2004 ISSA Journal Archive

Note: documents are in PDF format. You may need to download free Adobe Acrobat Reader software to view them.

Contribute to the journal

Are you interested in contributing an article to the ISSA Journal? Please contact editor@issa.org, and review the Editorial Guidelines (PDF, 48kb).

Advertise in the journal

To learn about sponsorship opportunities, please request a Media Kit.

December

ISSA Journal December 2004
Full Issue
Streamlining Remediation Through Attack Simulation
Gidi Cohen
Designing a Security Architecture
Richard Williams
Mobile Computing
Brian Nickel, CISSP
Raising the Standards for Managing a Security and Privacy Assessment
Edward Johnson, CISSP
Piracy Prevention for Multimedia Data through Digital Watermarking
Robby S. Fussell
Correlation Threat Technologies Sense Security Problems
Elizabeth M. Ferrarini

November

ISSA Journal November 2004
Full Issue
Approaches to Insider Threat Mitigation
Sara Matzner
Defense in Depth for Telecommuters
Robby S. Fussell
Implementing Data Privacy in the Enterprise: Best Practices in Key Management
Derek Tumulak
Effective Threat Management Using Vulnerability Correlation
Joe Minieri
Security Focus Shifting from Theft to Business Continuity
Steve House
Monitoring Productivity
Eric Haley

October

ISSA Journal October 2004
Full Issue
Locking the Door Behind You: Steps in Securing Your Web Applications
Caleb Sima
Elements of a Successful Managed Security Partnership
Steven Drew
Certifying an Organization’s ISMS
Fiona Pattinson CISSP, CSDP and Willibert Fabritius CQM
Web Application Vulnerabilities
Andrew Stern
Using a Network Analyzer in Fighting Virus and Hack Attacks
Douglas Smith
VPN Backup: Redundancy for WAN Circuits Using IPSec VPNs
Kevin Holmes, CISSP, CCNP, CCDP
Trusting a Pen Tester/Pen Testing Client
Robert E. Johnston

September

ISSA Journal September 2004
Full Issue
Managing Risks Related to Unsupported Software
Warren Axelrod
Building a Successful PKI
Arshad Noor
Due Care or Do Not Care?
David R. Furnas and Robert M. Wilson
“Automated Incident Handling Using SIM”
Anton Chuvakin, Ph.D., GCIA, GCIH
Cost-Effective Security for Health Care
Chris Meaney and David Hester
Security Risks Associated with Geosourcing
Dr. Richard Bassett, Vincent Ierace, Ellen Murphy and Riccardo Palmerini
Preparing for the CISSP Exam: Everything You Wanted to Know About the CISSP but were Afraid to Ask
Debbie Christofferson, CISSP, CISM

August

ISSA Journal August 2004
Full Issue
The Art of Cyberwar
Wayne Selk
The Threat of Shellcode Obfuscation
Don Parker
A Security Enterprise Architecture for Healthcare (SEAFH)
Tom Tuduc
Certification and Accreditation: Navigating the Jungle
Karen Olk, MCP, CCNT
Cryptography Demystified
Harry E. Smith, CISSP
What’s In Your Firewall?
Bob Ayres, CISSP CISM
Information Security Challenges: Camera Phones
Michael R. Grimaila and Abhijit S. Kulkarni

July

ISSA Journal July 2004
Full Issue
Spyware: The Next Wave of Corporate Espionage
Arian Eigen Heald
Implementing a Log Consolidation and Analysis Project
Roy Madden
End-to-End Encryption: In Search of the Holy Grail
Dr. Nicko van Someren
Secure From Whom?
Tim Maletic
Bridging the Insider Security Gap with Network Identity Enforcement
Dave Shay
“My IDS/IDP Works Perfectly!” Famous Last Words or Informed Assessment?
Philip Joung

June

ISSA Journal June 2004
Full Issue
An ISSA Retrospective
Sandra Lambert, CISSP, CDP, MBA
The Laocoon Option: Active Defense of Network Infrastructure
David R. Matthews, CISSP
Global IT Security Trends: Compliance Efforts Worldwide Demonstrate that Security has Become a Global Priority
Marc van Zadelhoff
Software Piracy and the Ethical Responsibilities of Security Professionals
Cris V. Ewell, CISSP
Meeting the Challenge of a Linux/UNIX Security Audit
Richard Williams
A Resource Guide for the Network Computer Security Administrator
Tony Godfrey
SPAM and the CAN-SPAM Act
Ron Samson

May

ISSA Journal May 2004
Full Issue
Spyware: The Uninvited Guest
Kelly Martin
Anytime, Anywhere Security for Financial Services Organizations
Scott Olson
Financial Services: Making Security Part of the Bigger Picture
Todd Tucker
Pitfalls of Protecting Data with the Encrypting File System
Roberta Bragg
An Innovative Way to do Security Code Reviews
Brad C. Johnson and Jonathan Gossels
Unseen Dangers in Offshore IT?
Tom Cocchiarella and Rob Ramer
Storage Security Extends Beyond on the Firewall
Elizabeth M. Ferrarini
The Insider Threat
Peter Wood

April

ISSA Journal April 2004
Full Issue
Intrusion Prevention and Expert Systems
Avi Chesla
Spending Smart for Better Security
Jack Danahy
Securing Your Hand-held Devices
Dick Mackey, Jonathan Gossels and Brad C. Johnson
21 CFR Part 11: A Detailed Overview
Steven Weil, CISSP, CISA, CBCP
Penetration Testing: Not Just a Hack Job
Matthew J. Decker, CISSP, CISA, CBCP
A Hidden Risk: ARP (Address Resolution Protocol) Cache Poisoning on Wireless Networks
Bill Fitzpatrick, CISSP, CCNA

March

ISSA Journal March 2004
Full Issue
Twelve Steps for Compliance in a Convoluted Regulatory Environment
Ariel Peled and Dr. Troyansky
Where Does Application Security Belong?
Erik Giesa
Teaching Ethical Hacking?
Ira Winkler
21 CFR Part 11–The Biggest Security Regulation You Never Heard Of
Ben Rothke
Firewall Best Practices—Egress Traffic Filtering
David Piscitello and Nathan Buff
Cost-Effective Small Business Security Implementations
Sarah A. Lynn
Patch Management Marries Business Objective
David Nelson, Jr.
Managing Network Vulnerabilities through Policy-Based Security
Gilles Samoun
Risk and Total Cost Of Ownership
Robert V. Jacobson, CISSP

February

ISSA Journal February 2004
Full Issue
2004 Career Outlook
Joyce Brocaglia
HIPAA Compliance—The CISSP Is Trained To Do The Job Right
Keith T. Hamilton
Ethics Do Not Replace Good Policies
Joseph Malec
The Effect of Outsourcing on the Security Job Market
Lori Sabat
Honey Pots—Strategic Considerations
Murray Pinchuk, GSEC
Host-Based Versus Network-Based Vulnerability Scanning
Robby S. Fussell
Securing Wireless Handhelds and Smartphones in the Enterprise
Jens Meggers
Intrusion Prevention Systems Offer Network-Based Protection from Cyber Threats such as Blaster and Sobig
Marc Willebeek-LeMair

January

ISSA Journal January 2004
Full Issue
Caller ID Integrity Attacks
Ed Norris and Harry Hetz
Keeping Applications Online, In Line: How Organizations Can Maintain Security Controls
Ryan Kalember, CISSP
The ISSA Hosts a Big Week in New York
Homeland Security Quantitative Risk Analysis
Tom Tuduc
Business Contingency: Planning For Whatever The Future Holds
Michael Seese
Understanding the Sarbanes-Oxley Act of 2002 (SOX) and Its Implications
Sasirekha Cota
Security and the Four Building Blocks: An Operations Approach
Andrew Peters