Recently, General Alexander, Commander of the U.S. Cyber Command, was asked, "What is the cyber equivalent of 'rules of the road' for driving, those standards that we need now to protect our systems, to ensure those systems are secure?" His answer: the critical security controls. General Alexander describes the critical controls as "the right starting point."Many government agencies, companies (large and small), and non-profit institutions hav...

For more than 10 years, the Internet Storm Center has been providing free analysis and warning to our community. SANSFIRE 2013 is not just another training event. It is our annual "ISC Powered" event. It taps into the expertise behind our daily postings, podcasts, and data collection efforts by offering evening events focusing on current trends and actual relevant threats. The strength of the Internet Storm Center is its group of handlers, who...

IPv6 is critical to the Internet's continued growth as a platform for innovation and economic development. The transition to IPv6 will require collaboration across the Internet industry from Internet service providers, Web companies, hardware vendors and operating system vendors. All major industry players need to take action to ensure products and services are ready for the transition. ISPs need to make IPv6 connectivity available to their us...

For more than 10 years, the Internet Storm Center has been providing free analysis and warning to our community. Have you read Bojan's malware analysis articles? Have you seen Manuel's first hand insights into SCADA? Are you using Guy's DNS blackhole? Are you aware of our various data collections?SANSFIRE 2012 is not just another training event. It is our annual "ISC Powered" event. It is your chance to meet some of our handlers face to face,...

Mark your calendar for SANS Cyber Defense Initiative (CDI) 2011, December 9 - 16 in Washington DC. Knowledge is power, especially when the knowledge is about the latest attacks and what to do about them. Now is the time to be sure you know how the newest attacks work and what can and cannot be done to stop them or mitigate the damage. Now is the time to be sure that your tools are up to the task of finding, blocking, and deciphering hacking at...

SANS WhatWorks in Incident Detection and Log Management Summit 2011The Incident Detection and Log Management Summit will offer two full days of content in a single track, consisting of expert keynotes, professional briefings and dynamic panels. It will concentrate on network-centric and host-centric methods to detect intruders that work in the real world.We will also focus on which logging configurations capture the history of a hacker's activ...

If you like what the SANS Internet Storm Center (ISC) provides to the cyber security community, then you will love SANSFIRE! SANSFIRE 2011 is the one annual training event powered by the ISC. This years event will be held in Washington DC, July 15-24, and includes more than 25 courses and dozens of up-to-the-minute field reports from ISC handlers. Each evening, the ISC handlers share riveting talks on their most interesting experiences and new...

IPv6 may be far away for your network but operating systems and network devices will not hold back. Already, modern operating systems implement IPv6 by default. Windows 7, for example, ships with Teredo enabled by default. Your existing firewall may not block it. Learning more about IPv6 is essential to securing your network. This Summit is designed not just for implementers of IPv6, but also for those who just need to learn how to detect IPv6...

Mark your calendar for SANS Cyber Defense Initiative (CDI) December 10 - 17 in Washington DC. This event will feature 25 courses, including the new SEC 569: Combating Malware in the Enterprise and SEC580: Metasploit Kung Fu for Enterprise Pen Testing. Register by October 27 and save $400 on tuition fees with discounts offered to early registrants. http://www.sans.org/cyber-defense-initiative-2010/SANS is the one education organization known fo...

The Incident Detection and Log Management Summit will offer two full days of content in a single track, consisting of expert keynotes, professional briefings and dynamic panels. It will concentrate on network-centric and host-centric methods to detect intruders that work in the real world. We will also focus on which logging configurations capture the history of a hacker's activity on your machine, from the establishment of unauthorized accou...