Columns
Guest Column: Infrastructure Protection v.2.0 – Forward to the Past?
June 23rd, 2008
For most of a decade, the federal approach to protecting critical infrastructure was almost entirely voluntary. It is now clear that last year’s legislation to implement recommendations of the 9/11 Commission – H.R. 1 – marked a philosophical turning point toward regulation.
Guest Column: Who’s knocking? Civilian agencies can benefit from defense experience in identity management
May 5th, 2008
Defense agencies have long understood the inherent insecurity of trusting supply partners without really knowing who’s at the other end of a transaction. More importantly, they understand that this problem is also pervasive within the agency. Now, with federal mandates like HSPD-12 and FIPS 201, civilian agencies are chartered to overcome the same challenges.
Managing the migration from analog to IP
May 4th, 2008
Much has been written about the migration from conventional analog video surveillance systems to an IP networked based platform. Depending upon specific system requirements, both analog and IP systems have advantages, and in-between there is the alternative of a hybrid system which can deliver the best of both worlds, while providing the flexibility to enhance or expand your system as the need arises. But, there are many additional criteria to consider before a decision can be made when designing and building a new system or upgrading an existing system.
The Great Balancing Act: Juggling Collaboration and Authentication in Government IT Networks
May 2nd, 2008
Government IT managers must take precautions to ensure federal workers are afforded sufficient access to the right resources during a heightened and continuing emphasis on the elimination of silos and promotion of secure collaboration across and within agencies.
IT Security – How to make long term improvements
April 30th, 2008
Rapid advances in technology create the opportunity to find and process information at an unprecedented rate. However, an unprecedented level of threats are operating against American infrastructure -- ranging from individual hackers to terrorists and foreign governments -- have the potential to disrupt our personal lives, as well as the missions of those organizations that help sustain our way of life.
New wave of Web threats emanates from China
April 26th, 2008
In recent months, there has been a significant increase in the number and ferocity of Web attacks perpetrated by hackers in China. This up-tick in malicious Internet activity involves sophisticated new techniques originating from a centralized group of activities based in China, with one of the malicious Web sites actually belonging to a Chinese government office.
Protecting Sensitive Information from the Next Wave of Attackers
April 24th, 2008
Beginning in 2003, computer-based attacks apparently originating in China succeeded in penetrating the defenses of U.S. Government and contractor networks alike. As the story was picked up by mainstream media, federal investigators gave the attacks the moniker "Titan Rain." But that name was soon changed, and both the new designation and details of the attacks associated with it have since been classified. Regardless of the source or motivation behind these attacks, one thing is clear -- these new threats are raising concerns about the safety of our nation’s most sensitive data.
Real world successes in security standardization: Federal desktop core configuration
April 22nd, 2008
The Office of Management and Budget (OMB) last year sent ripples through the government security IT world by mandating a move to a standard for federal desktop configurations. The Federal Desktop Core Configuration (FDCC) provides specific security settings which have long been recommended by the National Security Agency (NSA), the National Institute of Standards and Technologies (NIST) and the Defense Information Systems Agency (DISA).
