<?xml version="1.0" ?>
  <rss version="2.0">
  <channel>
     <title>Tom Olzak&#039;s Security Updates</title>
     <link>http://adventuresinsecurity.com</link>
     <description>Free Security Management Resources: papers, training, podcasts, and more.</description>
     <language>en-US</language>
     <copyright>Erudio Security, LLC</copyright>
     <webMaster>webmaster@adventuresinsecurity.com</webMaster>
     <pubDate>Thu, 01 Jan 1970 00:00:00 GMT</pubDate>
     <lastBuildDate>Mon, 12 Mar 2007 11:57:43 GMT</lastBuildDate>
     <category>Computers</category>
     <generator>My RSS Creator</generator>
     <docs>http://blogs.law.harvard.edu/tech/rss</docs>
     <ttl>120</ttl>
     <image>
       <url>http://adventuresinsecurity.com/images/Erudio_Logo.jpg</url>
       <title>Tom Olzak&#039;s Security Updates</title>
       <link>http://adventuresinsecurity.com</link>
       <width>67</width>
       <height>65</height>
     </image>
  <item>
     <title>U. S. small businesses offered security help</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/u-s-small-businesses-offered-security-help-14996</link>
     <description><![CDATA[The National Federation of Independent Business and Visa are partnering to assist small businesses in the United States develop better security practices ]]></description>
     <category>Computers</category>
     <pubDate>Mon, 12 Mar 2007 12:57:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>The promise of data anonymization</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/the-promise-of-data-anonymization-15008</link>
     <description><![CDATA[Although data anonymization is largely in the research and experimental stage, it has promise has a means of providing information for statistical and other types of analysis without compromising privacy.]]></description>
     <category>Computers</category>
     <pubDate>Mon, 12 Mar 2007 12:54:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>The 7 habits of highly effective information security leaders</title>
     <link>http://blogs.techrepublic.com.com/security/?p=177</link>
     <description><![CDATA[The balance between operational efficiency and information assurance presents special challenges.]]></description>
     <category>Computers</category>
     <pubDate>Mon, 12 Mar 2007 12:51:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Romanian hacker brags about last week&amp;apos;s eBay crack</title>
     <link>http://blogs.techrepublic.com.com/security/?p=178</link>
     <description><![CDATA[According to a March 10th eWeek article by Lisa Vaas, a self-proclaimed Romanian hacker posted eBay member information at an eBay forum ]]></description>
     <category>Computers</category>
     <pubDate>Mon, 12 Mar 2007 12:50:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Everyone without a firewall please raise their hand</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/everyone-without-a-firewall-please-raise-their-hand-14994</link>
     <description><![CDATA[Firewalls are an essential part of network defense. Just be sure you configure them correctly and implement them as part of a layered security defense.]]></description>
     <category>Computers</category>
     <pubDate>Fri, 09 Mar 2007 18:22:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>SSID cloaking is not enough protection</title>
     <link>http://blogs.techrepublic.com.com/security/?p=174</link>
     <description><![CDATA[I recently had a conversation with another security professional about relying on SSID cloaking to protect wireless networks in SMBs (small and medium businesses).  In many cases, these businesses can’t afford the infrastructure and services or don’t have the technical know-how necessary to deploy strong protection like 802.1x.  Instead, they have to implement controls more reasonable and appropriate for their individual situations.  I don’t believe, however, that SSID cloaking by itself is enough protection.]]></description>
     <category>Computers</category>
     <pubDate>Fri, 09 Mar 2007 01:53:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Cybercrime Treaty: another burden for American businesses?</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/cybercrime-treaty-another-burden-for-american-businesses-14953</link>
     <description><![CDATA[The U. S. Senate has ratified the Convention on Cybercrime. Driven by the Council of Europe with significant input from the United States, the treaty will help fight cybercrime that transcends national borders. But it&#039;s the way that this will likely be implemented that worries civil libertarians and should worry American businesses.]]></description>
     <category>Computers</category>
     <pubDate>Fri, 09 Mar 2007 01:52:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>OneCare: uncertifed and killing email</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/cybercrime-treaty-another-burden-for-american-businesses-14953</link>
     <description><![CDATA[OneCare apparently removes entire Outlook mail stores when a virus is found.]]></description>
     <category>Computers</category>
     <pubDate>Fri, 09 Mar 2007 01:45:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>You&#039;re posting my what??</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/yourre-posting-my-what-14893</link>
     <description><![CDATA[We spend a lot of time scrutinizing the Federal government&#039;s handling (or mishandling) of our information. Maybe it&#039;s time we take a closer look at how our local and state governments make our information available. ]]></description>
     <category>Computers</category>
     <pubDate>Mon, 05 Mar 2007 17:50:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Keep your eye on the data</title>
     <link>http://blogs.techrepublic.com.com/security/</link>
     <description><![CDATA[In a ComputerWorld article, Jaikumar Vijayan lists five ways to mitigate risk associated with protecting company data (“Lessons from the DuPont breach: Five ways to stop the leaks”, 28 Feb 2007).  I listed the risk mitigation methods below along with my take on each.]]></description>
     <category>Computers</category>
     <pubDate>Mon, 05 Mar 2007 12:54:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Adventures in Security Podcast, Episode 45 - Keep your eye on the data</title>
     <link>http://adventuresinsecurity.com/Podcasts/AISSeries/AIS_45_Mar_04_2007.mp3</link>
     <description><![CDATA[Vendor bullying, AV software evaluation, Fuzzing, new SPP issue, kernel malware, and data protection]]></description>
     <category>Computers</category>
     <pubDate>Sun, 04 Mar 2007 14:36:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Use risk management for reasonable information asset protection</title>
     <link>http://blogs.techrepublic.com.com/security/?p=158</link>
     <description><![CDATA[Selecting the right security controls can be a daunting task.  By applying the principles of risk management, however, security managers can meet the challenge with confidence.]]></description>
     <category>Computers</category>
     <pubDate>Mon, 19 Feb 2007 16:05:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Adventures in Security Podcast, Episode 43 - Risk Management</title>
     <link>http://dl01.blastpodcast.com/adventuresinsecurity/15702_1171841527.mp3</link>
     <description><![CDATA[iPods as criminal tools, users are not stupid, AJAX vulnerability monitoring, dangers of pirated software, and Risk Management]]></description>
     <category>Computers</category>
     <pubDate>Sun, 18 Feb 2007 23:59:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Protect yourself from the byproducts of software piracy</title>
     <link>http://blogs.techrepublic.com.com/security/?p=157</link>
     <description><![CDATA[It is not news that software piracy is a big problem for software vendors.  Illegal use of applications has been going on since the first PC rolled off the line.  What might be news, however, is the negative impact piracy might have on the Internet and on your company network.]]></description>
     <category>Computers</category>
     <pubDate>Thu, 15 Feb 2007 12:45:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Audit your configuration management process on large projects</title>
     <link>http://articles.techrepublic.com.com/5100-10878_11-6158876.html?part=rss&amp;tag=feed&amp;subj=tr</link>
     <description><![CDATA[Configuration audits are difficult and expensive in terms of resources and time. Nevertheless, they are vital in ensuring that the final solution is complete and correct and that you have accounted for all of the configuration assets used to build the final solution. ]]></description>
     <category>Computers</category>
     <pubDate>Wed, 14 Feb 2007 23:04:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>A new Trojan war on the IM battlefield</title>
     <link>http://www.networkworld.com/news/2007/021207-storm-trojan-ignites-worm.html?fsrc=rss-security</link>
     <description><![CDATA[The Trojan horse that pumped up spam volumes in January is at it again, researchers said today, and is now spreading over instant messaging and engaging in attacks on rival malware. ]]></description>
     <category>Computers</category>
     <pubDate>Wed, 14 Feb 2007 22:57:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Congress is at it again...</title>
     <link>http://www.eweek.com/article2/0</link>
     <description><![CDATA[In this eWeek article, Jim Rapoza comments on two Internet related bills currently being reviewed in Congress.  Taken together, these bills have the effect of Congress viciously shaking privacy by the throat while whispering sweet kindnesses in its ear.]]></description>
     <category>Computers</category>
     <pubDate>Wed, 14 Feb 2007 22:35:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Study: Two Hacks a Minute</title>
     <link>http://www.darkreading.com/document.asp?doc_id=117302&amp;f_src=darkreading_node_1946</link>
     <description><![CDATA[Here is a scary new statistic: A new University of Maryland study reports that the average computer on the Internet is attacked every 39 seconds. That&amp;apos;s not even enough time for you to safely go get a cup of coffee. ]]></description>
     <category>Computers</category>
     <pubDate>Wed, 14 Feb 2007 22:27:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>US-CERT Vulnerability Summary for the Week of February 5, 2007</title>
     <link>http://www.us-cert.gov/cas/bulletins/SB07-043.html</link>
     <description><![CDATA[The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cyber Security Division (NCSD) / United States Computer Emergency Readiness Team (US-CERT). For modified or updated entries, please visit the NVD, which contains historical vulnerability information.]]></description>
     <category>Computers</category>
     <pubDate>Wed, 14 Feb 2007 22:15:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Protect your organization from steganographic data theft</title>
     <link>http://blogs.techrepublic.com.com/security/?p=151</link>
     <description><![CDATA[The art and science of steganography has been around for centuries.  It’s used to write hidden messages in a way that prevents anyone but the recipient from interpreting them.  As technology grew it was only natural for steganographic techniques to find their way into electronic processes.  It appears that steganography is a growing challenge for forensics investigators and organizations using content monitoring or filtering to protect sensitive data.]]></description>
     <category>Computers</category>
     <pubDate>Mon, 12 Feb 2007 21:01:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Consider secondary VLANs to isolate critical or high risk systems</title>
     <link>http://blogs.techrepublic.com.com/security/?p=154</link>
     <description><![CDATA[Virtual local area network (VLAN) technology has been around for some time.  It provides for flexible, distributed Layer 2 network segmentation and resource isolation.  An additional capability often overlooked by network engineers allows for further segmentation of a VLAN: the secondary or private VLAN (PVLAN).  Using PVLANs, organizations can achieve more granular network segmentation and control without configuring additional VLANs, routers, or firewalls.]]></description>
     <category>Computers</category>
     <pubDate>Mon, 12 Feb 2007 21:00:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Getting to Secure Internet Identity Management</title>
     <link>http://blogs.techrepublic.com.com/security/?p=156</link>
     <description><![CDATA[Considering the coverage it got, it shouldn’t be a surprise to anyone that in a February 6, 2007 keynote address at the RSA conference in San Francisco, Microsoft chairman Bill Gates and Microsoft chief research and strategy officer Craig Mundie announced the software giant’s support for OpenID.  Gates and Mundie pledged to work toward the integration of Microsoft’s CardSpace identity management software with the OpenID project.  In my opinion there is still one question that’s still unanswered—why should we care?  What value does either of these products—alone or together—provide to home or business users?]]></description>
     <category>Computers</category>
     <pubDate>Mon, 12 Feb 2007 20:58:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Microsoft&amp;apos;s new OS: Vienna</title>
     <link>http://www.darkreading.com/document.asp?doc_id=117076&amp;f_src=darkreading_node_1946</link>
     <description><![CDATA[&quot;It&amp;apos;s also likely that Vienna will be designed to act in less of a client-centric manner than its predecessors and more like a conduit between the desktop and a host of services that Microsoft plans to deliver over the Web under its Windows Live initiatives. Those services include search, e-mail, and social networking tools. ]]></description>
     <category>Computers</category>
     <pubDate>Mon, 12 Feb 2007 20:54:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>PKI Rises Again?</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/pki-rises-again-13228</link>
     <description><![CDATA[PKI might be making a comeback, but the challenges associated with a successful implementation have not changed.]]></description>
     <category>Computers</category>
     <pubDate>Thu, 30 Nov 2006 19:22:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Internet Cafe Password Tricks Protect Very Little</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/internet-cafe-password-tricks-protect-very-little-13144</link>
     <description><![CDATA[In a paper published this year, Cormac Herley and Dinei Florencio of Microsoft Research outlined a method a person can use in an Internet café to protect her password from keystroke loggers that might be installed on a cafe PC. In my opinion, this is a great trick, but it falls short of actually protecting sensitive information that might find its way into a cafe PC. ]]></description>
     <category>Computers</category>
     <pubDate>Sun, 26 Nov 2006 21:46:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>The Browser Freedom Risk</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/the-browser-freedom-risk-13133</link>
     <description><![CDATA[The browser used within an organization should be selected based on functionality and compatibility with web application strategies. Once selected, users should be restricted--either through technology or policy--from installing alternative browser solutions. This approach allows IT managers to focus on hardening a single Internet/intranet interface to protect information assets.]]></description>
     <category>Computers</category>
     <pubDate>Fri, 24 Nov 2006 20:30:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Technical Skills ARE Important</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/technical-skills-are-important-13052</link>
     <description><![CDATA[I have been engaged in some discussions recently about the value of technical skills to an IT manager.  Most of these discussions were prompted by numerous articles and blogs about the changing face of IT-that technical skills are becoming less important than business and business analysis skills.  I disagree.]]></description>
     <category>Computers</category>
     <pubDate>Tue, 21 Nov 2006 01:16:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Manage Bluetooth Risk</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/manage-bluetooth-risk-12924</link>
     <description><![CDATA[Bluetooth is built into most smartphones, PDAs, cellular phones, and laptops today. Its developers saw it as way to create personal networks to connect various electronic devices without the need for wires. Although it functions well as a wireless personal network technology, it can increase the risk to business information assets.]]></description>
     <category>Computers</category>
     <pubDate>Mon, 13 Nov 2006 21:15:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Workplace Privacy vs. Computer Abuse Investigations</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/workplace-privacy-vs-computer-abuse-investigations-12898</link>
     <description><![CDATA[Employee expectation of privacy in the workplace is a constant point of contention between employers and employees who believe they have been wrongfully terminated or otherwise sanctioned for computer abuse.  Although there is significant justification for the position of employers, here are some guidelines managers should consider]]></description>
     <category>Computers</category>
     <pubDate>Sun, 12 Nov 2006 20:29:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Adventures in Security Podcast, Episode 42 - Stepping up to security challenges</title>
     <link>http://blastpodcast.com/viewpodcast.html?id=441</link>
     <description><![CDATA[Commentary on iPods in business, security as a process, and how some programming teams are stepping up to meet security challenges.]]></description>
     <category>Computers</category>
     <pubDate>Sat, 28 Oct 2006 17:42:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Using iPods for Business Training</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/using-ipods-for-business-training-12563</link>
     <description><![CDATA[Fox News did not tell the whole story when it aired a report on the use of iPods for business training. Here is the balance.]]></description>
     <category>Computers</category>
     <pubDate>Sat, 28 Oct 2006 02:32:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>And we do it why?</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/and-we-do-it-why-12535</link>
     <description><![CDATA[This article describes an incident in which the current value of an established security control was questioned.   More important was the increased awareness that each audit committee member must keep an open mind when the relevance of controls is questioned. We need to remember that security is a process, not an end state.]]></description>
     <category>Computers</category>
     <pubDate>Thu, 26 Oct 2006 23:25:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Web Application Security Course - Module 2</title>
     <link>http://www.adventuresinsecurity.com/SCourses.html</link>
     <description><![CDATA[Web application risks and safeguards related to the last five vulnerabilities on the OWASP top ten list.]]></description>
     <category>Computers</category>
     <pubDate>Sat, 21 Oct 2006 20:22:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Getting with the program</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/getting-with-the-program-12424</link>
     <description><![CDATA[During the past several weeks, our Software Development teams have been transitioning quickly into a close partner of the IS Security team. This week it all came together during a follow-up meeting about how best to handle web application vulnerabilities.]]></description>
     <category>Computers</category>
     <pubDate>Sat, 21 Oct 2006 13:19:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Adventures in Security Podcast, Episode 41 - Cyber-Espionage</title>
     <link>http://adventuresinsecurity.com/podcasts.html</link>
     <description><![CDATA[In this episode, I look at three topics--the balance between customer welfare and vendor public image during a security incident, establishing system assurance, and the U.S. vulnerability to cyber-espionage.]]></description>
     <category>Computers</category>
     <pubDate>Sun, 15 Oct 2006 14:10:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>What comes first, the customer or public image?</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/what-comes-first-the-customer-or-public-image-12276</link>
     <description><![CDATA[Within the last two weeks two incidents occurred that appear to reflect certain organizations&amp;apos; fear of public disclosure to the point of putting their customers at risk. In the first incident, Microsoft&amp;apos;s license verification process (WGA) failed for a short time causing end user device connectivity issues. In the second, Cisco&amp;apos;s Remote Operations Services (ROS) network, which is connected to customer networks, was infected by a worm. Let&amp;apos;s take a look at each incident.]]></description>
     <category>Computers</category>
     <pubDate>Sat, 14 Oct 2006 14:27:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Web Application Security Course - Module 1</title>
     <link>http://www.adventuresinsecurity.com/SCourses.html</link>
     <description><![CDATA[Web application risks and safeguards related to the first five vulnerabilities on the OWASP top ten list.]]></description>
     <category>Computers</category>
     <pubDate>Wed, 11 Oct 2006 01:07:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Cyber-espionage: How vulnerable are we?</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/cyberespionage-how-vulnerable-are-we-12138</link>
     <description><![CDATA[In January of 2006, I wrote an article about the vulnerability of U.S. Government information assets to foreign espionage--especially attacks initiated by China. Because of recent talk about Chinese attacks against Commerce Department systems, I believe it&amp;apos;s a good time to take another look.]]></description>
     <category>Computers</category>
     <pubDate>Sun, 08 Oct 2006 22:26:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Establishing System Assurance</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/establishing-system-assurance-12051</link>
     <description><![CDATA[I examine how an organization of any size might achieve reasonable and appropriate assurance.  To do this, we&amp;apos;ll explore the various controls that make up a strong system assurance environment.  Although there are many ways to categorize controls, I&amp;apos;m using the three that work best in my environment--infrastructure, access, and administrative.]]></description>
     <category>Computers</category>
     <pubDate>Tue, 03 Oct 2006 22:49:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Adventures in Security Podcast, Episode 40 - Keystroke Dynamics</title>
     <link>http://blastpodcast.com/viewpodcast.html?id=441</link>
     <description><![CDATA[Biometrics has long been one of the solutions touted by security vendors to meet multi-factor authentication objectives. However, user acceptance and cost issues often prevent organizations from adopting biometrics as a solution. This isn’t to say that other multi-factor solutions are any less cost prohibitive. The capital expenditure and on-going maintenance costs of token-based systems are often higher than those for biometrics. Solutions based on keystroke dynamics might help meet these business challenges.]]></description>
     <category>Computers</category>
     <pubDate>Tue, 03 Oct 2006 01:59:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Adventures in Security Podcast, Episode 39 - The Home PC Threat</title>
     <link>http://blastpodcast.com/viewpodcast.html?id=441</link>
     <description><![CDATA[Why it is important where audit artifacts are obtained and the growing threat of home PC business information processing.]]></description>
     <category>Computers</category>
     <pubDate>Mon, 25 Sep 2006 00:01:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Keystroke Dynamics: Low Impact Biometric Verification (Links to PDF)</title>
     <link>http://adventuresinsecurity.com/Papers/Keystroke_Dynamics.pdf</link>
     <description><![CDATA[Biometrics has long been one of the solutions touted by security vendors to meet multi-factor authentication objectives.  However, user acceptance and cost issues often prevent organizations from adopting biometrics as a solution.  This isn’t to say that other multi-factor solutions are any less cost prohibitive.  The capital expenditure and on-going maintenance costs of token-based systems are often higher than those for biometrics.  Solutions based on keystroke dynamics might help meet these business challenges.]]></description>
     <category>Computers</category>
     <pubDate>Sat, 23 Sep 2006 21:22:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>The Threat of Home PCs to Your Information Resources</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/the-threat-of-home-pcs-to-your-information-resources-11778</link>
     <description><![CDATA[In the world of today , most employees have a PC at home. This presents a problem to security professionals when employees want to use these privately owned personal computers to access and process company information.]]></description>
     <category>Computers</category>
     <pubDate>Thu, 21 Sep 2006 21:39:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Who should provide audit artifacts?</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/who-should-provide-audit-artifacts-11612</link>
     <description><![CDATA[Audit artifacts can be interpreted in many ways. Likewise, the intent of policies, standards, and guidelines must be understood before compliance decisions are finalized. Who is best qualified to provide this information?]]></description>
     <category>Computers</category>
     <pubDate>Tue, 12 Sep 2006 00:01:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Adventures in Security Podcast, Episode 38</title>
     <link>http://blastpodcast.com/viewpodcast.html?id=441</link>
     <description><![CDATA[The importance of change management, the potential security risks when desperation enters the project lifecycle, how virtual floors can provide secure flexible business-to-business connectivity, and finally, a look at some ways to handle sensitive information once printed, copied, or faxed.]]></description>
     <category>Computers</category>
     <pubDate>Sat, 09 Sep 2006 17:53:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>But what about the paper?</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/but-what-about-the-paper-11572</link>
     <description><![CDATA[A nearly incalculable number of sheets of paper flow through printers, copiers, and fax machines every day.  What does your organization do to protect sensitive information that has left the safety of your hardened electronic devices and pathways?]]></description>
     <category>Computers</category>
     <pubDate>Fri, 08 Sep 2006 23:34:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Virtual Floors can help meet B2B security challenges</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/virtual-floors-can-help-meet-b2b-security-challenges-11474</link>
     <description><![CDATA[Virtual Floors are a big help when standardizing B2B network connectivity.]]></description>
     <category>Computers</category>
     <pubDate>Tue, 05 Sep 2006 15:55:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Desperation does not justify bad security</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/desperation-doesnt-justify-bad-security-11441</link>
     <description><![CDATA[When implementation teams reach the point of desperation, when business users are pushing hard for that new upgrade or system, due diligence is typically in danger of becoming roadkill.]]></description>
     <category>Computers</category>
     <pubDate>Sat, 02 Sep 2006 19:35:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Integrating application security with application delivery</title>
     <link>http://adventuresinsecurity.com/News.html</link>
     <description><![CDATA[The job of a network manager has never been more complicated than it is today. As an IT manager, you are expected to ensure that all systems function in zero seconds, without any failure, at the lowest possible cost.  How does one begin to plan this kind of investment?]]></description>
     <category>Computers</category>
     <pubDate>Sun, 27 Aug 2006 17:53:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  <item>
     <title>Software Glitch?  Change Management?</title>
     <link>http://blogs.ittoolbox.com/security/adventures/archives/software-glitch-change-management-11319</link>
     <description><![CDATA[I have two words for the IT teams at both the Department of Education and Affiliated Computer Services (ACS)-Change Management.]]></description>
     <category>Computers</category>
     <pubDate>Sat, 26 Aug 2006 21:45:00 GMT</pubDate>
     <source url="http://adventuresinsecurity.com">Tom Olzak&#039;s Security Updates</source>
  </item>
  </channel>
  </rss>
