Features

City beat goes global

City beat goes global

By

Adrian Leppard, commissioner of the City of London Police, explains to SC's Tony Morbin that crime prevention's mission in cyber-fraud is to help industry protect its information assets - but that international crime and encryption remain major challenges for law enforcement

Banking on defence to beat the bad guys

Banking on defence to beat the bad guys

By

Banks and financial services are the number one target for hackers and nation-states, but as Doug Drinkwater reports, the industry is fighting to stay ahead of the threats with new tools, training, and increasing collaboration

Cyber-crime on the corporate agenda

Cyber-crime on the corporate agenda

Constant innovation by hackers is seeing a surge in attacks. The onus now falls on the industry, government and law enforcement to try and find a solution, reports Kate O'Flaherty

Extortion on the cards

Extortion on the cards

By

Ransomware is an attack unlike any other. Chances are you know about it pretty quickly after you've been infected but there is little you can do once you've been hit if you aren't prepared. Tom Reeve reports

SC Magazine Awards 2015 Europe

SC Magazine Awards 2015 Europe

Winners of the SC Magazine Awards in Europe

Email encryption improves security

"We have seen real benefits throughout the organisation as a result of our usage of Switch," says Sarah Roberts, head of ICT at NWFRS

Women in security: Is the tide turning?

Women in security: Is the tide turning?

By

The lack of women in information security is a constant topic of conversation and debate but, as Doug Drinkwater reports, changes are afoot

What's wrong with CBEST?

What's wrong with CBEST?

By

CBEST has its critics - and defenders - as the industry grapples with how best to ensure critical infrastructure deploys best practice, as Tom Reeve reports

A Critical Threat

A Critical Threat

Attacks on critical national infrastructure are a growing concern, not just the banking and civil infrastructure, but also control systems used in the physical delivery of services. This is set to become even more of a problem as SCADA systems become internet enabled, reports Kate O'Flaherty

Security on the agenda

Security on the agenda

Cyber-security has become a boardroom issue, but too few boards give the topic the time or resources required, our experts agreed at a recent SC Magazine Roundtable. Opinions were split over how to respond

Bursaries in cyber-security at Lancaster University

By

Cyber security bursaries offered by Raytheon

Infosec Europe 2015 preview

Infosec Europe 2015 preview

By

Now in its 20th year, the event's theme is "Intelligent Security: Protect. Detect. Respond. Recover."

Delivering digital services: SC Roundtable report

Delivering digital services: SC Roundtable report

By

The public sector is being asked to deliver its services digitally, with availability and reliability just as important as security, as our experts agreed at a recent SC Magazine Roundtable

SC Magazine UK's salary survey: how much are you worth?

SC Magazine UK's salary survey: how much are you worth?

By

SC Magazine's salary survey shows that in response to the current skills shortages, the money is rolling in for information security professionals.

Defence from denial of service

Defence from denial of service

Kate O'Flaherty reports how distributed denial of service attacks are growing in size and scale, making it important to know what to do before, during and after an attack

With a little help from my friends

With a little help from my friends

By

Rapid expansion of the cyber-security sector has meant that government agencies and international professional organisations don't meet all of the industry's changing demands and it has often had to provide its own support infrastructure

Case study: Securing the water supply

Case study: Securing the water supply

"IT security isn't just about technology, it's also people and processes," explains Michael Cock, group information technology manager at Sutton and East Surrey Water (SESW) as he describes to SC some of the policies, approaches and technology used to protect the drinking water of 670,000 residents and 284,000 properties

How do you solve a problem like mobile security?

How do you solve a problem like mobile security?

By

A growing variety of technologies, functionality and devices, often not chosen by the organisation, connecting to the corporate network from beyond the perimeter make mobile security tougher than ever, reports Doug Drinkwater from SC Magazine's recent roundtable

Fixing the UK's cyber-skills gap

Fixing the UK's cyber-skills gap

A KPMG survey found that over half of UK companies would seriously consider hiring ex-hackers or convicted criminals to plug their skills gap

NATO: Defending against the known unknowns

NATO: Defending against the known unknowns

By

Pooling of technology and people across agencies and member countries - as well as partnering with industry - is central to NATO's cyber-defence strategy, as Ian West explains to SC's Tony Morbin

Hackers for hire

Hackers for hire

By

Advances in technology and declining prices are fuelling an expanding market in hiring hackers - in some cases for defence, but increasingly, for criminal activities.

Keys to the internet

Keys to the internet

By

International uptake has been slow for the DNS security extension (DNSSEC) which authenticates URL queries. Tony Morbin spoke to Anne-Marie Eklund Löwinder to get a better understanding of the issues

Securing the Internet of Things

Securing the Internet of Things

By

Multiple connected 'Internet of Things' devices could be fuelling a corporate security nightmare suggests Kate O'Flaherty

Russia revamps its infosec strategy

Russia revamps its infosec strategy

Cyber-crime is as much a threat to ordinary Russians as anyone else, and the country is developing a strategy to cope - while seeking international cooperation too, as Eugene Gerden in St Petersburg reports

Discussing APT: an SC Magazine UK editorial roundtable

Discussing APT: an SC Magazine UK editorial roundtable

By

Tapping the insight of info security's thought leaders on advanced persistent threats, what they represent and how to protect against them.

APT attacks: Time to respond

APT attacks: Time to respond

By

Advanced persistent threat (APT) attacks are complex, multi-layered and designed to evade detection, leaving IT security teams in the dark and sensitive data at risk. Doug Drinkwater asks how to respond

'Every day is a challenge' - Inside Europol's fight against cybercrime

'Every day is a challenge' - Inside Europol's fight against cybercrime

By

Europol's European Cybercrime Centre (EC3) is growing faster than expected. Doug Drinkwater visited its offices in The Hague, Netherlands, to find out how it is uniting law enforcement in the fight against cyber-criminals

Making waves and headlines: 2014 in review

Making waves and headlines: 2014 in review

By

2014 was the year that cyber-security hit the headlines, with data breaches, more government surveillance leaks, and celebrity exposures causing the UK public to lose faith in the web, reports Tony Morbin

Cybercrime: the new normal

Cybercrime: the new normal

By

In an interview with SC's Tony Morbin, the NCCU's Jamie Saunders explained how 'policing by consent' contends with the tidal wave of new criminal opportunities unleashed by digital technology and the connected world

2015: Prime time for information security?

2015: Prime time for information security?

By

Further data breaches, Heartbleed-type flaws and new revelations about government surveillance will likely continue in 2015 but, as Doug Drinkwater reports, it could also prove a pivotal year for data protection, law reform, the Internet of Things and the fight against terrorism

Security in 2015: Biometrics

Security in 2015: Biometrics

By

While biometric technology is becoming more sophisticated, it is still far from infallible. Kate O'Flaherty reports

The worst happens. What next?

The worst happens. What next?

By

You've accepted that you are going to be breached at some point. Tony Morbin looks at how this new perspective should be reflected in your response planning

Google Glass: a ticking time bomb?

Google Glass: a ticking time bomb?

Kate O'Flaherty reports how the security implications of wearable technology are becoming clearer as Google Glass infiltrates the corporate market

What are the rules in cyber-warfare

What are the rules in cyber-warfare

Cyber-warfare is so new that the 'ground-rules' are still being established. After the 2007 APT cyber-attack on Estonia, Nato created a cyber-defence centre and the Tallinn Manual ensued. Nazan Osman provides an overview of some of the CCDCOE's and manual's conclusions

Snowden's forgotten legacy - highlighting insider threat

Snowden's forgotten legacy - highlighting insider threat

By

NSA whistleblower Edward Snowden lifted the lid on government surveillance but, as Doug Drinkwater reports, his disclosures have also had a significant impact on how companies view rogue employees

Cyber Essentials: benchmarking best practice

Cyber Essentials: benchmarking best practice

By

From October 2014 many UK public sector information handling projects will require contractors to be Cyber Essentials certified. Tony Morbin looks at how the scheme works, its aims, implementation, shortcomings and potential next steps

Women in IT security: Pushing at an open door?

Women in IT security: Pushing at an open door?

By

Why don't more women choose information security as a profession? What are the barriers, and what can be done to rectify the situation?

Healthy scepticism

Healthy scepticism

By

With potential fines of up €100 million under EU Data Protection Reform, accidental data breaches have moved up the boardroom agenda. Tony Morbin reports on data concerns at Health Authorities in England and Wales, where despite differing systems, data leakage is also being addressed.

The Growing Risk

The Growing Risk

Large-scale cyber espionage is not new - it is the methods behind it which are becoming more complex and sophisticated, reports Kate O'Flaherty.

The view from the ground: Managing BYOD

The view from the ground: Managing BYOD

By

Bring your own device (BYOD) is in full swing, but most FTSE 100 and SMEs are only now realising that there's more to managing the deluge of personal smartphones and tablets coming into the office than brute force alone, reports Doug Drinkwater

Big Data: A big deal?

Big Data: A big deal?

By

IT decision makers are leveraging Big Data security analytics tools to serve up more information on threats, reports Doug Drinkwater.

Patching: the unlocked door

Patching: the unlocked door

With Windows XP fast approaching its end-of-support deadline, many firms are going to be at risk of attack, reports Kate O'Flaherty.

Surety Business

Surety Business

The UK aims to be the safest place to do business online, but that aim is potentially undermined by cyber security skills shortages, says (ISC)²'s John Colley. Tony Morbin reports

Safe Passage

Safe Passage

By

The latest PCI update offers improvements to ensure security in online transactions, says Tim Lansdale, head of payment security, WorldPay. Tony Morbin reports.

League table Go-Ahead

League table Go-Ahead

By

In a special one-off case study linking our themes of PCI compliance and security spend, Random Storm technical director and co-founder Andrew Mason describes to SC a case study that tackles both issues with the aid of league tables.

Coping with chaos

Coping with chaos

It may be a time of great change for the infosec industry, but advice on achieving the budgets needed to keep up with new threats remains remarkably consistent, reports Thomas Brewster.

Out of site, but in mind

Out of site, but in mind

Services abound for business continuity and disaster recovery in the cloud, but what's the right choice for your organisation? Alan Earls investigates the options.

APTs: why you should care and what to do about them

APTs: why you should care and what to do about them

Advanced persistent threats are a real and present danger to all organisations big and small, and only the foolhardy would dismiss them as another hyped security buzz phrase.

Sea change

Sea change

The role of the chief information security officer is expanding to meet new challenges, says Paul Swarbrick, former CISO at NATS, as Karen Epper Hoffman reports.

Mobile security case study: Higher calling

Mobile security case study: Higher calling

By

A UK college provides its 'digital natives' with a secure environment that can be accessed anywhere from any device, reports Greg Masters.

SC Webcasts UK

Sign up to our newsletters

FOLLOW US