
Notable headlines: Ryan Naraine: Researchers borrow from Google PageRank for network defense service Attack code published for DNS flaw Nate McFeters: |)ruid and HD Moore release part 2 of DNS exploit 'Spam King' escapes from federal prison iPhone vulnerable to phishing,...
'Spam King' escapes from federal prisonEdward "Eddie" Davidson, a notorious e-mail spammer who was sentenced to jail time in April, has escaped from a federal prison camp in Florence, Colorado. Davidson left, also known as the "Spam King, made a run for it when his wife visited him last Sunday and is now officially...
iPhone vulnerable to phishing, spamming flawsSecurity researcher Aviv Raff left has discovered a pair of basic design flaws that could turn your iPhone into easy bait for malicious phishing and spamming attacks. According to an advisory from Raff, the iPhone's Mail and Safari applications are susceptible to a URL Spoofing vulnerability which...
Researchers borrow from Google PageRank for network defense serviceUsing a link analysis algorithm similar to Google PageRank, researchers at the SANS Institute and SRI International have created a new Internet network defense service that completely revamps the way network blacklists are formulated and distributed. The service, called Highly Predictive Blacklisting (.pdf), will be unveiled next...
Fortify sets off FUD floodThe Fortify study did not say enterprises must avoid open source because all open source is a security risk. But that's how lazy reporters played it. by Dana Blankenhorn
Meet the Team
by The Team
Bret Blackman, Aaron Murray, Dan Kenny, Matt Galardi, Stephen McIntyre and the elusive Miun Criffield are the core members of Spider.
Each of them an employee of ITS, they were brought together to work on security issues related to technology...continue
welcome.
Every day our world becomes more and more interconnected. Our cell phones, our notebooks, our PDAs and even our kitchen sinks talk across a variety of networks, potentially leaving our personal information, and our lives, exposed and vulnerable. Securing our data against the hackers and hazards of the world, or what we call information assurance, is something we take seriously at the University of Nebraska at Omaha. So seriously, in fact, UNO's Department of Information Technology Services formed an information assurance team nicknamed "SPIDER".
Why "SPIDER"? While security is often thought of as something only for the experts, the truth is that no expert, not even a group of experts, can guarantee complete security. They can, however, minimize the impact of threats by getting everyone involved who has access to data. Even you. With this in mind, the team adopted the acronym SPIDER to represent the core of its philosophy. SPIDER is short for "Securing Personal Information and Data is Everyone's Responsibility."
Having adopted this idea, the team looks forward to working with the greater campus community to make data on its network more secure. In the coming weeks and months it will identify potential risks to systems and educate users on what they mean. The team will form partnerships with other entities across campus to develop and implement guidelines for securing their systems. The folks in SPIDER also will develop policies that address the best means of providing for safe, productive working environments.
news
20060227 - The February newsletter is out!
20060126 - We created a new incident report form for folks who are having a serious problem with a UNO computer system.
20060124 - The January newsletter is out!