<?xml version="1.0" encoding="iso-8859-1" ?>
<rss version="2.0">
<channel>
<title><![CDATA[Recent White Papers, Webcasts and Case Studies - TechRepublic]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/]]></link>
<description><![CDATA[Recent White Papers, Webcasts and Case Studies - TechRepublic]]></description>
<language>en-us</language>
<item>
<title><![CDATA[Configuring content indexing in SharePoint 2007]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1023209]]></link>
<description><![CDATA[TechRepublic Pro author Brien Posey looks at how content is indexed in SharePoint Server 2007 and describes some of the indexing options that you can configure to optimize the search engine feature.]]></description>
<pubDate>Wed, 01 Jul 2009 12:49:36 -0700</pubDate>
</item>
<item>
<title><![CDATA[IT professionals will not drop Windows XP quietly (if ever)]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1023207]]></link>
<description><![CDATA[A couple of weeks ago, I asked a series of poll questions about Microsoft Windows XP. The poll results are very informative and definitely give us an indication about where the TechRepublic membership stands with regard to a potential operating system migration. To put it politely and succinctly -- most IT professionals are not looking forward to it.

This download is also available as an entry in the TechRepublic Microsoft Windows Blog.]]></description>
<pubDate>Wed, 01 Jul 2009 07:47:16 -0700</pubDate>
</item>
<item>
<title><![CDATA[The Necessary Convergence of IT and Facilities: Bringing the Two Groups Together Under One Unified Process]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022301]]></link>
<description><![CDATA[Many organizations are seeking to reduce energy consumption to combat rising costs and carbon emissions. The data center, power-hungry as it is, is naturally central to any energy-saving initiatives. However, many organizations are stymied by a disconnect between IT and Facilities - one wholly dependent on the other, both at the mercy of each other's actions, yet rarely working collaboratively for mutual benefit. In the typical organization, IT and Facilities teams operate independently, each with their separate monitoring and management systems. Apart, neither group can optimize energy consumption and system availability across the big picture. The data center could be consuming more energy than necessary. Essential IT applications could be at risk from infrastructure weaknesses. Inefficiencies could force premature construction of additional power and cooling infrastructure.]]></description>
<pubDate>Wed, 01 Jul 2009 01:11:03 -0700</pubDate>
</item>
<item>
<title><![CDATA[Can Intrusion Detection Implementation Be Adapted to End-User Capabilities?]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022299]]></link>
<description><![CDATA[In an environment where technical solutions for securing networked systems are commonplace, there still exist problems in implementation of such solutions for home and small business users. One component of this protection is the use of intrusion detection systems. Intrusion detection monitors network traffic for suspicious activity, performs access blocking and alerts the system administrator or user of potential attacks. This paper reviews the basic function of intrusion detection systems and maps them to an existing end-user capability framework. Using this framework, implementation guidance and systematic improvement in implementation of this security measure are defined.]]></description>
<pubDate>Wed, 01 Jul 2009 00:54:59 -0700</pubDate>
</item>
<item>
<title><![CDATA[Adaptation Techniques for Intrusion Detection and Intrusion Response Systems]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022297]]></link>
<description><![CDATA[This paper examines techniques for providing adaptation in intrusion detection and intrusion response systems. As attacks on computer systems are becoming increasingly numerous and sophisticated, there is a growing need for intrusion detection and response systems to dynamically adapt to better detect and respond to attacks. The Adaptive Hierarchical Agent-based Intrusion Detection System (AHA! IDS) provides detection adaptation by adjusting the amount of system resources devoted to the task of detecting intrusive activities. This is accomplished by dynamically invoking new combinations of lower level detection agents in response to changing circumstances and by adjusting the confidence associated with these lower-level agents.]]></description>
<pubDate>Wed, 01 Jul 2009 00:53:57 -0700</pubDate>
</item>
<item>
<title><![CDATA[HoneyAnalyzer - Analysis and Extraction of Intrusion Detection Patterns & Signatures Using Honeypot]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022295]]></link>
<description><![CDATA[A Honeypot is a security resource, which is intended to be attacked and compromised to gain more information about the attacker and his attack techniques. A honeypot can also indicate about how to perform forensics. The information gathered by watching a honeypot being probed is invaluable. It gives information about attacks and attack patterns. Currently, the creation of intrusion detection signatures is a tedious process that requires detailed knowledge of the traffic characteristics of the phenomenon to be detected. This paper addresses these issues. This paper has proposed, HoneyAnalyzer, a tool for analyzing honeyd-logs in a RDBMS with a web-based monitoring interface. The data collected from Honeypot is analyzed for possible attacks, scans, and viruses.]]></description>
<pubDate>Wed, 01 Jul 2009 00:52:56 -0700</pubDate>
</item>
<item>
<title><![CDATA[Multi-Layer Security Platforms: The New Definition for Best of Breed]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022291]]></link>
<description><![CDATA[Significant changes in the threat, technology, and regulatory landscapes are forcing organizations to implement an increasing array of security controls in an increasing number of locations throughout their business environments. In response to this situation, organizations should be reassessing their definition for and use of best-of-breed security solutions. Indeed, security strategies based on heavy use of best-of-breed point products are no longer ideal, particularly in terms of cost and security effectiveness. Instead, enterprises and managed security service providers alike should be embracing multi-layer security platforms - particularly those exhibiting high degrees of flexibility, performance, and cost effectiveness - as the new best-of-breed solution when it comes to securing enterprise computing environments.]]></description>
<pubDate>Wed, 01 Jul 2009 00:50:53 -0700</pubDate>
</item>
<item>
<title><![CDATA[Internet - Threats, Risk Mitigation and Reputation Strategies "The Other Side of the Coin"]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022289]]></link>
<description><![CDATA[Over the last several years, financial institutions have spent billions of dollars and resources securing a perimeter defense system consisting of intrusion detection, intrusion prevention, firewalls, user authentication, and other layers of security all built to secure their financial systems. Due to the exponential increase in internal and external information security incidents, these investments are necessary to protect an institution's reputation and revenue. In addition, the federal government is using regulatory means to ensure the banks take responsibility for potential losses. Of equal or even greater threat, however, are the social aspects of the Internet that cannot be controlled. For example, financial institutions need to be aware of the reputational risk that is inherent on the Internet.]]></description>
<pubDate>Wed, 01 Jul 2009 00:49:51 -0700</pubDate>
</item>
<item>
<title><![CDATA[A Comparative Study of Anomaly Detection Schemes in Network Intrusion Detection]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022285]]></link>
<description><![CDATA[Intrusion detection corresponds to a suite of techniques that are used to identify attacks against computers and network infrastructures. Anomaly detection is a key element of intrusion detection in which perturbations of normal behavior suggest the presence of intentionally or unintentionally induced attacks, faults, defects, etc. This paper focuses on a detailed comparative study of several anomaly detection schemes for identifying different network intrusions. Several existing supervised and unsupervised anomaly detection schemes and their variations are evaluated on the DARPA 1998 data set of network connections as well as on real network data using existing standard evaluation techniques as well as using several specific metrics that are appropriate when detecting attacks that involve a large number of connections.]]></description>
<pubDate>Wed, 01 Jul 2009 00:47:48 -0700</pubDate>
</item>
<item>
<title><![CDATA[Probabilistic Techniques for Intrusion Detection Based on Computer Audit Data]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022283]]></link>
<description><![CDATA[This paper presents a series of studies on probabilistic properties of activity data in an information system for detecting intrusions into the information system. The results of the studies provide answers to several questions concerning which properties are critical to intrusion detection. First, their studies show that the frequency property of multiple audit event types in a sequence of events is necessary for intrusion detection. A single audit event at a given time is not sufficient for intrusion detection. Second, the ordering property of multiple audit events provides additional advantage to the frequency property for intrusion detection.]]></description>
<pubDate>Wed, 01 Jul 2009 00:46:46 -0700</pubDate>
</item>
<item>
<title><![CDATA[Applying Mobile Agent Technology to Intrusion Detection]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022281]]></link>
<description><![CDATA[The increasing number of network security related incidents makes it necessary for organizations to actively protect their sensitive data with the installation of Intrusion Detection Systems (IDS). Autonomous software agents, especially when equipped with mobility, promise an interesting design approach for such applications. This paper evaluates the implications of applying mobile agent technology to the field of intrusion detection and presents taxonomy to classify different architectures. Sparta, an actual implementation of a mobile agent based system which is developed at their group is described as well.]]></description>
<pubDate>Wed, 01 Jul 2009 00:45:44 -0700</pubDate>
</item>
<item>
<title><![CDATA[Structural Framework for High Speed Intrusion Detection/Prevention Signature Based Systems]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022279]]></link>
<description><![CDATA[Evident demand for higher speed and better performance products also strives to be a direction of development in the area of intrusion prevention technologies. Shifting of crucial parts of such systems into hardware might provide demanded improvements. Systematic framework, for design of hardware based intrusion protection system, deployed as a misuse detection system is presented together with the most of the problems that are not solved and need to be tackled.]]></description>
<pubDate>Wed, 01 Jul 2009 00:44:43 -0700</pubDate>
</item>
<item>
<title><![CDATA[Testing Network-Based Intrusion Detection Signatures Using Mutant Exploits]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022277]]></link>
<description><![CDATA[Misuse-based intrusion detection systems rely on models of attacks to identify the manifestation of intrusive behavior. Therefore, the ability of these systems to reliably detect attacks is strongly affected by the quality of their models, which are often called "Signatures." A perfect model would be able to detect all the instances of an attack without making mistakes, that is, it would produce a 100% detection rate with 0 false alarms. Unfortunately, writing good models (or good signatures) is hard. Attacks that exploit a specific vulnerability may do so in completely different ways, and writing models that take into account all possible variations is very difficult. For this reason, it would be beneficial to have testing tools that are able to evaluate the "Goodness" of detection signatures.]]></description>
<pubDate>Wed, 01 Jul 2009 00:43:41 -0700</pubDate>
</item>
<item>
<title><![CDATA[Intrusion Detection in 802.11 Wireless Local Area Networks]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022273]]></link>
<description><![CDATA[This paper presents a theoretical study of the wireless protocol defined by the IEEE 802.11 standard in order to identify characteristics or potential idiosyncrasies that could be used to enhance intrusion detection in a WLAN. The control, management, and data frames used to implement the Media Access Control (MAC) functionality along with WLAN services and a state relationship that governs the exchange of frames between wireless stations provide useful insights into the signatures that identify security-related threats and intrusions. The threat signatures obtained in this research clearly indicate the usefulness of IEEE 802.11 frames and the state relationship rules in helping to detect some of the known threats to WLANs.]]></description>
<pubDate>Wed, 01 Jul 2009 00:41:38 -0700</pubDate>
</item>
<item>
<title><![CDATA[Cyber Security Challenges: Designing Efficient Intrusion Detection Systems and Antivirus Tools]]></title>
<link><![CDATA[http://whitepapers.techrepublic.com.com/abstract.aspx?docid=1022271]]></link>
<description><![CDATA[Several information security techniques are available today to protect information and systems against unauthorized use, duplication, alteration, destruction and virus attacks. Intrusion detection a key component of information security (protect, detect and react) and network defense, provides information on successful and unsuccessful attempts to compromise information assurance (availability, integrity, and confidentiality). Intruders can broadly be categorized into two types: external intruders, who are unauthorized users of information, and systems they attack, and internal intruders, who have permission to access information and systems with a few restrictions. This paper presents the state-of-the-art of the evolution of intrusion detection technology and addresses a few intrusion detection techniques and IDS implementations.]]></description>
<pubDate>Wed, 01 Jul 2009 00:40:36 -0700</pubDate>
</item>
</channel>
</rss>
