Tech Review Security: Thursday, September 6, 2012

Dem, GOP platforms expose divide over cyber defense

http://gcn.com/articles/2012/09/05/democratic-gop-cybersecurity-platform-differences.aspx?s=gcndaily_060912

• platforms different
• Dem
• "...help business and government protect..."
• put government legislation in place that requires implementation of minimum set of requirements
• GOP
• "...effective cybersecurity..."
  
• remove regulation the current hinder sharing of cyber data between government and business
• no burden upon governemnt

The GOP stand make more sense.  Unless a business 'lack' of security is threatening that nation as a whole, leave them alone.  I like the approach of giving tools and support rather than regulation.  The tools and support are a help.  The regulation is a burden.

Justice gives NASCIO grant to promote info sharing across borders

http://gcn.com/Articles/2012/09/05/Justice-awards-NASCIO-information-sharing-grant.aspx?s=gcndaily_060912&Page=1

Tech Review AI: Wednesday, June 20, 2012

Cities using AI for pre-crime monitoring of surveillance videos

http://gcn.com/articles/2012/06/19/ai-video-surveillance-analysis.aspx?s=gcndaily_200612

Tech Review Cloud: Wednesday, June 20, 2012

5 ways the public cloud can go wrong for DOD agencies

http://gcn.com/articles/2012/06/18/5-risks-to-dod-agencies-adopting-cloud.aspx?s=gcndaily_200612

• Total Cost of Ownership (TCO)
• Security and privacy
• functionality
• records and compliance
• Support

"Beast of Breed" commercial solution may not be good defense environment solutions.

Tech Review Security: Thursday, June 14, 2012

Researchers find 'proof' of Flame-Stuxnet link

http://gcn.com/articles/2012/06/11/flame-world-class-crypto-stuxnet-shared-code.aspx?s=gcndaily_120612

• State sponsored computer virus
• Is this a good direction?
• what are the future consequences? 

Tech Review Security: Friday, May 4, 2012

Over 1.5 million Visa, MasterCard credit card numbers stolen?

http://www.zdnet.com/blog/security/over-15-million-visa-mastercard-credit-card-numbers-stolen/11755?tag=nl.e550

• Global Payments
• Hacked over a period of time

A first: Hacked sites with Android drive-by download malware

http://www.zdnet.com/blog/security/a-first-hacked-sites-with-android-drive-by-download-malware/11810?tag=nl.e539

• NotCompatible
• Update.apk
• infiltrate normally protected information or systems
• Automatically downloaded
• sideloading must be enabled
• loading from "Unknown sources"
• Used must agree to install

How to hide from face-detection technology

http://whatsnext.blogs.cnn.com/2012/04/29/how-to-hide-from-face-detection-technology/?hpt=hp_bn11

Tech Review Security: Tuesday, April 24, 2012

ID thieves discovering defenseless target - the dead

http://www.zdnet.com/blog/identity/id-thieves-discovering-defenseless-target-the-dead/434?tag=nl.e589

• this could be anyone, even some who just passed away.

Tech Review Security: Friday, April 20, 2012

The Pwn Plug is a little white box that can hack your network

http://arstechnica.com/business/news/2012/03/the-pwn-plug-is-a-little-white-box-that-can-hack-your-network.ars

• Got this idea from a SheevaPlug

Finally, an alternative to the tyranny of passwords?

http://gcn.com/articles/2012/05/07/cybereye-darpa-biometric-passwords.aspx?s=gcndaily_170412

• Darpa biometric passwords

Tech Review Security: Tuesday, February 7, 2012

Anonymous takes down Boston PD site, releases FBI/Scotland Yard call

http://en.wikipedia.org/wiki/Hacktivism

• Hactivisim:  the use of computers and computer networks as a means to promote political ends

http://gcn.com/articles/2012/02/03/anonymous-takes-credit-for-boston-pd-hack.aspx?s=gcndaily_060212

• example

New, stealthy threats change best responses to cyberattack

http://gcn.com/Articles/2012/02/03/NIST-incident-response-guide-advanced-threats-APTs.aspx?s=gcndaily_060212&Page=2

• Document everything
• Work in a team of two or more
• Analyze evidence
• Notify appropriate people
• Notify US-CERT
• Stop the incident
• Preserve evidence 
• Wipe out all effects of the incident
• Identify and mitigate
• Confirm operations are restored
• Create a final report

The three types of online attackers

http://www.techrepublic.com/blog/security/the-three-types-of-online-attackers/7349?tag=nl.e550

• Criminals
• Hacktivists
• Governments

Tech Review Security: Tuesday, 31, 2012

Police testing long-range scanner to 'frisk' for guns on the street

http://gcn.com/Articles/2012/01/27/NYPD-long-range-weapons-scanner.aspx?s=gcndaily_300112&Page=1

• NYC Police
• 80 feet away
• without consent
• DoD
• currently 3 or 4 feed away
• terahertz range
• pass through non-conducting material
• wood brick
• Jingle Liu
• Rensselaer Polytechnic Institute
• Nature Photonics
• miles away
• drones in NYC