Cornerstone Issue 75: December 15, 2006



Welcome to Issue 75 of Cornerstone, a subscription-only electronic newsletter issued periodically by Core Competence.

Cornerstone reports on a wide range of networking topics and activities involving Core Competence. A brief abstract explains what you will find if you choose to visit each URL.

New White Papers by CoreCom

http://www.ruckuswireless.com/technology/whitepapers/voice/
Overcoming Wi-Fi Challenges Facing Digital Voice in the Home
Ruckus Wireless, November 2006

Worldwide FMC revenue is poised to explode, with estimates reaching 92 million subscribers by 2011. To successfully tap this new market, carriers must provide ubiquitous, reliable, cost-effective wireless coverage. As the de facto technology for in-home wireless, Wi-Fi has great potential to enable converged service delivery inside the home. This paper, developed by Lisa Phifer for Ruckus Wireless, explores challenges and solutions for residential Vo-Fi service delivery.

http://www.crownpeak.com/InfoCenter/Index.aspx
Understanding CrownPeak CMS Security
CrownPeak, December 2006

This new white paper, developed by Lisa Phifer for CrownPeak, details how this provider of web content management services ensures the privacy, integrity, and availability of its data center, network interfaces, servers, applications and customer-managed web content.

Securing Remote and Mobile Workforces

http://www.gotomypc.com/s/cornerstone/vpn/1206
Extending your VPN with Citrix GoToMyPC Corporate
Citrix Online, November 14, 2006

Providing flexible and secure remote access is one of the toughest jobs an IT manager faces. VPNs can meet many remote access needs, but they aren't the only tools available. IT managers can reduce their workload while maintaining control and security by linking remote workers to their own office desktops. In this on-demand webcast, Lisa Phifer discusses the benefits of augmenting your VPN with GoToMyPC Corporate.

http://www.corecom.com/html/bcrmag.html#oct06
Mobile VPNs: Enabling On-the-Go Workforces
BCR Magazine, October 2006

Mobile VPNs were created years ago to secure communication over painfully spotty and slow radio networks. 3G and Wi-Fi networks are now much faster, but today's mobile users still encounter many of the same old problems, from coverage gaps and hand-off delays to roaming disruption and broken sessions. In this BCR article, Lisa Phifer takes a fresh look at Mobile VPNs and how they are being used to support today's mobile professionals.

Dave Piscitello's Blog

http://hhi.corecom.com/arc20061101.htm#BlogID566
http://hhi.corecom.com/arc20061101.htm#BlogID565
Definition of Data Breach
Dave's Blog, 06 Nov 2006

Dave takes back-to-back looks at two aspects of the issue of data breaches. In the first, Dave offers his unofficial definition of the term. In the second, Dave offers some evidence that taking care of your physical assets may be a better investment than *any* security technology you might find.

http://hhi.corecom.com/arc20061101.htm#BlogID568
Why Top Level Domains Should Not Use Wildcard Resource Records
Dave's Blog, 13 Nov 2006

On behalf of ICANN's Security and Stability Advisory Committee, and with the help of his colleague Suzanne Woolf, Dave prepared a short publication explaining the problems users and applications may experience when Top Level Domain registries use synthesized responses for domain names that are non-existent, not registered, or in DNS-speak "uninstantiated".

http://hhi.corecom.com/arc20061101.htm#BlogID569
What Will Future Anthropologists Deduce from Firewall Logs?
Dave's Blog, 16 Nov 2006

Imagine that several centuries hence, anthropologists uncover a hoard of archived tapes containing terabytes of firewall log files recording events from the late 20th century into our present day (2006). Dave ponders what might happen if they discovered how to read the media and open those log files.

http://hhi.corecom.com/arc20061101.htm#BlogID571
Anatomy of a DNS DDoS Amplification Attack
Dave's Blog, 28 Nov 2006

In an earlier WatchGuard LSS article, Dave described the tools that attackers use in DNS DDoS amplification attacks, the attack itself, and countermeasures that are generally considered best practices. In this recent post, Dave discusses LSS subscriber feedback.

Security Threats and Countermeasures

http://searchvoip.com/general/0,295582,sid66_gci1231702,00.html
December Day-to-Day Networking Calendar: VoIP on the go
searchVOIP, November 27, 2006

In this month's Day-to-Day Networking calendar feature, published monthly by TechTarget, Lisa Phifer discusses network security considerations to keep in mind if your mobile workforce is using Skype, with or without corporate blessing.

http://www.corecom.com/html/bcrmag.html#aug06
Dealing with Adware and Spyware
BCR Magazine, August 2006

Spyware is morphing from nuisance to nightmare, making it impossible for companies to ignore this increasingly complex and evasive form of malware. In this article published by BCR Magazine, Lisa Phifer recommends multi-layer, multi-phase defenses against both pesky adware and this year's crop of stubborn, stealthy spyware.

http://www.corecom.com/external/livesecurity/containment.htm
Containment Security: How to Keep an Attacker In
WatchGuard LiveSecurity, October 25, 2006

In this LiveSecurity column, Dave Piscitello explains how the principles of physical containment security extend naturally into network security. If intruders manage to get into our networks, we still need to prevent them from stealing or doing harm to the assets accessible via our networks.

Security Appliances

http://searchnetworking.com/tip/0,289483,sid7_gci1234346,00.html
Security Spotlight: Appliances that fight phishers and spambots
searchNetworking, December 13, 2006

As spam grows more invasive and elusive, network operators are being forced to find new strategies. In this tip, Lisa Phifer explains how mail security appliances can help you battle spam more efficiently, reclaiming lost user, server and network productivity.

http://searchnetworking.com/tip/0,289483,sid7_gci1230033,00.html
Security Spotlight: SSL VPN appliances
searchNetworking, November 15, 2006

By leveraging the ubiquitous Web browser as a client platform, SSL VPN appliances represent a promising alternative for delivering simple-but- secure off-site access to private business services and data. In this tip, Lisa Phifer explores why a growing number of companies now use SSL VPN appliances and discusses the features to consider when choosing one.

-----------------------------------------------------------------

Cornerstone is an electronic publication of Core Competence, Inc. If you do not wish to receive future issues, please reply to this message or send email to cornerstone@corecom.com with the word "remove" in the subject line or message body.

For additional information about Core Competence, visit our web site http://www.corecom.com
For past issues, visit our CornerStone page http://www.corecom.com/html/cornerstone.html
Send us a subscribe message to receive future issues of CornerStone.