networks they’re connected to, the applications you use, and the data and information you Read More...
Posted 02 July 07 01:46 by Steve Riley | 7 Comments
Filed under protection, physical security, RMS, BitLocker, encryption
TechNet: Exploring the Windows Vista Firewall: New article up... Back in the days of the paleocomputing era, no one ever thought about installing firewalls on individual computers. Who needed to? Hardly anyone had heard of the Internet, TCP/IP was nowhere in sight, and LAN protocols didn’t route beyond Read More...
Posted 29 May 07 04:01 by Steve Riley | 1 Comments
Filed under Windows Vista, security theater, protection
Enabling Secure Anywhere Access in a Connected World: A few times each year, Bill Gates or Steve Ballmer publish an executive memo. The first memo was Bill's essay on trustworthy computing , in July 2002. Today Bill has a new memo , one that is very important for all of us who strive to achieve a balance Read More...
Posted 06 February 07 12:47 by Steve Riley | 1 Comments
Filed under access technologies, security policies, protection, networking
BitLocker command line interface: Last week at TechEd Europe I showed the BitLocker command-line interface. At other TechEds I've mentioned it but didn't show it. The CLI provides full control over BitLocker, including enabling it on any NTFS volume on the system (the Control Panel UI Read More...
Posted 25 November 06 08:39 by Steve Riley | 15 Comments
Filed under Windows Vista, protection, physical security, configuration, BitLocker, encryption

Steve Riley on Security

Browse by Tags

Search

This Blog

Resources for you

Tags

Archives

Syndication