Fabio's profileFabio Cerullo's BlogPhotosBlogLists Tools Help

Blog


    8/29/2006

    Free Microsoft Virtual Labs - Vista, Exchange 2007, Office 2007

    TechNet virtual labs are a great way to evaluate and test Microsoft's newest server products through a series of guided, hands-on labs which can be completed in 90 minutes or less. There online and FREE.

    Microsoft added some new V-Labs for Windows Vista, Exchange Server 2007, 2007 Microsoft Office System (including the new UI improvements in Windows SharePoint Services 3.0).  This really is a great resource in that it enables you to try out these products without having to set them up on a test system.

    You can try out these v-labs for yourself here.

    8/14/2006

    Certification path for the future CSO

    Today I came across a very interesting article that explains which certifications are useful in order to become a Chief Security Officer and how to gradually accomplish them. Obviously a bit of luck it is always necessary but the career path makes perfect sense to me...
     
    Start out gentle with the BrainBench Internet and network security exams. You'll find them listed at www.brainbench.com. They're cheap, provide good basic coverage of the subject and will get you motivated to make progress. This should take you two-to-four months.

    Next, tackle the Certified Internet Webmaster (CIW) Security Professional exam. Combined with an MCSE, passing this exam makes you a CIW Security Analyst and may enhance your "merit badge count." This is a good entry-level exam on basic Internet, network and systems security. This will take you another two-to-four months to complete.

    After that, a broader, more formal, but still entry-level security cert is what you should tackle. This could be any of the following credentials, any of which will provide you with an excellent and thorough background in computer security theory, operations, practices and policies:

    TruSecure ICSA Computer Security Associate (TICSA)
    The International Computer Security Association is well-known and highly regarded; their entry-level program requires a minimum of two years of work-related security experience or equivalent classroom training hours.

    ISC-squared's System Security Certified Professional
    The International Information Systems Security Certification Consortium is also home to the best-known senior level security certification (see below). If you're of a mind to go that route, the SSCP is a great way to prepare.

    SANS GIAC Security Essentials Certification (GSEC)
    The SANS Institute is a growing powerhouse in the security industry. Likewise, its certifications are gaining increased visibility and acceptance. The GSEC opens the door to other certifications in the SANS GIAC program.

    Next, you'll be ready to tackle an intermediate-level security certification. Most such certifications require three or more years of relevant, on-the-job experience. Many require submitting papers or research results in addition to passing exams; some also require taking specific classes. Of these, three are particularly worthy of mention and pick up where the previous three left off:

    ISC-squared's Certified Information Systems Security Professional (CISSP)
    CISSP is the best-known senior-level security certification in North America and the one most often requested by name in job postings and classified ads.

    SANS GIAC Security Specialist Certifications
    The SANS Institute offers numerous topical specializations that extend on the GSEC including firewalls, incident handling, intrusion analysis, Windows and Unix administration, information security officer, and systems and network auditor certs. A topical, timely and highly technical program based on outstanding training online or at SANS conferences.

    Finally, you'll be ready for a heavy-duty, senior-level cert (many of which require seven or more years of relevant work experience). At this point, a CSO job should also be more than a dream -- it should be achievable! Here's the short list of relevant certs:

    Certified Information Systems Auditor (CISA)
    Source: www.isaca.org
    Demonstrates knowledge of IS auditing for control and security purposes. Of primary interest to IT security professionals responsible for auditing IT systems, practices and procedures to make sure organizational security policies meet governmental and regulatory requirements, conform to best security practices and principles and meet or exceed requirements stated in an organization's security policy.

    Certified Protection Profesional (CPP)
    Source: American Society for Industrial Security (www.asis.org)
    Demonstrates thorough understanding of physical, human and information security principles and practices. The most senior and prestigious IT security professional certification covered here, the CPP requires extensive on the job experience (seven to nine years), as well as a profound knowledge of technical and procedural security topics and technologies. Only those who have worked with and around security for some time will be able to qualify for this credential.

    The SANS GIAC Program also continues to introduce more senior-level, cumulative security certs. It is a good idea to check out their top-end offerings when you're ready to climb this last rung of the security certification ladder.

    Good luck!

    8/10/2006

    Norton Confidential Beta available to download

    Are you interested in testing the next release of Norton 360? Then go to the following link in order to download it from Symantec website:
     
     
    One thing to take into consideration is the fact that the initial Norton Confidential Beta version will automatically uninstall Norton Password Manager and will require you to uninstall currently incompatible Norton products such as Norton AntiVirus, Norton Internet Security, Norton Personal Firewall, and Norton SystemWorks. As a result, your PC may be without adequate real-time protection from Internet threats (viruses, worms, etc.) It is recommended you download and use Norton Confidential Beta on a test machine, and read the notices and disclaimers provided just before you download the product.
    8/7/2006

    Zora: A Pilot Virtual Community made by an Argentinian Researcher

    Nice news today as I have opened the newspaper "La Nacion" and read that Marina Umaschi Bers, an argentinian researcher, who is currently living in the EEUU received an award by George Bush because of her work with Pediatric Dialysys patients.

    Zora is a 3D multi-user computer environment designed at the MIT Media Laboratory. It was designed to help young people explore issues of identity, while engaging in a virtual community. Users build "virtual rooms" and populate them with objects and characters, program them with storytelling behaviors, and converse with other young people in real-time through a virtual character representing themselves.

    Children and adolescents facing hemodialysis form a community because they shar a common medical condition and treatment. Yet, at the same time they are confined to bedspace which allow little social interaction. The use of a virtual environment may facilitate mutual patient support and interaction.

    If you want to find out more go to the following link: http://alumni.media.mit.edu/~marinau/media-lab.html

    8/3/2006

    Hamachi.. the evolution of VPN...

    Hamachi is a zero-configuration virtual private networking application that  gives you LAN over the Internet. 

    In other words Hamachi is a program that allows you to arrange multiple computers into their own secure network just as if they were connected by a physical network cable.

    Hamachi is fast, secure and simple. Its core version is also free.

    Virtually any application that works over local/home networks can also be used over Hamachi networks.

    Think - Windows File Sharing, iTunes, Remote Desktop, Remote Assistance or even gaming. All fully encrypted, authenticated and peer-to-peer.
    If you want to find out more click here: http://www.hamachi.cc/
    8/1/2006

    JAJAH - A fantastic web activated telephony... and FREE!!

    JAJAH Free Global Calling allows you to make free local and international phone calls. It applies to land line and mobile calls to and within: the United States; Canada; China; Hong Kong, Singapore and Taiwan, and to landline calls to and within: Australia; UK; Germany; France, Italy and most other European nations.

    It applies when both call participants are registered and active JAJAH users. In countries where free phone calls are not available, or if someone is calling a non-JAJAH member, calls are subject to JAJAH’s regular low rates.
     
    The most amazing feature is that you don't need to have any software installed, you just visit the website, put your phone number, the destination number and it will connect you with the other party by ringing both phones.
     
    Simply amazing, wanna know more visit the following site: http://www.jajah.com/