Home

New CESG initiative builds on IISP Skills Framework in drive for greater professionalism in Information Assurance

IISP, CREST and Royal Holloway consortium appointed for IA Specialist Certification Scheme to protect against growing cyber threats

As part of the UK Government’s investment in cyber security, a consortium comprising the IISP (Institute of Information Security Professionals), CREST (Council for Registered Ethical Security Testers) and Royal Holloway’s Information Security Group (ISG) has been appointed by CESG to provide certification for UK Government Information Assurance (IA) professionals. The consortium has been awarded a licence to issue the CESG Certified Professional Mark based on the IISP Skills Framework, as part of a certification scheme driven by CESG, the IA arm of GCHQ.

: LIZ HARTNEY; InfoSecurity; Posted On Thursday, 22 September 2011 17:01

SIEM from Q1 Labs eases IPv6 migration

Expert recommends that organisations test compatibility across security products and gateways as networks undergo upgrade, or risk breaches.

Q1 Labs, the global provider of total security intelligence solutions, has urged organisations to look how Security Information and Event Management (SIEM) systems as well as IPS and IDS are configured as firms move to IPv6-based networks.

: DAWN NICHOLLS; InfoSecurity; Posted On Wednesday, 21 September 2011 18:25

Trusteer finds transfer requests using SpyEye bypassing bank security

Below is Trusteer's new research which has found a new type of attack utilizing SpyEye and social engineering Techniques, the full details are below but here is a quick summary:

: AMIT KLEIN, CTO, TRUSTEER; InfoSecurity; Posted On Wednesday, 21 September 2011 18:15

Research finds SQL injection attacks bypass web security

Hackers Execute an Average 71 SQL Injection Attacks per Hour to Steal Data

Imperva’s Hacker Intelligence Initiative (HII) today revealed the prevalence and intensity of SQL injection attacks. The report details how prevalent SQL injection attacks have become, how attacks are executed and how hackers are innovating SQLi attacks to bypass security controls as well as increase potency.