Steve Riley on Security

Browse by Tags

What's your data worth? More importantly, to whom?: This week, I'm attending and spoke at a cybercrime conference in Singapore. One of the presenters made a very good point, and I want to share it with you. When considering how to protect your data, don't consider how valuable it might be to an attacker. Read More...
Posted 24 October 07 11:49 by Steve Riley | 5 Comments
Filed under protection, risk mitigation, security policies, security science
More on the necessity of antivirus software: A few days ago, I wrote a brief post about my non-use of antivirus software on my own computers. A number of people have asked me privately if I am recommending such a stance to other individuals or to organizations. Let me be perfectly clear: absolutely Read More...
Posted 25 September 07 10:53 by Steve Riley | 13 Comments
Filed under malware, protection, risk mitigation, security policies
Antivirus software -- who needs it?: In the newsgroups a few weeks ago, someone asked about which anti-virus software is best for experts. This is a really curious question. I've been involved in computer security -- as a practitioner, a consultant, and an instructor/speaker -- for several Read More...
Posted 22 September 07 09:14 by Steve Riley | 16 Comments
Filed under malware, protection, risk mitigation, security policies
Enabling Secure Anywhere Access in a Connected World: A few times each year, Bill Gates or Steve Ballmer publish an executive memo. The first memo was Bill's essay on trustworthy computing , in July 2002. Today Bill has a new memo , one that is very important for all of us who strive to achieve a balance Read More...
Posted 06 February 07 12:47 by Steve Riley | 1 Comments
Filed under access technologies, networking, protection, security policies
Did you know that you ALREADY have an e-mail policy?: An email access policy can be expressed in one of two ways: E-mail is mission critical to our business. Therefore, we permit employees to read and compose e-mail from any location in the world where employees can access the Internet, using either company-issued Read More...
Posted 10 September 06 05:34 by Steve Riley | 7 Comments
Filed under access technologies, email, protection, risk mitigation, security policies
Configure your router to block DOS attempts: Some time ago I had a discussion with a friend. He disagreed with my recommendations on how to configure a border router and the firewall behind it. I claimed that in the border router between you and your ISP, configure the six rules to block most denial Read More...
Posted 10 July 06 01:27 by Steve Riley | 13 Comments
Filed under access technologies, configuration, protection, risk mitigation, security policies, threats
New column -- The case of the stolen laptop: Seems like once a week I hear from someone worried about stolen laptops -- or, worse, just joined the ranks of laptop theft victimhood. The best way to stay out of that club is to keep the thing with you at all times, or leave it in your hotel room when Read More...
Posted 10 February 05 10:12 by Steve Riley | 2 Comments
Filed under physical security, protection, risk mitigation, security policies, things that make me worried, threats