SANS Technology Institute: Security Laboratory
Welcome to the Security Laboratory. I'm Stephen Northcutt and like many of you I am a manager and leader with an information technology job. At the SANS Technology Institute, we are always striving to become more skilled and knowledgeable in computer security as well as the people side of the job. The "Security Labratory", for you creative spellers, is an informal set of articles and whitepapers, almost a blog, about security, information technology, and the computer security industry. As we learn more, ponder issues and research content for SANS Security 401 Security Essentials and the GIAC Security Essentials Certification, we will continue to add to this site. Our hope is for this to be a resource for the community and we would love to hear from you. Feel free to drop us a note at stephen@sans.edu.
Click here to subscribe to the Security Laboratory Article Feed- Sec Lab: Predictions and Trends for Information, Computer and Network Security
A collection of predictions about the future of security for computers, networks and information.
Security Predictions for 2011 and 2012 - The Emerging Security Threat - Updated August 8th, 2010
By Stephen Northcutt
Version 2.9A look at some of the potential emerging trends and security threats for 2011 and 2012. File was started to help prepare for a panel on the same subject at SANS Security West and also for an upcoming Keynote. Love to hear your thoughts on the subject.
Stephen Northcutt's Security Predictions for 2011 and 2012 - Updated July 22nd, 2010
By Stephen Northcutt
Version 1.2In addition to the work that I have done rounding up other people's thoughts, I also work as a futurist for IT and IT Security, and this is my set of predictions for 2011 and 2012. I hope they are useful to you.
Eric Cole Emerging Threats Summary 2010 - May 25th, 2010
By Eric Cole, Ph.D.
Dr. Cole moderated a lively discussion of emerging threats in information security at SANS Security West 2010. Here are Eric's top ten security issues to watch for.
Mark Weatherford Security Predictions 2011 - 2012 - May 24th, 2010
By Mark Weatherford
Mark is the CISO of the State of California and is a valued thought leader in Information Security.
SANS Security West 2010 Speaker Room Predictions - May 24th, 2010
By Stephen Northcutt and Tommy Luke
Stephen Northcutt thought it might be fun to interview the instructors in the speaker room at SANS Security West 2010 and get their take on the future. Sometimes your answer is different when it is given verbally.
2010 Security Predictions - March 2nd, 2010
By Stephen Northcutt
A look at some of the more well known 2010 security predictions and a quick check to see how they are doing.
Security Errors and Omissions by Organizations As We Enter 2011 - Updated July 22nd, 2010
By Stephen Northcutt
Version 1.1Alan Paller, Director of Research at the SANS Institute asked me to put together a list of the prominent security errors and omissions organizations are making as we enter 2010 and I have updated it for 2011. The following is taken straight from one of the courses I research, author and teach, Management 512 Security Leadership Essentials.
2009 Security Predictions - Updated February 6th, 2009
By Stephen Northcutt and friends
Version 1.11Stephen Northcutt and friends offer their predictions for the important trends in network, information and computer security for 2009 and beyond.
Stephen Northcutt's favorite Security Predictions for 2008 - Updated April 16th, 2008
By Stephen Northcutt
Version 1.1Instead of making his own predictions about information and computer security trends in 2008, Stephen would like to share his favorites from other pundits, and he also takes a look at how those December 2007 predictions are holding up as of April 2008.