Dongxue Xu

News:Poor Information Security Costs UK Organisations £2m In Fines. Organisations were fined £2,170,000 for 66 Data Protection Act (DPA) infringements between January and October this year and the biggest reason was poor information security. Online breaches and cyber attacks were the most severely punished by the ICO; companies were fined an a…[Read more]

News: VA misses targets for fixing IT security risks.
The Department of Veterans Affairs did not pass its fiscal 2014 IT security audit, conducted by the agency inspector general’s office. The department’s fiscal 2013 security audit had cited 6,000 unresolved risks, and offered 30 recommendations to improve security. Warren stressed the…[Read more]

News： Top UK information security threat is… paper?
From a survey of senior managers in over 1,000 North American and European businesses, it was established that just 15 per cent of companies had a team focused specifically on paper protection,though 85 per cent did have a team that managed both paper and information risk. PwC also found tha…[Read more]

news: Student hacker busted; date for 2,000 compromised. The student hacked a “cafeteria data file,” which had names, addresses, phone numbers, identification numbers, birth dates and Social Security numbers of 1,968 children. The incident was discovered Tuesday.The attack happened on a school-issued computer,

link: htt…[Read more]

News: Something happaned on me last weekend. I opened a link from my favorite. It opend and blinked, and none of the button on the page could be clicked. I knew I was hacked or the website had been hacked. So I closed the window and run my Mcfee. And it turned out to be a Trojan horses. But I am not confident with if my PC is “clean”.
question:…[Read more]

news: Moscow and Beijing mull agreement on Information Security. Russia and CHina may sign a cooperation agreement on international information security in the near future, specifically on confidence-building measures and steps to prevent cyber incidents from growing into a full-scale conflict. So far, a similar agreement exists only between the…[Read more]

News: CMC issues guidelines to enhance military info security.
China’s central military authority has issued guidelines to enhance management of military information and crack down on illegal online activities involving military affairs. The Central Military Commission (CMC) ordered all PLA forces to standardize management of military…[Read more]

JP Morgan reveals data breach affected 76 million households.
The cyberattack on JPMorgan Chase & Co., first announced in July, compromised information from 76 million households and 7 million small businesses, the company revealed Thursday in a filing with the Securities and Exchange Commission.JPMorgan said as of Oct. 2 it had not “seen any…[Read more]

News: New Zealand firms urged to make information security a priority: IDC
IDC recommends these simple steps CIOs and IT managers can take to control their organisations’ IT security: Establish and anchor a security budget, Set up good configuration with to understand the attack surface, and Choose a security vendor based on both its track…[Read more]

Finland under hybrid warfare attack.

In the peacetime, warfare can become another form to attack the contry. “Some methods of hybrid warfare, according to the professor, are the continuous and strategic conveying of information (also known as propagation) and electronic or cyber attacks. Information that affects the receiver’s thinking and o…[Read more]

Key point of the reading:
Information security portects information and information system from unauthorized access. It must be reamed and solved security problems based on its own strategic drivers, not solely objects.

California State University reports server security breach

A web server was broken by an unknow person on Aug. 23,2013. The university information security team dicoverd the broke on Aug. 11 this year. This server used to store employement transaction records and some learning course information. It has 6036 individuals SSN, full name and…[Read more]

Key point:
Vacca Chapter 1: Information security is necessary and the environment of the information is dangers, but most organizations think it is waste of money to invest on information security. To prevent the risk of information security, the organizations can strong its internal secure (the security tone to their employees) and get help from…[Read more]