Wed, 26 July 2006
This week I talked to Ravi Ganesan, founder of TriCipher. He fills me in on some of what's been happening with Man in the Middle attacks against two-factor authentication used by banks and financial institutions. It sounds like this is a fairly small issue right now, but it could quickly grow in the near future. Ravi is clearly an expert on authentication solutions and gives some hints about where security professionals need to be looking in the future. I also take a few minutes to talk about some changes that may be happening to the PCI standards in the near future, the concept of compensating controls. By the way, I mistakenly called Ravi the CEO in the podcast, sorry for the mistake. I'm not a CSO either, so I figure that makes us even.
Network Security Podcast, Episode 36, July 25th, 2006
Tonight's Music: Shemekia Copeland - Breakin' Out
Technorati Tags: security, podcast, Man in the Middle attack
Wed, 19 July 2006
Note to self, don't schedule interview before the second cup of coffe. This past Sunday morning I had a chance to talk to Brian Contos from ArcSight, who has a book coming out next month, Enemy at the Water Cooler: True Stories of Insider Threats and Countrmeasures. Brian has a lot of great stories and experience dealing with the insider threat in the real world, which he's more than willing to share with us. There's a lot more Brian has to share, so we'll very likely be hearing from him again in the near future. It ended up being a long interview, but I hope you get as much out of our conversation as I did.
Network Security Podcast, Episode 35, July 18th, 2006
Tonight's Music: Michael Burks - Heartless from Alligator Records
Technorati Tags: security, insider threat, Brian Contos
Wed, 12 July 2006
It's back to being just me on the podcast, at least for tonight. I was supposed to have a special guest on the show tonight, but he had to back out due to other commitments. You'll have to listen to the podcast to find out who it was going to be. I hope I'll still be able to interview him in the near future. But I'm learning not to count my interviews before they're recorded. Vacation was a lot of fun, and you can find an expanding set of photos on my Flickr account.
Thanks to Mike Farnum and Steve Murawski for pointing me to Sudo for Windows.
Network Security Podcast, Episode 34, July 11, 2006
Technorati Tags: security, government, PCI