How to Parse Firewall Configs with Nipper.

Thursday, February 12, 2009 3:26:02 PM (Pacific Standard Time, UTC-08:00)
by Daniel De Carvalho
Who said analyzing firewalls and network devices was something tedious and cumbersome? Well your problems are over: Introducing Nipper, the network device configuration parser.

10 steps to harden Windows Server 2008

Tuesday, December 02, 2008 11:45:36 AM (Pacific Standard Time, UTC-08:00)
by Daniel De Carvalho
Ever since it’s debut, Microsoft Windows 2008 Server has awed security and systems administrators with its complex and innovative features. With threats becoming each day more immanent and efficient, security system administrators face the tedious task of protecting Microsoft’s new giant. In this article we compiled some of the industries best practices such as NIST to show you some of the features and ways to reduce your windows 2008 servers’ exposure.

Security Event Log Forwarding on Windows 2008 servers

Monday, December 01, 2008 3:26:28 PM (Pacific Standard Time, UTC-08:00)
by Daniel De Carvalho
The use of a centralized log server has often been highlighted in many of today’s security best practices. The constant need to collect, retain and protect these sensitive security event log files sometimes overwhelm security and systems administrators, especially in large corporate environments. When properly configured, security event logs are used to track user activity and access on specific systems or objects, and is a key element when tying to piece up the chain of events leading to a security incident. Many security administrators might know how cumbersome it is to manage such security event log files, and sometimes seek third party vendors to help them manage their security log files. The truth is that many of these problems can be solved using native features of your server operating system.

How to Secure your DNS Server

Friday, November 07, 2008 3:36:14 PM (Pacific Standard Time, UTC-08:00)
by Daniel De Carvalho
In this article you will learn how to identify and remediate one of the most common DNS vulnerabilities.

SPAM: You Have Mail!

Friday, November 07, 2008 2:26:45 PM (Pacific Standard Time, UTC-08:00)
by Daniel De Carvalho
How many times has your email inbox been flooded with unsolicited email messages? How many times do you have to say that you do not want Viagra, nor interested in any sort of pharmaceutical drugs offered on these messages? Do you catch yourself sometimes thinking how good it would be if you could get rid of all that spam?

Trick or Treat: What lurks beneath a Public Access Point?

Friday, October 17, 2008 1:22:01 PM (Pacific Daylight Time, UTC-07:00)
by Daniel De Carvalho
They are everywhere from Airports to Starbucks, at every corner, users have access to complementary free internet. But have you ever wondered what lurks beneath those innocent hotspots?

Red November: Understanding the Red Flag Rule.

Thursday, October 02, 2008 5:47:53 PM (Pacific Daylight Time, UTC-07:00)
by Daniel De Carvalho
Many may have heard of the Red Flags Rule and know that businesses need to make changes to comply with these rules. However, many institutions are still unclear of how this rule can affect them. On top of that US Financial institutions face a mandatory deadline of November 1, 2008 to comply with 3 new US Fair and Accurate Credit Transactions Act (FACT Act) regulations referred to as the Red Flag rule.