Dissecting the Storm Worm threat; UTM: Is it ready for prime time?

Security News Alert This newsletter is sponsored by Awareness Technologies Inc. Think you don't need off-network monitoring?...Think again. With over 40% of today's corporate workforce conducting business outside of the company's confines (laptops, telecommuters and contractors in remote locations), the danger of insider threats from outside the network is at an all time high. While there are many products today relating to network security, few if any, address threats that occur while the company asset is outside of the coprporate network. Without a desktop solution such as SONAR to protect the organization from breaches ocurring both on or off of the network, the loss of data is an eventual probability. Network World's Security News Alert, 11/13/07 Podcast: Dissecting the Storm Worm threat: Josh Corman created a bit of a stir at the recent Interop conference when he told attendees that the Storm Worm botnet seemed to be retaliating against researchers trying to probe its inner workings. In this podcast, Network World's Jason Meserve talks with Corman about the Storm worm, its repercussions and what you can do to protect yourself. (14:22) Podcast: UTM: Is it ready for prime time?: Are there unified threat management firewalls with the chops to provide the perimeter security functions that an enterprise needs? Network World Lab Alliance member Joel Snyder talks with Network World's Christine Burns about the conclusions that can be drawn about UTM now that testing of the products is complete. (19:36) Data loss-prevention efforts stymied by poor processes, 11/12/07: Protecting corporate data entails more than securing the perimeter; it requires that companies identify the data to be secured and explicitly define with processes how to prevent leaks. And according to a recent survey, not enough businesses do what it takes to prevent data leaks. Executive Guide The Security Treadmill This Executive Guide offers interviews with leading, real-world security experts who tell you how to get inside users' heads, fight for a bigger security budget, and whether VoIP security issues are overstated or underrated, and much more. Review this informative guide today. Click Here for More Information Data-protection vendors bolster wares, 11/12/07: Bocada, Arsenal Digital Solutions and Digisense separately announced upgraded software and services designed to help enterprises better manage and protect their data. Indian news site dispensing malware, 11/12/07: The Web site of IndiaTimes, the online news site of the Times Group, one of India's large news and entertainment groups, exposed visitors to malware, according to an advisory Friday by ScanSafe. Symantec makes personnel changes in Asia-Pacific, 11/09/07: Symantec's local managing director, David Sykes, and regional channel director, John Donovan, have abruptly left their posts. Review: IBM/ISS Proventia MX5010 Multi-Function Security Gateway, 11/12/07: The Proventia MX5010 is an amazingly fast IPS that outclassed the competition when it came to detecting the attacks we threw at it. Your secret B identity, 11/12/07: Governance, Risk and Compliance (GRC) Management is fast becoming the No. 1 topic of conversation in the enterprise identity field. All I want for Christmas: Cisco security expert Jamey Heary reveals his security Christmas list - what's on your list? Extending the Vista Evaluation Period: So, you need to evaluate Vista for a good long time without activating all the potential security headaches inherent with Windows Update. Author expert Chris Amaris offers you this perfect legal workaround to extend the evaluation period without activation.  LAN switch security: What hackers know about your switches with Cisco's Christopher Paggen: Contrary to popular belief, Ethernet switches are not inherently secure. Security vulnerabilities exist all over the place. Did you know that there are vulnerabilities in the control plane protocols like STP and CDP? There are holes in the data plane protocols too. Christopher Paggen is prepared to tell you how to avoid these problems. Paggen is a technical marketing engineer for Cisco focusing on high-end firewalls. Join us for a live chat TODAY Nov. 13 from 2 p.m. to 3 p.m. EST, where you can ask him about configuring and securing switches, firewalls or anything else you want to talk about. The Network World IT Buyer's Guides provide comprehensive, detailed information on how to select, test, buy and deploy thousands of network and IT products. The new Network World IT Buyer's Guides offer even more features than before, here's just one that's worth checking out: Wireless LAN Security Editor's note: Starting the week of Nov. 19, subscribers to the HTML version of this newsletter will notice some enhancements to the layout that will provide you with easier and clearer access to a wider range of resources at Network World. We hope you enjoy the enhancements and we thank you for reading Network World newsletters.

MOST-READ STORIES: 1. 5 cool wireless research projects 2. MIT's amazing, foldable, stackable car 3. IBM agrees to buy Cognos for $5B 4. Networking's 50 greatest arguments 5. IPv6: Will matter to enterprises in five years 6. When the patient is a Googler 7. 10 career killers to avoid 8. Testing All-in-one Firewalls 9. Verizon defends redirecting typo traffic 10. Google sued over distributed search patent MOST-READ REVIEW: Testing All-in-one Firewalls

Contact the author: Senior Editor Ellen Messmer covers security for Network World. E-mail Ellen. This newsletter is sponsored by Awareness Technologies Inc. Think you don't need off-network monitoring?...Think again. With over 40% of today's corporate workforce conducting business outside of the company's confines (laptops, telecommuters and contractors in remote locations), the danger of insider threats from outside the network is at an all time high. While there are many products today relating to network security, few if any, address threats that occur while the company asset is outside of the coprporate network. Without a desktop solution such as SONAR to protect the organization from breaches ocurring both on or off of the network, the loss of data is an eventual probability. BONUS FEATURE 90% of IT Managers are leaving their company at risk for a DNS ATTACK. Get the tools and resources you need to keep your DNS healthy and secure. Run a DNSreport on your domain today - 56 critical tests run in 8 seconds. Visit www.dnsreport.com to learn more. (apply coupon NWW2007NLA for a 25% membership discount) PRINT SUBSCRIPTIONS AVAILABLE You've got the technology snapshot of your choice delivered to your inbox each day. Extend your knowledge with a print subscription to the Network World newsweekly, Apply here today. International subscribers, click here. SUBSCRIPTION SERVICES To subscribe or unsubscribe to any Network World newsletter, change your e-mail address or contact us, click here. This message was sent to: security.world@gmail.com. Please use this address when modifying your subscription. Advertising information: Write to Associate Publisher Online Susan Cardoza Network World, Inc., 118 Turnpike Road, Southborough, MA 01772 Copyright Network World, Inc., 2007