The Ashimmy Blog

BYOD Security Scanning

My friends Carl Banzhof and Billy Austin continue to make it happen at iScan Online. This is one of my most favorite companies to work with. They are always thinking of new ways to solve problems and fun ways to get the word out. They have been pretty busy too.

After releasing their Android App around RSA, they have been heads down developing the next versions of their apps.  Also they announced that David Raphael, who has worked with Carl and Billy at Citadel and McAfee has joined the team as Director of engineering.

Additionally the company exhibited at the MSPWorld event in Orlando last month.  MSPWorld is run by the MSPAlliance which has over 20,000 members.  iScan Online won the prestigious MSPWorld Cup 2013 as the conference MVP.  The BYOD security scanning message was very near and dear to the attendees.

Now this past week the company released what I think is coolest marketing video I have seen in a while. 

I really like this one! You can get a free scan for your Windows, Mac or Android device right now too by heading over iscanonline.com

The company will be rolling out some more news soon so stay tuned. In the meantime the mobile and BYOD security market continues white hot.  Keep your eye on iScan Online.

Related articles

• MVP, MVP, MVP - iScan Online is MSPWorld World Cup MVP! (iscanme.wordpress.com)
• Iscan Online Announces Android App for Mobile Security Scanning (sys-con.com)
• Watch for mobile malware and targeted attacks, McAfee warns (pcworld.com)
• iScan Online Announces Android App For Mobile Security Scanning (darkreading.com)

European Security Blogger Meetup and Awards

I am happy to report that Brian Honan with a big hand from Jack Daniel and our good friends at Tenable Network Security are putting on the 2nd annual Security Bloggers Meet up during Infosec Europe.

The European Bloggers Meetup is of course based on the RSA Conference Bloggers Meet up that we hold every year.  From what I understand it was a nice get together last year thanks to Firemon for sponsoring it.  Now in this second year they are going to try and add European Security Blogger Awards to the mix as well.

I am both flattered and pleased to see the idea being franchised over across the pond. I am waiting to hear all about it and hope to make it out to the event next year!

In the meantime head over to Brian’s blog for details and links to register for the event, nominate blogs and vote.

Related articles

• European Security Bloggers Meetup and Awards (uncommonsensesecurity.com)
• Security Blogger Award Winners 2013 (ashimmy.com)

Security Blogger Award Winners 2013

Well it was an epic Security Blogger Meetup and awards this year. In many ways it was the best one we have had. But nothing is perfect and we are already planning to be bigger, better and more inclusive next year.  In the meantime I know many folks have been waiting to see who the winners of the Social Security Blogger Awards were.  So without further adieu, for the record here are the nominees and winners:

Best Corporate Security Blog

Other nominees:

McAfee Blog: click here

CloudFlare Blog: click here

SecureWorks Blog: click here

Solutionary Minds Blog: click here

Kaspersky Lab Securelist Blog: click here

Veracode Blog: click here

Trend Micro Blog: click here

AND THE WINNER IS:

Naked Security Blog: click here

Best Security Podcast

Other nominees:

Liquidmatrix Security Digest: click here

EuroTrashSecurity: click here

SANS Internet Storm Center: click here

Southern Fried Security: click here

Risky Business: click here

Sophos Security Chet Chat: click here

And the winner is:

Paul Dotcom: click here

The Most Educational Security Blog

Other nominees:

BH Consulting's Security Watch Blog: click here

Security Uncorked Blog: click here

Dr. Kees Leune's Blog: click here

Securosis Blog: click here

Social-Engineer.org Blog: click here

Critical Watch Blog: click here

The Security Skeptic Blog: click here

The New School of Information Security Blog: click here

And the winner is:

Krebs On Security: click here

The Most Entertaining Security Blog

Other nominees:

Packet Pushers Blog: click here

Securosis Blog: click here

Errata Security Blog: click here

Naked Security Blog: click here

Uncommon Sense Security Blog: click here

PSilvas Blog: click here

And the winner is:

J4VV4D's Blog: click here

The Blog That Best Represents The Security Industry

Other nominees:

SpiderLabs Anterior Blog: click here

1 Raindrop Blog: click here

Naked Security Blog: click here

The Firewall (Forbes) Blog: click here

Threat Level (Wired) Blog: click here

Securosis Blog: click here

Michael Peters Blog: click here

And the winner is:

Krebs On Security Blog: click here

The Single Best Blog Post or Podcast Of The Year

Other nominees:

The Epic Hacking of Mat Honan and Our Identity Challenge: click here

Application Security Debt and Application Interest Rates: click here

Why XSS is serious business (and why Tesco needs to pay attention): click here

Levelling up in the real world: click here

Secure Business Growth, Corporate Responsibility with Ben Tomhave: click here

And the winner is:

Meet The Hackers Who Sell Spies The Tools To Crack Your PC (And Get Paid Six-Figure Fees): click here

The Security Bloggers Hall Of Fame

The other nominees are:

Richard Bejtlich

Gunnar Peterson

Naked Security Blog

Wendy Nather

And the winner is:

Jack Daniel

Congratulations to all of the nominees and of course congrats to the winners.  See you next year at the Security Bloggers Meetup. If you did not get an invite this year, be sure to write to info@securitybloggersnetwork.com requesting to add your blog and be on the list!

Special thanks to our sponsors: Qualys, Sourcefire, Akamai, Fortinet, Barracuda Networks and Jeanne Friedman and the RSA Conference!  Also a special shout out to Trainer Communications for helping with the voting as always!

Alert Logic Partner Pavilion at RSA 2013

RSA Conference is THE information security event of the year.  As part of my coverage of this years conference I did a series of podcasts with some cloud/hosting providers who are exhibiting in the Alert Logic Partner Pavilion. This is the third in the series and is with Urvish Vashi, VP of marketing at Alert Logic.

I know Urvish for over 10 years, since our time together at Interliant.  Urvish was the force behind the Partner Pavilion for Alert Logic this year.  Having 5 of the leading hosting/cloud providers exhibiting at the worlds largest security conference may at first blush seem a stretch. After all, are these cloud providers security providers? Yes they are!

Urvish's point is that with partners like Alert Logic, these cloud providers are providing a wide range of best-in-breed cloud security services.

This is just a short 15 minute or so interview, but Urvish gives us some great insights.  Check out what he has to say and be sure to visit the Alert Logic Partner Pavilion on the show floor at RSA!

Related articles

Where is AShimmy at RSA?

Mandiant @ RSA USA 2013: Who, What, Where & When

RSA Conference 2013, YOU READY!?

Qualys CEO to Address Security in a Hyperconnected World During Keynote Session at RSA Conference USA 2013

RSA 2013 Navisite at the Alert Logic Partner Pavilion

RSA Conference is THE information security event of the year.  As part of my coverage of this years conference I did a series of podcasts with some cloud/hosting providers who are exhibiting in the Alert Logic Partner Pavilion. This is the second in the series with Chris Patterson of Navisite.

My friends at Alert Logic have 5 of the largest cloud and hosting providers in the world exhibiting with them this year.  I thought it was worthwhile to expore why these cloud/hosting providers were exhibiting at the largest security conference in the world.

I caught up with Chris Patterson, VP of Product Management at Navisite.Chris is one of the driving forces behind the Navi cloud.  He also has some great insight into the state of cloud security and what market drivers are influencing the direction of future innovation.

Chris shares some great insight into Navisite's offerings including not just cloud, but security, managed desktop and the state of the market.

 

Related articles

Where is AShimmy at RSA?

RSA Conference 2013, YOU READY!?

Get Knowledgeable About IT Security: RSA is Here Again!

Alert Logic Releases New Log Manager To Integrate All Customer Environments

Sunguard Availability Services at RSA 2013

RSA Conference is THE information security event of the year. Kicking off my coverage of RSA this year is a series of podcasts I did with cloud/hosting providers who are exhibiting this year in the partner pavilion of Alert Logic.  

My friends at Alert Logic have 5 of the largest hosting/cloud providers in the world exhibiting with them. I was curious why these cloud and hosting providers wanted to exhibit at a security conference.

The first provider I spoke with was Sunguard. Specicifally Sunguard Availability Services. I spoke with Cara Camping, Product Manager, Managed Security Services for Sunguard AS. Cara talks about Sunguard's approach to security in depth, why they partner with Alert Logic and what they expect from exhibiting at RSA Conference.

Below are two slides that Cara references in our discussion:

 

Related articles

RSA Conference 2013, YOU READY!?

Where is AShimmy at RSA?

Security Blogger Awards Finalist Voting Is Now Open!

Where is AShimmy at RSA?

You can feel the pace rising to a crescendo, you sense it coming. But don’t look now, RSA is just next week.  The last two months have been pretty much a blur in getting ready for the big conference.  As usual I should have done 12 things I didn’t, but the dozens of things I have done is going to have to be enough. 

I am happy to be chairing two panels during RSA week this year.  The first is on Monday, the 25th (also my 23rd wedding anniversary) at the annual and well attended Americas Growth Capital Conference, over at the Westin.  The panel I am chairing is at 11:30 a.m..

The topic is Cloud Security Services: The Evolution Continues

Here is the abstract:

With the initial gold rush to the cloud it seemed that every security vendor was pushing a cloud security service. Every security company had to have their “story on the cloud” for customers, analysts and investors. But over the months and years we have seen a steady evolution of cloud security services beyond those early “everything but the kitchen sink” strategies.

More than just putting data and analysis off premises, today’s cloud security services are truly leveraging the unique features of the cloud like elasticity, massive scale and instant on provisioning.

Just because you can do it in the cloud doesn’t mean the cloud is the best place to do it. As we move beyond the explosion of cloud security services, which types of security services are best suited to the cloud? Which cloud security services will have markets large enough to create substantial business opportunity? Which cloud security services are so disruptive that they will eliminate or replace non-cloud based security services?

Evolution can be a cruel master, only the strong survive. The losers fall into the trash heap of history. Our panel will tell you who the winners will be in cloud security services.

I am joined on the panel by:

Matthew Prince, Co-Founder, Chief Executive Officer, CloudFlare

Dave Dewalt, Chief Executive Officer, Chairman, FireEye, Chairman, Mandiant

Jay Chaudhry, Founder, Chief Executive Officer, Zscaler

Stuart Scholly, President, Prolexic

Carson Sweet, Co-Founder and CEO of CloudPassage

It should be a great panel!

Then on Wednesday I am chairing a great panel at RSA at 9:20 am in room 304 on Ipv6 Vulnerability Management: From Theory to Reality. The agenda:

Join the leading lights of the vulnerability management industry as they carry forward their discussion on the challenges of managing vulnerabilities and network security in an IPv6 network. Where last year the discussion was theoretical, this years panel will focus on actual case studies of standing IPv6 networks in govt., retail, large enterprise and the cloud.

My fantastic panel for this one is:

Wolfgang Kandek - Chief Technology Officer, Qualys
Ron Gula - Chief Executive Officer and Chief Technical Officer, Tenable Network Security
HD Moore - Chief Security Officer, Rapid 7
Tim Keanini - Chief Research Officer, nCircle
Misha Govshteyn - Vice President Emerging Products, Alert Logic

Besides that I will of course be at the Security Bloggers Meet up and Security Blogger Awards on Wednesday.  Besides that I will be in and out of meetings and sessions, parties at night and usually at the W bar before heading in for the night.  If you see me, be sure to say hi.

Enjoy RSA, let the fun begin!

Related articles

• Qualys CEO to Address Security in a Hyperconnected World During Keynote Session at RSA Conference USA 2013 (sys-con.com)
• RSA USA 2013: Right Around The Corner (mandiant.com)
• Illuminating the Dark Matter of your network with iScan Onlines Opportunistic Scanning (ashimmy.com)
• CloudPassage CEO Carson Sweet to Speak about Cloud Security at AGC's West Coast InfoSec and Technology Growth Conference (virtual-strategy.com)
• Zscaler Unveils New Analytics Technology to Provide Real-Time Visibility into Global Traffic (news.softpedia.com)

Security Blogger Awards Finalist Voting Is Now Open!

Well finally I am happy to report that the finalists have been selected and voting for the 5th annual Social Security Blogger Awards is now open!. I know many of you did not understand and were confused by the preliminary rounds of voting. However, our new method of picking finalists has resulted in what we think is our strongest group of finalists ever.

We have many of the blogs and podcasts that have been nominated before (quality is quality), but we also have many new or never before nominated sites as well.  Many thanks to our all star panel of judges who nominated some of the finalists – Bill Brenner of CSO, Kelly Jackson-Higgins of Dark Reading, Wendy Nather of The 451 Group and none other than Beaker himself, Chris Hoff.

Also many thanks to all of the blogs and podcasts who requested to be nominated. Whether you made the finals or not, keep blogging.

You can go vote for your picks here. As in years past, to vote in the finals you have to be a security blogger or podcaster yourself.  All votes are reviewed by humans, so please just vote once and don’t try to game the system.

Special thanks to Trainer Communications for all of the help with voting and helping. Also special thanks to sponsors of the Bloggers Meetup – Qualys, Fortinet, Sourcefire, Akamai, Barracuda Networks and RSA Conference.

Here are the finalists.  Good luck to them all!  Of course winners will be announced at the Bloggers Meet up at RSA Conference 2013.

Best Corporate Security Blog

McAfee Blog: click here

CloudFlare Blog: click here

SecureWorks Blog: click here

Solutionary Minds Blog: click here

Kaspersky Lab Securelist Blog: click here

Veracode Blog: click here

Trend Micro Blog: click here

Naked Security Blog: click here

Best Security Podcast

Liquidmatrix Security Digest: click here

EuroTrashSecurity: click here

Paul Dotcom: click here

SANS Internet Storm Center: click here

Southern Fried Security: click here

Risky Business: click here

Sophos Security Chet Chat: click here

The Most Educational Security Blog

BH Consulting's Security Watch Blog: click here

Security Uncorked Blog: click here

Dr. Kees Leune's Blog: click here

Securosis Blog: click here

Social-Engineer.org Blog: click here

Critical Watch Blog: click here

The Security Skeptic Blog: click here

Krebs On Security: click here

The New School of Information Security Blog: click here

The Most Entertaining Security Blog

Packet Pushers Blog: click here

J4VV4D's Blog: click here

Securosis Blog: click here

Errata Security Blog: click here

Naked Security Blog: click here

Uncommon Sense Security Blog: click here

PSilvas Blog: click here

The Blog That Best Represents The Security Industry

SpiderLabs Anterior Blog: click here

Krebs On Security Blog: click here

1 Raindrop Blog: click here

Naked Security Blog: click here

The Firewall (Forbes) Blog: click here

Threat Level (Wired) Blog: click here

Securosis Blog: click here

Michael Peters Blog: click here

The Single Best Blog Post or Podcast Of The Year

The Epic Hacking of Mat Honan and Our Identity Challenge: click here

Application Security Debt and Application Interest Rates: click here

Why XSS is serious business (and why Tesco needs to pay attention): click here

Meet The Hackers Who Sell Spies The Tools To Crack Your PC (And Get Paid Six-Figure Fees): click here

Levelling up in the real world: click here

Secure Business Growth, Corporate Responsibility with Ben Tomhave: click here

The Security Bloggers Hall Of Fame

Jack Daniel

Richard Bejtlich

Gunnar Peterson

Naked Security Blog

Wendy Nather

Related articles

• And The Nominees Are . . . (365.rsaconference.com)
• Social Security Blogger Awards 2013 Judges Announced (ashimmy.com)

Blogger Award Voting Is Open

A little later then we wanted, but the preliminary round of voting for the 2013 Social Security Blogger Awards is open as of today.  As I wrote in an earlier post we are doing something a little different this year.  In addition to finalists nominated by our judges, we are also letting bloggers and podcasters nominate themselves for th preliminary round.  The top vote getters in each catagory of the preliminary rounds will be added to the finalists.

Voting for the preliminary round will continue for the rest of this week.  Then voting in the finals will commence.  We hope this will allow a new generation and some "fresh faces" into the award process.

Of course the winners will be announced at the Security Bloggers Meetup at RSA Conference this year.

If you are interested in voting in the preliminary round, you can do so here.

 

Related articles

Security Blogger Awards 2013 News

Social Security Blogger Awards 2013 Judges Announced

Well it is getting towards that time of year. RSA will be here before we know it.  If RSA is getting close, so is the 7th annual Security Bloggers Meet up (7 already) and the Security Blogger Awards with it.  As I wrote earlier we are going to do some things a little different this year. 

In addition to our blue ribbon panel of judges picking finalists, we are going to open up nominations to those who would like to nominate their blogs and podcasts.  Those nominees who garner enough votes will then also be in the finals.  If you would like to nominate your blog (you will have to put a badge on your blog for the voting) please write me at info@securitybloggersnetwork.com. Be sure to include what category you would like to nominate your blog for.  Some folks already have written me and I will be preparing the badges soon.

In the meantime I want to introduce this years Security Bloggers Award Judges:

1. Bill Brenner – Bill needs no introduction to those in the security industry. He has been a judge since the first blogger awards and thankfully has agreed to continue this year.

2. Kelly Jackson Higgins -  Kelly is a senior editor of Dark Reading and like Bill has been a judge in our awards since the beginning.

3.  Wendy Nather – Wendy of 451Group was a first time judge last year and brought some fresh perspectives to our panel. She has graciously agreed to judge again this year.

4. Christofer Hoff – Yes, that’s right! Beaker himself has agreed to judge this year. Actually I have a very long standing relationship with Chris’s blogging. I have been reading his blog since before it was cool (or cloud). I was thrilled he accepted our invite and I am sure he will do a smashing job!

So there you have it. The 4 judges for this years awards. You may contact them at your own peril. They are under no obligation to speak to anyone about the awards, but it is up to each judge.  Also if you want to go the popular nomination route, please write me as above.

BTW, the award categories for this year are:

Best Corporate Security Blog

Best Security Podcast

The Most Educational Security Blog

The Most Entertaining Security Blog

The Blog That Best Represents The Security Industry

The Single Best Blog Post or Podcast Of The Year

The Security Bloggers Hall Of Fame

There you have it. Good luck to all of the bloggers and podcasters out there.