Welcome to SecurityProcedure, Information System Auditing Resources. We maintain FREE security policies, procedures and resources. Our scope from from industrial standard such as Cobit, ITIL, ISO 27001 to regulatory compliances such as Basel II, HIPAA, PCI DSS and Sarbanes Oxley

Download Free Antispam Service for Blogs from Six Apart

Six Apart, a company who makes the blogging tools islaunching a free, semi-open-source filter for blog comment spam, named TypePad AntiSpam. TypePad AntiSpam is the same antispam technology that's currently built into TypePad, but the company is making it available to all who want it, with no charge and no usage restrictions. The service is in semi-beta: "The code is not beta but the (open source framework around it) is," Six Apart CEO Chris Alden also said.

Feature:
- Use it for free. TypePad AntiSpam beta is free for any type of use, personal and commercial, regardless of how many comments you receive. Plugins are available for Movable Type and WordPress.
- Help make it better. Whenever you report unwanted comments, the TypePad AntiSpam engine learns from you, so that it can make even smarter and more effective decisions about spam in the future.

What is End Point Security?

Since the massive implementation of information technology, the need of proper end point security become one of the critical discussion in the company about how manage end point security effectively.

End Point Security Definition:

  • A strategy in which security software is distributed to end-user devices but centrally managed [searchsecurity.techtarget.com]
  • An information security concept that basically means that each device (end-point) is responsible for its own security [wikipedia.com]
  • An individual computer system or device that acts as a network client and serves as a workstation or personal computing device[endpointsecurity.org]

Example of  End Point Devices:
Laptop, PCs, Handhelds, specialized equipment such as inventory scanners and point-of-sale terminals

Download Latest Free WinSCP 4.1.5



Download Page
filename: winscp415.exe
size: 1.3MB
website: winscp.net

WinSCP is a SFTP client and FTP client for Windows. Its main function is the secure file transfer between a local and a remote computer. It uses Secure Shell (SSH) and supports, in addition to Secure FTP, also legacy SCP protocol.

Development of WinSCP started around May 2000 and continues. Originally it was hosted by the University of Economics in Prague, where its author worked at the time. Since July 16, 2003 it is licensed under GPL and hosted on SourceForge.net.

WinSCP is based on the implementation of the SSH protocol from PuTTY and FTP protocol from FileZilla.

WinSCP is also available as a plugin for two file managers, FAR and Altap Salamander.

Internet Explorer 7.0 vs. Safari 3.0 vs. Firefox 3.0 Comparison in security perspective

Internet Explorer 7.0 vs. Safari 3.0 vs. Firefox 3.0 Comparison in security perspective

Criteria
Internet Explorer 7.0
Safari 3.0
Firefox 3.0
Out of the box configuration: In their own ways, all three of these browsers are delivered in an overly trusting configuration. If you’re serious about being secure in your Web browsing habits, it’s clear you’ll need to spend some time fine-tuning each of
these products.
Score: D internet zone Score: F Score: D safe browsing
Security features: All three browsers offer some rudimentary security controls in the way of being able to allow or disallow broad categories of content, such as Javascript, Java, or ActiveX. But by default, these features are so broad in their “all or nothing” approaches as to be next to worthless. Score: D Score: F Score: C
Security add-ons: the first thing to take control of in securing a browser is active content. None of the three browsers is great at that out of the box Score: D Score: D Score: B
Integration with operating system: This category is not directly security-related, but it is nevertheless important in selecting a browser. Score: A Score: A Score: D

Download Top Free 10 Security Tools

Below top 10 Security Tools, and mostly available for free that you can download for your own purpose. Whether you are an IT Security Consultant, IT Auditor or even just newbie who interested in Security. This tools is must be used for your daily security activity. This list generated from very popular website sectools.org who provide top 100 best Security Tools and others reference such as junauza.com

  1. Nessus: Premier UNIX vulnerability assessment tool
  2. Wireshark : Sniffing the glue that holds the Internet together
  3. Snort : Everyone's favorite open source IDS
  4. Netcat : The network Swiss army knife
  5. Metasploit Framework : Hack the Planet
  6. Hping2 : A network probing utility like ping on steroids
  7. Kismet : A powerful wireless sniffer
  8. Tcpdump : The classic sniffer for network monitoring and data acquisition
  9. Cain and Abel : The top password recovery tool for Windows
  10. John the Ripper : A powerful, flexible, and fast multi-platform password hash cracker

Also another 10 top reference

  1. John the Ripper, John the Ripper is a free password cracking software tool initially developed for the UNIX operating system
  2. Nmap, Nmap is my favorite network security scanner. It is used to discover computers and services on a computer network, thus creating a "map" of the network
  3. Nessus, Nessus is a comprehensive vulnerability scanning software. Its goal is to detect potential vulnerabilities on the tested systems
Syndicate content

User login

Who's online

There are currently 0 users and 11 guests online.