Read this paper for an in-depth discussion of malware identification, naming and classification and an exploration of the most useful ways for administrators to detect and analyze threats. 

This whitepaper outlines the drivers for log management as well as their underlying challenges and drive towards a common set of requirements for evaluation of log management tools. 

A common notion is that an Intrusion Prevention System (IPS) is nothing more than an Intrusion Detection System (IDS) deployed in-line with blocking capabilities. This paper explains why that notion is incorrect. 

Learn about security information management systems (SIMs) and how they support a security information lifecycle of collection, alerting, reporting, and forensics. 

The growth of the internet brought about massively scalable distributed systems which have proved advantageous not only for governments, businesses and end-users, but also for criminals. In this webcast, review past, present, and future considerations regarding cybercrime, and discover next-generation methods of combating weaponized software. 

Use the Sophos Threat Detection Test to quickly perform a scan and find any viruses, spyware, adware or zero-day threats that might have by-passed your existing protection. 

From desktop vulnerabilities to the impact open proxies, JavaScript, universal access to HTTP and the adoption of embedded HTML in email, this white paper presents the top ten scenarios hackers use the web to attack your infrastructure. 

Read this chapter from "HOWTO Secure and Audit Oracle 10g and 11g" (CRC Press, 2009) and learn how to secure Oracle by checking for weak passwords, configuring failed login policies, preventing DoS attacks with resource limits, and auditing user profiles. 

This video offers an in-depth look at a number of log management strategies that security administrators use in their organizations today and explain their "secrets" for success. 

In this podcast, our expert explains whether users really need both anomaly and signature based strategies, and if so, how to overcome implementation challenges. 

Entraction has no reservations about the effectiveness and efficiencies that are possible using device fingerprinting paired with device reputation; this is real data pulled from the user's computer, coupled with fact-based evidence of fraud from that computer's past. Read this case study to learn about how Entraction is fighting fraud. 

This presentation highlights how virtualization has progressed from vaporware to an actual concept storage managers are using to minimize the amount of machines needed to manage, centralize data and change the economics of storage. 

The monetizing of economic crime in Web 2.0 makes Web security a top priority for security pros. Traditional defenses are obsolete, so read this presentation transcript, taken from the video cast of the same name, and learn best practices for creating a new approach to Web security.