SecurityFocus

Time to Squish SQL Injection
by Gunter Ollmann, 2009-10-23
Heartland Payment Systems and Hannaford Bros. both fell prey to botnets wielding SQL injection flaws. Corporate IT managers need to place a priority on fixing Web site vulnerabilities, argues Gunter Ollmann, vice president of research for Damballa.
http://www.securityfocus.com/columnists/505

Lazy Workers May Be Deemed Hackers
by Mark Rasch, 2009-08-25
"Exceeding authorization" rules could turn employees who sneak in personal Web surfing into their free time from layabouts to hackers, argues attorney and SecurityFocus contributor Mark Rasch.
http://www.securityfocus.com/columnists/504

The Scale of Security
by Adam O'Donnell, 2009-07-17
Companies looking to secure their systems have a problem from the get-go: People have difficulty understanding the scale of computer-security issues, SecurityFocus contributor Adam O'Donnell argues.
http://www.securityfocus.com/columnists/503

Hacker-Tool Law Still Does Little
by Mark Rasch, 2009-06-05
In 2007, Germany passed a law that could be interpreted to make the creation or distribution of computer security software a criminal offense. Two years out, the German law has been effectively used to scare legitimate security researchers, but little else, says SecurityFocus contributor Mark Rasch.
http://www.securityfocus.com/columnists/502

A Botnet by Any Other Name
by Gunter Ollmann, 2009-05-01
To better fight against botnets, we first need to give them meaningful names, argues guest contributor Gunter Ollmann, vice president of research for security firm Damballa.
http://www.securityfocus.com/columnists/501

Projecting Borders into Cyberspace
by Jeffrey Carr, 2009-04-28
The United States and other nations need a better way to attribute online attacks. SecurityFocus contributor Jeffrey Carr argues that cyberspace, like airspace or territorial waters, should be divvied up and controlled by nations.
http://www.securityfocus.com/columnists/500

Celebrity Viruses Improve Security
by Adam O'Donnell, 2009-04-21
Conficker and Katie Couric's colon — both media sensations have had net positive effects, leading SecurityFocus contributor Adam O'Donnell to argue that the occasional overhyped security threat is good for the hygiene of the Internet.
http://www.securityfocus.com/columnists/499

Good Obfuscation, Bad Code
by Chris Wysopal, 2009-04-17
As malicious coders become better at hiding what their software is doing, the best way to be sure that computers are only running good software is to make obfuscation bad, argues SecurityFocus contributor Chris Wysopal.
http://www.securityfocus.com/columnists/498

Facebook, Privacy and Contracts
by Mark Rasch, 2009-04-08
The social networking site Facebook made a minor change to its terms of service, setting off a firestorm, with customers worrying that the company was laying claim to everything they had posted. Attorney and SecurityFocus contributor Mark Rasch warns that service terms and contracts are only getting more draconian.
http://www.securityfocus.com/columnists/497

Act Locally, Pwn Globally
by Jeffrey Carr, 2009-03-27
Billions of dollars lost each year to cybercrime, but there isn't universal agreement as to what steps are necessary to fix the problem. It's time to act globally, argues cyber intelligence expert and SecurityFocus contributor Jeff Carr.
http://www.securityfocus.com/columnists/496