Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Risk management is the identification, assessment, and prioritization of risks - defined in ISO 31000 as the effect of uncertainty on objectives, whether positive or negative - followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events or to maximize the realization of opportunities.
3
votes
2
answers
804
views
What risk does commoditized dedicated SHA256 processors pose to IT Operations?
With the advent of GPU-based computing, and now commoditized/dedicated SHA256 processors, what risk does this hardware pose to cryptography?
What security algorithms should be closely watched or upgr …
1
vote
1
answer
293
views
What is the security risk of the Macbook Pro Touchbar?
The new MacBook Pro has a touch bar that has been banned for students taking the bar exam.
What is the issue that would cause this response?
Data leakage
Cheat sheets
Add in apps could alter the …
10
votes
1
answer
403
views
How should I manage people/technicians during an incident/outbreak?
Assume there is an incident that requires immediate response, such as a virus outbreak over email, Cryptolocker actively encrypting files, or a DOS attack.
How should I approach this in a way that …
8
votes
3
answers
2k
views
Secure hard drive disposal: How to erase confidential information
When it comes to disposing of hardware that may contain PII, confidential, or other sensitive material, how do you determine what needs special handling? What process do you use?
I'd like to expand …
4
votes
3
answers
682
views
Where can I find a collection of Threat Models?
I found a very nice SSL Threat model on this web page and would like to find more on different topics.
How would I go about locating more images like these? Is there an organisation or website I cou …
5
votes
4
answers
1k
views
What is the purpose of EICAR?
For as long as can remember, EICAR has been used to test for the presence of Antivirus systems in email, the file system, or other places.
Sometimes the AV solution is so far out of date, that its ef …
16
votes
2
answers
11k
views
How easy/difficult is it to spoof DNS? Are some scenarios safer/more risky than others?
Practically speaking, how easy difficult is it to spoof DNS?
What scenarios are more risky than others? For example:
A phishing email or twitter link that attracts users to click a hyperlink
A l …
1
vote
2
answers
259
views
Activesync: If I disable or rename the AD account does that mean the phone won't be wiped?
Suppose an Activesync phone needs to be wiped because it was lost, stolen, or it was an employee termination.
If we disable the account prior to wiping the device (or the device receiving the wipe co …
3
votes
1
answer
836
views
Can Exchange/OWA still compress static images and be immune to HTTP compression attacks?
Microsoft Exchange / OWA (Outlook Web Access) allows for three different types of compression (link for Ex2010)
Compression setting Description
High Compresses both static and dyna …
15
votes
2
answers
1k
views
When do shared disks "leak" data to other VMs, and how is that mitigated?
Inspired by this answer, I would like to know what are some common threats and mitigation techniques used to prevent one VM from leaking data to another via the shared storage infrastructure.
Possibl …