2003 ISSA Journal Archive

Note: documents are in PDF format. You may need to download free Adobe Acrobat Reader software to view them.

Contribute to the journal

Are you interested in contributing an article to the ISSA Journal? Please contact editor@issa.org, and review the Editorial Guidelines (PDF, 48kb).

Advertise in the journal

To learn about sponsorship opportunities, please request a Media Kit.

December

ISSA Journal December 2003
Full Edition
Thinking Outside—And Inside—The Box: Appliances Are Making IT Security Simpler and More Affordable
David Ting
Are USB Flash Drives a Security Threat to the Enterprise?
John Bumgarner
Information Security Impacts on Control Systems
Joe Weiss
Building an Inside-Out Privacy Compliance Framework
Sanjay Mathur
The Risk Assessment Process Part 3: Mitigation Planning—The End Game
Michel L. Landry
Business Continuity and Business Impact Analysis (BIA) Best Practices
Doug Stoneman
Intrusion Entrapment via a Honey Pot Program?
Abiola Abimbola
Enforcing E-mail Retention in the Enterprise
Nalneesh Gaur

November

ISSA Journal November 2003
Full Issue
A Hacker Will Be With You Shortly: Social Engineering 101
John Bumgarner
The Security Threat Inside: Building an Awareness Program and Effectively Training Your Staff
Bernie Cowens
Accepting Information Security: A Change in Culture
David Nelson
Waking Up to Application Service Provider Security
Jonathan Gossels and Dick Mackey
The Risk Management Process Part Two—The Risk Assessment Process
Michel L. Landry
The Value of IT Auditing
Alan B. Sterneckert
Denial of Service Attacks: What is Going On?
Abiola Abimbola
Mobile Disaster Recovery: Imagine the Worst, Plan for the Worst
Thom Bailey
Ten Tips for Evaluating Security Outsourcing Partners
Elizabeth M. Ferrarini

October

ISSA Journal October 2003
Full Issue
Distributed Single Sign-On: Taking the “Big” Out of the “Next Big Thing”
David Ting
Behavior Blocking: Proactive Technology for Protecting the Network
Stephen Trilling
Getting Certified in Business Continuity
Paul Kirvan
Securing WebServices
Yuval Ben-Itzhak
Information Systems Security + Technical Services = Together Stronger
Keith G. Parsons
The HIPAA Final Security Rule – More Than a New Security Standard
Harry E. Smith
SB 1386 and Future Personal Data Laws: What Do They Really Mean?
Marc Menninger
Managing Risk in Cyberspace
Archie Riviera
The Risk Management Process: Part One—An Overview
Michel L. Landry

September

ISSA Journal September 2003
Full Issue
September 11th, Two Years Later: Is Our Information More Secure?
Marc R. Menninger
An Interview with Richard Clarke
Jenny Kasza
Thirteen From-the-Trenches Guidelines for Security Managers
Richard Steinberger
Cyber & Physical Security within the Electric Energy Sector
L. Chris N. Shepherd
Web Services Security
Dick Mackey
A Simple Technique For Powerful Password Protection
Nick Seidenman, CISSP
Returning Security to the Executive Suite
Perry Gleason
Of Aviation and Information Security
Ben Rothke, CISSP
Cutting Through the Noise: Identifying Security Events When and Where They Happen
Phil Hollows

August

ISSA Journal August 2003
Full Edition
Ten Best Practices For Enterprise Intrusion Prevention
Lou Ryan
Intrusion Detection Data: Critical Decisions
Jason D. Reed and Peter S. McLaughlin
Intrusion Detection and Prevention: Security’s One-Two Punch
Frank Huerta and Barry Cioe
The How and Why of Intrusion Detection and Prevention
Ray Stirbei
The Time to Stop Intrusions is Before They Happen
Tom Donahue
Tackling Your Wireless Worries
By Mark Carney, MBA, CCNA, CCSA
Blocking Public Instant Messengers
David Piscitello
Tackling Business Resumption Planning
Mayra Husic
Security Implications of Network Management
Matthew Shell, CCIE #7777, CISSP

July

ISSA Journal July 2003
Full Issue
Cost-Effective Security Awareness
Richard Mosher, CISSP, CBCP
Seven Easy Ways to Increase Web Site Security and Privacy on a Low Budget
Amit Klein
The Rise and Fall of the Information Security Industry
Ira Winkler, CISSP

June

ISSA Journal June 2003
Full Issue
Spam I Ram: What Can You Do to Get Rid of Spam?
Marc Noble, CISSP
Guidelines for Checking Out Leaks In Your Organization’s Security Systems and Programs
Elizabeth M. Ferrarini
Managed Security Services and the Incident-Handling Process
Joe Stewart, GCIH and Steven Drew, GCIA
(ISC)2’s Systems Security Certified Practitioner (SSCP): In Partnership with the CISSP
Jeff Lenzo, SSCP

May

ISSA Journal May 2003
Full Issue
Not Just for HIPAA: Best Practices for Security and Privacy Make Good Business Sense
Dr. John J. Halamka
Dealing with Data Privacy Regulations and SB-1386
Arshad Noor
Security Architectures
Paul Helmich
Lessons Most Companies Have Not Learned
Doug Stoneman, CISSP
Time to Speak Out
Richard Mosher, CISSP, CBCP

April

ISSA Journal April 2003
Full Issue
Security Implications of Global Third-Party Remote Access
Gerald Brown
Security in Enterprise Systems
Dr. Peter Tippett
Changing Paradigms in Network Security
Augusto Quadros Paes de Barros, CISSP
Creating High-Quality Security Policies
Steven Weil CISSP, CISA

March

ISSA Journal
Full Issue

February

ISSA Journal
Full Issue

January

ISSA Journal 2003
Full Issue