Please select a specific search area:
Astaro Blog
The Security Perspectives Channel.
Last week we announced an exciting new offer for all businesses in the US - a free silent business audit with forensic analysis.
On Sunday, the Boston Globe printed a portion of a letter to the editor I sent in regards to one of the paper's articles. The opinion discussed the mandating of electronic health records and the importance of security for such records. Below is the complete letter.
Recently the Slowloris Denial of Service attack has jumped in popularity. This attack is similar to SYN flood, but uses HTTP instead, basically consuming sockets on the Web Server vs. trying to saturate all the bandwidth.
Dark Reading published an article titled "Booming Underground Economy Makes Spam A Hot Commodity, Expert Says" regarding the ease of using botnets for spam activity and how this makes spamming profitable.
There have actually been a few major disasters in the past 10 years that have shown the value of good disaster recovery plans. Though they're far from perfect they do make a difference and can always be improved with newer techniques and technology. When hurricane Katrina struck I was working with the City of New York's network design team and we were tasked with creating an emergency refugee processing center for the thousands of hurricane victims that the city had taken in.
Recently, NPR's "All Tech Considered" posted a very good and concise article on securing WiFi technology. I would just like to add a few key points for those that concern themselves with network security.
THE HYPE
With the announcement of the upcoming Google Chrome OS, Google is adding some hype to the mix. Google is boldly stating that they are "going back to the basics and completely redesigning the underlying security architecture of the OS so that users don't have to deal with viruses, malware and security updates.
Yesterday, the Washington Post reported that President Obama is preparing to announce the appointment of a national "'cyber czar,' a senior White House official who will have broad authority to develop strategy to protect the nation's government-run and private computer networks", and that this announcement will coincide with the release of the government's cyber-security initiatives and policies. While I am not holding my breath waiting for a call from the White House, I do have some advice for the new cyber czar.
PC World's Jaikumar Vijayan recently reported on the attacks against US government public information infrastructure.
As we know, Virtual Private Networking (VPN) is a technology that allows remote systems to connect to a local system in a secure manner. This is what Microsoft's DirectAccess is setting out to do as well. Microsoft is marketing the new remote access tool as somewhat of a revolution, claiming that you can throw the VPN out with the bathwater. This is not necessarily the case, but DirectAccess may still herald a new generation of VPN technologies.
We are rolling out a new service for our partners and customers - an improved feature request site.
There are three measures network administrators can take to avoid the types of network attacks that plagued US and South Korean websites including www.whitehouse.gov, NASDAQ, NYSE, Yahoo!'s financial page and the Washington Post. The three areas to focus on are network based mitigation, host based mitigation and proactive measures.
Not only is it annoying having to sift through all the garbage which clogs your inbox, but it costs you productivity as you attempt to separate the mails you need from the unwanted items.
I hope you saw already our new home page - it includes also a list of open jobs. Especially I want point you to the R&D positions in Germany. We offer flexible hours, a relaxed work environment, a climate of success and a chance to work in a dynamic start-up company.

