Features

Human Factors (Security | Insecurity) on your mind

Human Factors (Security | Insecurity) on your mind

By

When designing security systems, it is vital to factor the human into the equation, otherwise, as Tom Reeve explains, you end up with confused users and vulnerable systems

Bringing something new to the table

Bringing something new to the table

The figures are still abysmal. So Kate O'Flaherty asks what can the information security industry do to encourage more women to join the sector?

Cyber-security awareness: A battle between the rational  and impulsive brains

Cyber-security awareness: A battle between the rational and impulsive brains

By

SC's Roi Perez looks at how we tackle the biggest vulnerability in our IT infrastructures - the people

The inside man: Decoding the  threat from within

The inside man: Decoding the threat from within

By

While the biggest threat these days might be your employees, does that danger really mean distrusting your own team, asks Max Metzger, and what actions should you take?

The changing role of the CISO

The changing role of the CISO

By

Demand is high, supply is low and requirements are changing. Tony Morbin asks - so where are we now with the role of the CISO?

The SC Awards Europe 2016

The SC Awards Europe 2016

By

Hundreds of guests gathered on Tuesday 7th of June at the stunning Old Billingsgate

Domestic spying internationally: Three years after Snowden

Domestic spying internationally: Three years after Snowden

By

Nearly three years on and the world still finds itself tackling the consequences of the Snowden disclosures reports Max Metzger

Using big data to uncover Deviant Behaviour

Using big data to uncover Deviant Behaviour

Cyber-attacks are getting larger, faster and more diverse, making them increasingly complex to identify and mitigate. But at the same time, as Kate O'Flaherty reports, businesses are collecting vast amounts of security data - far too much for a human to analyse and turn into something useful

Encryption delivers quantum of solace

Encryption delivers quantum of solace

By

Data creation and transmission is growing exponentially, with 2.8 zettabytes of data created in 2012, forecast to reach 40 zettabytes (ZB) by 2020 (IDC), and currently encryption offers the best option to secure all that data says Roi Perez

Is Privacy at Risk?

Is Privacy at Risk?

By

Privacy is dependent on security while security is dependent on confidentiality, a special case of privacy. This is as true today, in the information age, as it has always been, and we can hardly consider one without the other, writes Tom Reeve

ID & access: Halt, who goes there?

ID & access: Halt, who goes there?

Evolving ID and access management options have gone from central control of a rigid boundary to multiple ID options, distributed assets, IoT machine ID and variable authentication reports Danny Bradbury*

Securing data wherever it may be

Securing data wherever it may be

Data now resides on multiple devices in many locations. But, Kate O'Flaherty asks, is it out of control?

Do your data policies stand up to scrutiny?

Do your data policies stand up to scrutiny?

By

Most companies are not ready or able to comply with the proposed new Data Protection Regulations, reports Roi Perez, while ignoring them is not an option given the prospect of heavy fines of up to €20 million

Silver linings while clouds gather

Silver linings while clouds gather

By

There's no denying that cloud adoption is growing at a tremendous pace, along with a subsequent expansion of the threat landscape. Keeping mountains of data from numerous organisations on a third-party's servers might be a scary prospect for the security minded. But, Max Metzger asks, should we be worried?

Predictions: 2016 and beyond

Predictions: 2016 and beyond

By

Industry predictions for cyber-security are unlikely to achieve a consensus, but they do provide plenty of insights and recurring themes that serve as indicators of future trends, as the following edited forecasts reported by Tony Morbin demonstrate

City beat goes global

City beat goes global

By

Adrian Leppard, commissioner of the City of London Police, explains to SC's Tony Morbin that crime prevention's mission in cyber-fraud is to help industry protect its information assets - but that international crime and encryption remain major challenges for law enforcement

Banking on defence to beat the bad guys

Banking on defence to beat the bad guys

By

Banks and financial services are the number one target for hackers and nation-states, but as Doug Drinkwater reports, the industry is fighting to stay ahead of the threats with new tools, training, and increasing collaboration

Cyber-crime on the corporate agenda

Cyber-crime on the corporate agenda

Constant innovation by hackers is seeing a surge in attacks. The onus now falls on the industry, government and law enforcement to try and find a solution, reports Kate O'Flaherty

Extortion on the cards

Extortion on the cards

By

Ransomware is an attack unlike any other. Chances are you know about it pretty quickly after you've been infected but there is little you can do once you've been hit if you aren't prepared. Tom Reeve reports

SC Magazine Awards 2015 Europe

SC Magazine Awards 2015 Europe

Winners of the SC Magazine Awards in Europe

Email encryption improves security

"We have seen real benefits throughout the organisation as a result of our usage of Switch," says Sarah Roberts, head of ICT at NWFRS

Women in security: Is the tide turning?

Women in security: Is the tide turning?

By

The lack of women in information security is a constant topic of conversation and debate but, as Doug Drinkwater reports, changes are afoot

What's wrong with CBEST?

What's wrong with CBEST?

By

CBEST has its critics - and defenders - as the industry grapples with how best to ensure critical infrastructure deploys best practice, as Tom Reeve reports

A Critical Threat

A Critical Threat

Attacks on critical national infrastructure are a growing concern, not just the banking and civil infrastructure, but also control systems used in the physical delivery of services. This is set to become even more of a problem as SCADA systems become internet enabled, reports Kate O'Flaherty

Security on the agenda

Security on the agenda

Cyber-security has become a boardroom issue, but too few boards give the topic the time or resources required, our experts agreed at a recent SC Magazine Roundtable. Opinions were split over how to respond

Bursaries in cyber-security at Lancaster University

By

Cyber security bursaries offered by Raytheon

Infosec Europe 2015 preview

Infosec Europe 2015 preview

By

Now in its 20th year, the event's theme is "Intelligent Security: Protect. Detect. Respond. Recover."

Delivering digital services: SC Roundtable report

Delivering digital services: SC Roundtable report

By

The public sector is being asked to deliver its services digitally, with availability and reliability just as important as security, as our experts agreed at a recent SC Magazine Roundtable

SC Magazine UK's salary survey: how much are you worth?

SC Magazine UK's salary survey: how much are you worth?

By

SC Magazine's salary survey shows that in response to the current skills shortages, the money is rolling in for information security professionals.

Defence from denial of service

Defence from denial of service

Kate O'Flaherty reports how distributed denial of service attacks are growing in size and scale, making it important to know what to do before, during and after an attack

With a little help from my friends

With a little help from my friends

By

Rapid expansion of the cyber-security sector has meant that government agencies and international professional organisations don't meet all of the industry's changing demands and it has often had to provide its own support infrastructure

Case study: Securing the water supply

Case study: Securing the water supply

"IT security isn't just about technology, it's also people and processes," explains Michael Cock, group information technology manager at Sutton and East Surrey Water (SESW) as he describes to SC some of the policies, approaches and technology used to protect the drinking water of 670,000 residents and 284,000 properties

How do you solve a problem like mobile security?

How do you solve a problem like mobile security?

By

A growing variety of technologies, functionality and devices, often not chosen by the organisation, connecting to the corporate network from beyond the perimeter make mobile security tougher than ever, reports Doug Drinkwater from SC Magazine's recent roundtable

Fixing the UK's cyber-skills gap

Fixing the UK's cyber-skills gap

A KPMG survey found that over half of UK companies would seriously consider hiring ex-hackers or convicted criminals to plug their skills gap

NATO: Defending against the known unknowns

NATO: Defending against the known unknowns

By

Pooling of technology and people across agencies and member countries - as well as partnering with industry - is central to NATO's cyber-defence strategy, as Ian West explains to SC's Tony Morbin

Hackers for hire

Hackers for hire

By

Advances in technology and declining prices are fuelling an expanding market in hiring hackers - in some cases for defence, but increasingly, for criminal activities.

Keys to the internet

Keys to the internet

By

International uptake has been slow for the DNS security extension (DNSSEC) which authenticates URL queries. Tony Morbin spoke to Anne-Marie Eklund Löwinder to get a better understanding of the issues

Securing the Internet of Things

Securing the Internet of Things

By

Multiple connected 'Internet of Things' devices could be fuelling a corporate security nightmare suggests Kate O'Flaherty

Russia revamps its infosec strategy

Russia revamps its infosec strategy

Cyber-crime is as much a threat to ordinary Russians as anyone else, and the country is developing a strategy to cope - while seeking international cooperation too, as Eugene Gerden in St Petersburg reports

Discussing APT: an SC Magazine UK editorial roundtable

Discussing APT: an SC Magazine UK editorial roundtable

By

Tapping the insight of info security's thought leaders on advanced persistent threats, what they represent and how to protect against them.

APT attacks: Time to respond

APT attacks: Time to respond

By

Advanced persistent threat (APT) attacks are complex, multi-layered and designed to evade detection, leaving IT security teams in the dark and sensitive data at risk. Doug Drinkwater asks how to respond

'Every day is a challenge' - Inside Europol's fight against cybercrime

'Every day is a challenge' - Inside Europol's fight against cybercrime

By

Europol's European Cybercrime Centre (EC3) is growing faster than expected. Doug Drinkwater visited its offices in The Hague, Netherlands, to find out how it is uniting law enforcement in the fight against cyber-criminals

Making waves and headlines: 2014 in review

Making waves and headlines: 2014 in review

By

2014 was the year that cyber-security hit the headlines, with data breaches, more government surveillance leaks, and celebrity exposures causing the UK public to lose faith in the web, reports Tony Morbin

Cybercrime: the new normal

Cybercrime: the new normal

By

In an interview with SC's Tony Morbin, the NCCU's Jamie Saunders explained how 'policing by consent' contends with the tidal wave of new criminal opportunities unleashed by digital technology and the connected world

2015: Prime time for information security?

2015: Prime time for information security?

By

Further data breaches, Heartbleed-type flaws and new revelations about government surveillance will likely continue in 2015 but, as Doug Drinkwater reports, it could also prove a pivotal year for data protection, law reform, the Internet of Things and the fight against terrorism

Security in 2015: Biometrics

Security in 2015: Biometrics

By

While biometric technology is becoming more sophisticated, it is still far from infallible. Kate O'Flaherty reports

The worst happens. What next?

The worst happens. What next?

By

You've accepted that you are going to be breached at some point. Tony Morbin looks at how this new perspective should be reflected in your response planning

Google Glass: a ticking time bomb?

Google Glass: a ticking time bomb?

Kate O'Flaherty reports how the security implications of wearable technology are becoming clearer as Google Glass infiltrates the corporate market

What are the rules in cyber-warfare

What are the rules in cyber-warfare

Cyber-warfare is so new that the 'ground-rules' are still being established. After the 2007 APT cyber-attack on Estonia, Nato created a cyber-defence centre and the Tallinn Manual ensued. Nazan Osman provides an overview of some of the CCDCOE's and manual's conclusions

Snowden's forgotten legacy - highlighting insider threat

Snowden's forgotten legacy - highlighting insider threat

By

NSA whistleblower Edward Snowden lifted the lid on government surveillance but, as Doug Drinkwater reports, his disclosures have also had a significant impact on how companies view rogue employees

SC Webcasts UK

Sign up to our newsletters

FOLLOW US