<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:admin="http://webns.net/mvcb/"
	xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
	<channel>
		<title>CircleID: Security</title>
		<link>http://www.circleid.com/</link>
		<description>Latest Security related postings on CircleID</description>
		<dc:language>en</dc:language>
		<dc:rights>Copyright 2008, unless where otherwise noted.</dc:rights>
		<dc:date>2008-12-04T12:22:00-08:00</dc:date>
		<image>
			<title>CircleID</title>
			<width>130</width>
			<height>45</height>
			<url>http://www.circleid.com/images/logo_rss.gif</url>
			<link>http://www.circleid.com/</link>
		</image>
		
		<item>
			<title>Industry Coalition Announced to Increase Adoption of DNSSEC</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20081203_coalition_to_increase_adoption_of_dnssec/</guid>
			<link>http://www.circleid.com/posts/20081203_coalition_to_increase_adoption_of_dnssec/</link>
			<description><![CDATA[The DNSSEC Industry Coalition is a global group of registries and industry experts whose mission is to work collaboratively to facilitate adoption of Domain Name Security Extensions (DNSSEC) and streamline the implementations across Domain Name Registries. <a href="http://www.circleid.com/posts/20081203_coalition_to_increase_adoption_of_dnssec/">More...</a>]]></description>
			<dc:date>2008-12-03T11:55:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>domain_registries</category><category>security</category>
		</item>
		
		<item>
			<title>Cybercrime and &quot;Remote Search&quot;</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20081202_cybercrime_and_remote_search/</guid>
			<link>http://www.circleid.com/posts/20081202_cybercrime_and_remote_search/</link>
			<description><![CDATA[According to news reports, part of the EU's cybercrime strategy is "remote search" of suspects' computers. I'm not 100% certain what that means, but likely guesses are alarming. The most obvious interpretation is also the most alarming: that some police officer will have the right and the ability to peruse people's computers from his or her desktop. How, precisely, is this to be done? Will Microsoft and Apple &ndash; and Ubuntu and Red Hat and all the BSDs and everyone else who ships systems &ndash; have to build back doors into all operating systems? <a href="http://www.circleid.com/posts/20081202_cybercrime_and_remote_search/">More...</a>]]></description>
			<dc:date>2008-12-02T17:56:00-08:00</dc:date>
			<category>internet</category><category>privacy</category><category>security</category>
		</item>
		
		<item>
			<title>Hackers Penetrated Pentagon Computer Systems, Called Most Severe on US Military Network</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/hackers_penetrated_pentagon_computer_systems/</guid>
			<link>http://www.circleid.com/posts/hackers_penetrated_pentagon_computer_systems/</link>
			<description><![CDATA[Computer hackers suspected of working from Russia successfully penetrated Pentagon computer systems in one of the most severe cyber attacks on US military networks, according to reports. The electronic attack was so serious that Admiral Mike Mullen, the chairman of the joint chief of staff, briefed President George W Bush and Robert Gates, the defense secretary. "This one was significant, this one got our attention," said an official, speaking anonymously. <a href="http://www.circleid.com/posts/hackers_penetrated_pentagon_computer_systems/">More...</a>]]></description>
			<dc:date>2008-11-30T10:43:00-08:00</dc:date>
			<category>internet</category><category>cyberattack</category><category>security</category>
		</item>
		
		<item>
			<title>Localizing Cybercrime</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20081128_localizing_cybercrime/</guid>
			<link>http://www.circleid.com/posts/20081128_localizing_cybercrime/</link>
			<description><![CDATA[It's where you advertise your services, and how you position yourself that speak for your intentions, of course, "between the lines". There's a common misunderstanding that in order for a malware campaigner or scammer to launch a localized attack, they need to speak the local language. This misconception is largely based on the fact that a huge number of people remain unaware on how core strategic business practices have been in operation across the cybercrime underground for the last couple of years. <a href="http://www.circleid.com/posts/20081128_localizing_cybercrime/">More...</a>]]></description>
			<dc:date>2008-11-28T11:02:00-08:00</dc:date>
			<category>internet</category><category>security</category>
		</item>
		
		<item>
			<title>World Bank Removes CIO Following Recent Cyberattacks</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/world_bank_cyberattacks_removes_cio/</guid>
			<link>http://www.circleid.com/posts/world_bank_cyberattacks_removes_cio/</link>
			<description><![CDATA[According to recent reports, The World Bank has effectively removed a vice president who served as its chief information officer while struggling to deal with a <a href="http://www.foxnews.com/story/0,2933,435681,00.html">series of embarrassing cyberattacks</a>. The World Bank Group's network, which had been raided repeatedly by outsiders for more than a year, is one of the largest repositories of sensitive data about the economies of every nation. Servers in the institution's highly restricted Treasury unit were deeply penetrated with spy software, and the invaders also had full access to the rest of the bank's network for nearly a month in June and July, sources say. At least six major breaches have been detected at the World Bank since the summer of 2007, with the most recent breach occurring just last month. <a href="http://www.circleid.com/posts/world_bank_cyberattacks_removes_cio/">More...</a>]]></description>
			<dc:date>2008-11-27T07:34:00-08:00</dc:date>
			<category>internet</category><category>cyberattack</category><category>security</category>
		</item>
		
		<item>
			<title>Criminals Regain Control of Srizbi Botnet, Spam Volume Rising</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/criminals_regain_control_of_srizbi/</guid>
			<link>http://www.circleid.com/posts/criminals_regain_control_of_srizbi/</link>
			<description><![CDATA[Experts are that the spam volumes may spike significantly over the next few days now that one of the world's largest networks of compromised computers used for blasting out junk email has been brought back to life, reports Brian Krebs of the Washington Post. "The <em>Srizbi</em> botnet, a collection of more than half a million hacked PCs that were responsible for relaying approximately 40 percent of all spam sent worldwide, was knocked offline two weeks ago due to pressure from the computer security community." <a href="http://www.circleid.com/posts/criminals_regain_control_of_srizbi/">More...</a>]]></description>
			<dc:date>2008-11-26T12:58:00-08:00</dc:date>
			<category>internet</category><category>cyberattack</category><category>security</category><category>spam</category>
		</item>
		
		<item>
			<title>Feds Urged to Deploy DNSSEC and Signing of the Root Zone</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/feds_urged_to_deploy_dnssec/</guid>
			<link>http://www.circleid.com/posts/feds_urged_to_deploy_dnssec/</link>
			<description><![CDATA[Security experts and leading vendors are urging the U.S. federal government for the rapid adoption of DNSSEC and signing of the root zone. In recent weeks, the National Telecommunications and Information Administration (NTIA) has received 30-plus comments in favor of securing DNS root zone data. These comments are from the Internet Architecture Board (IAB) and the Internet Society as well as ISPs and domain name operators such as PayPal, Akamai Technologies, NeuStar, Comcast and Afilias. <a href="http://www.circleid.com/posts/feds_urged_to_deploy_dnssec/">More...</a>]]></description>
			<dc:date>2008-11-25T16:04:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>security</category>
		</item>
		
		<item>
			<title>High&#45;Profile Botnet Shutdowns Giving Rise to Virtual Malware Next Year, Experts Predict</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/rise_of_virtual_malware_experts_predict/</guid>
			<link>http://www.circleid.com/posts/rise_of_virtual_malware_experts_predict/</link>
			<description><![CDATA[Virus writers are likely to unleash increasingly sophisticated strains of malware next year in an attempt to bounce back from some high-profile botnet shutdowns in 2008, according to new predictions from managed security provider MessageLabs. The company predicted that hackers will launch new attacks in which malware will exist as a virtualisation layer running directly on the hardware and undiscoverable by the operating system. <a href="http://www.circleid.com/posts/rise_of_virtual_malware_experts_predict/">More...</a>]]></description>
			<dc:date>2008-11-25T07:51:00-08:00</dc:date>
			<category>internet</category><category>security</category>
		</item>
		
		<item>
			<title>US Concerned Over Chinese Cyber Espionage</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/chinese_cyber_espionage/</guid>
			<link>http://www.circleid.com/posts/chinese_cyber_espionage/</link>
			<description><![CDATA[China is actively conducting cyber espionage as a warfare strategy and has targeted U.S. government and commercial computers, according to a new report from the U.S.-China Economic and Security Review Commission. "China's current cyber operations capability is so advanced, it can engage in forms of cyber warfare so sophisticated that the United States may be unable to counteract or even detect the efforts," according to the annual report recently delivered to Congress. <a href="http://www.circleid.com/posts/chinese_cyber_espionage/">More...</a>]]></description>
			<dc:date>2008-11-25T07:29:00-08:00</dc:date>
			<category>internet</category><category>cyberattack</category><category>security</category>
		</item>
		
		<item>
			<title>Cybercrime, Underground Economy Booming, Stolen Credit Card Data Main Driver</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/underground_economy_stolen_credit_card/</guid>
			<link>http://www.circleid.com/posts/underground_economy_stolen_credit_card/</link>
			<description><![CDATA[Credit card information is the most advertised category of goods and services on the underground economy accounting for 31 percent of the total, according to recent data found by security experts. In a report released today by Symantec, stolen credit card numbers are reported to sell for as little as $0.10 to $25 per card with the average advertised stolen credit card limit at more than $4,000. According to calculations, the potential worth of all credit cards advertised during the reporting period was $5.3 billion. <a href="http://www.circleid.com/posts/underground_economy_stolen_credit_card/">More...</a>]]></description>
			<dc:date>2008-11-24T10:44:00-08:00</dc:date>
			<category>internet</category><category>security</category>
		</item>
		
		<item>
			<title>Phishers Expand Number of Top Level Domains Abused, Policy Changes Found Effective in Prevention</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/phishers_expand_top_level_domains_abused/</guid>
			<link>http://www.circleid.com/posts/phishers_expand_top_level_domains_abused/</link>
			<description><![CDATA[The new Global Phishing Survey released by the Anti-Phishing Working Group (APWG) this month reveals that phishing gangs are concentrating their efforts within specific top level domains (TLDs), but also that anti-phishing policies and mitigation programs by domain name registrars and registries can have a significant and positive effect. The number of TLDs abused by phishers for their attacks expanded 7 percent from 145 in H2/2007 to 155 in H1/2008. The proportion of Internet-protocol (IP) number-based phishing sites decreased 35 percent in that same period, declining from 18 percent in the second half of 2007 to 13 percent in the first half of 2008. <a href="http://www.circleid.com/posts/phishers_expand_top_level_domains_abused/">More...</a>]]></description>
			<dc:date>2008-11-24T08:35:00-08:00</dc:date>
			<category>internet</category><category>domain_names</category><category>domain_registries</category><category>policy_regulation</category><category>security</category><category>spam</category><category>top_level_domains</category>
		</item>
		
		<item>
			<title>IETF Debates DNS Security: Fix It or Push for DNSSEC</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/ietf_debates_dns_security_dnssec/</guid>
			<link>http://www.circleid.com/posts/ietf_debates_dns_security_dnssec/</link>
			<description><![CDATA[The Internet engineering community is grappling with what to do about a serious flaw in the DNS discovered this summer, and the ongoing debate brings to mind a famous quotation from Voltaire: "The perfect is the enemy of the good." At issue is whether the group should use its resources to encourage DNS registries, ISPs and enterprises to upgrade to the ultimate DNS security solution known as DNSSEC; or whether it should tweak the DNS protocols to address the so-called 'Kaminsky bug' as an interim step. The issue is being debated at a meeting of the IETF, the Internet's leading standards body, being held here this week. <a href="http://www.circleid.com/posts/ietf_debates_dns_security_dnssec/">More...</a>]]></description>
			<dc:date>2008-11-20T13:47:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>security</category>
		</item>
		
		<item>
			<title>We Must Avoid Cyber Crisis Equivalent to Current Financial Crisis, Urge Experts</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/cyber_crisis_equivalent_to_financial_crisis/</guid>
			<link>http://www.circleid.com/posts/cyber_crisis_equivalent_to_financial_crisis/</link>
			<description><![CDATA[Cybercrime is likely to wreak as much havoc as the credit crisis in the coming years if international regulation is not improved, some of the world's top crime experts said on Wednesday. Damage caused by cybercrime is estimated at $100 billion annually, said Kilian Strauss, of the Organization for Security and Cooperation in Europe (OSCE). <a href="http://www.circleid.com/posts/cyber_crisis_equivalent_to_financial_crisis/">More...</a>]]></description>
			<dc:date>2008-11-20T12:26:00-08:00</dc:date>
			<category>internet</category><category>cyberattack</category><category>security</category>
		</item>
		
		<item>
			<title>Cybersecurity Improvement Needs Partnership Not Regulation, Says Industry Group</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/cybersecurity_improvement_partnership_not_regulation/</guid>
			<link>http://www.circleid.com/posts/cybersecurity_improvement_partnership_not_regulation/</link>
			<description><![CDATA[The market-based, voluntary approach that the Bush administration has used to encourage companies to improve cybersecurity is not sufficient and the incoming Obama administration should form a cybersecurity social contract with industry based on economic incentives, according to a new report by Internet Security Alliance (ISAlliance). ISAlliance has released a report suggesting a cybersecurity social contract through which government would encourage and reward corporations by potentially working cybersecurity into procurement and loan processes, along with possible awards programs that could be used as marketing advantages. <a href="http://www.circleid.com/posts/cybersecurity_improvement_partnership_not_regulation/">More...</a>]]></description>
			<dc:date>2008-11-19T12:43:00-08:00</dc:date>
			<category>internet</category><category>cyberattack</category><category>policy_regulation</category><category>security</category>
		</item>
		
		<item>
			<title>Despite Baffling Delays in DNSSEC, Wide&#45;Spread Adoption Close, Says DNS Inventor Paul Mockapetris</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/dnssec_adoption_close_says_mockapetris/</guid>
			<link>http://www.circleid.com/posts/dnssec_adoption_close_says_mockapetris/</link>
			<description><![CDATA[Flaws in the current DNS system, most notably the Kaminsky Vulnerability publicly exposed in July 2008, have left Internet uses exposed to potential attacks. DNS inventor Dr. Paul Mockapetris, chief scientist and chairman of IP address infrastructure software provider Nominum, points out that the DNSSEC has been under development for 15 years and the adoption remains low with only Sweden and Puerto Rico signing up to the system. "It baffles me," Mockapetris said of the delay. "On the one hand I'm never baffled by how long standards processes take, but 15 years sounds like a lot to me. I think we've lost 10 years of progress with DNS technology due to this stupid food fight around DNSSEC. We've been at it for 10 years, I think there's five years of good work there." <a href="http://www.circleid.com/posts/dnssec_adoption_close_says_mockapetris/">More...</a>]]></description>
			<dc:date>2008-11-17T12:00:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>security</category>
		</item>
		
	</channel>
</rss>