Database Activity Monitoring: A Do’s and Don’ts Checklist for DBAs

In a previous post, we looked at the limitations of native audit, the free tool often used by database administrators DBAs for logging database activity. While it has its appeal—it’s already part of the database server and does not require additional cost for third-party appliances or...

How I Got Here: Rich Mogull

Dennis Fisher talks with Rich Mogull of Securosis about his days as a teen wannabe hacker, his meandering path through Navy ROTC, software development, near miss with medical school, mountain rescues and his life as a security industry analyst. Download: 08mogull.mp3...

Rich Mogull on the RSA Attack and the Epsilon Breach

Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast ...

RSA 2010: Securosis Previews the Key Themes and Topics

Securosis analysts Rich Mogull, Adrian Lane and Mike Rothman tackle the key themes for this year’s RSA 2010 conference — virtualization/cloud security, advanced persistent threats/cybersecurity and compliance...

Rich Mogull and Mike Rothman on Security Research and Metrics

Dennis Fisher talks with Rich Mogull, Mike Rothman, David Mortman and Adrian Lane about the merger of Securosis and Security Incite, the need for better metrics in security and improving security research. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Microsoft to unveil patch management metrics project

Microsoft on Wednesday plans to launch a new research effort to determine the total cost of the patch-management cycle, from testing and distributing a fix to user deployment of the patch. The end result of the project, which will be completely open and transparent to outsiders, will be a full...