September 2007 issue

An injection of new ideas
Working out the source of the next infection to hit your organisation’s information security is the subject of increasing innovation, with auctions of flaws, the Cold War’s game theories, anomaly detection and distributed computing being pressed into service. Danny Bradbury reviews the latest remedies... more

You don't have to be stupid to work here
Treating employees as idiots who can’t understand infosecurity may be counterproductive. Instead, a little education can recruit them as your front-line, finds Mick James

Piecing identity together
Identity and access management systems need to start linking together if they are to satisfy both users and security requirements, finds Cath Everett

Don't be green
Environmental concerns are not going away. They will affect infosecurity in ways including equipment and paper recycling, the provision of stand-by power – and even the protection of personal data used to persuade people into greening their ways, writes SA Mathieson

Danger on the drugs network
Pharmaceutical firms must connect with their research partners and mobile salespeople, while working under some of the toughest regulatory requirements in the world. Industry insiders tell William Knight how they try to stay both open and secure... more

Phishing and the economics of e-crime
Online crime is a huge problem, but it is difficult to say how huge. Tyler Moore, of the University of Cambridge’s Computer Laboratory, describes his research into the size and nature of phishing

Mapping Ajax's weaknesses
Asynchronous JavaScript and XML speed up web-sites by anticipating what users want before they ask for it, then getting it from a variety of sources. But this flexibility can be exploited, writes Mark O’Neill of Vordel

For more on Ajax, see The security of Ajax/web 2.0 applications from Network Security, free PDF

Features index