"PCI Compliance", 3rd edition - Out On August 6, 2012

A new edition (3rd) of our book "PCI Compliance" is coming out on August 6, 2012.
It covers PCI DSS 2.0, as requested by many of our readers.  Other new materials include Emerging Technology and Alternative Payment Schemes, PCI for the Small Business, etc. A full ToC for this new edition is here.

Get the book in print or for Kindle!

Monthly Blog Round-Up – May 2012

Here is my next monthly "Security Warrior" blog round-up of top 5 popular posts/topics this month:

1. “Log Management at $0 and 1hr/week?” is where a lot of companies still are, thus this post became popular again.
2. “Simple Log Review Checklist Released!” is often at the top – the checklist is still a very useful tool for many people. “On Free Log Management Tools” is a companion to the checklist (updated version)
3. “Why No Open Source SIEM, EVER?” (and this) is next – for some weird reason. I suspect a lot of people still crave a free open source SIEM tool.
4. “Top 10 Criteria for a SIEM?” came from one of my last projects I did when running my SIEM consulting firm.
5. “On Choosing SIEM” is about the least wrong way of choosing a SIEM tool – as well as why the right way is so unpopular.

In addition, I’d like to draw your attention to a few posts from my Gartner blog:

Denial of Service research:

• More on DoS and Shared Security
• On DoS Detection
• Wanted Dead or Alive: Application DoS Attack
• Availability, Security and Why is DoS Fun?

Also see my past monthly and annual “Top Posts” – 2007, 2008, 2009, 2010, 2011.

Disclaimer: all this content was written before I joined Gartner on Aug 1, 2011 and is solely my personal view at the time of writing. For my current security blogging, go here.

• Monthly Blog Round-Up – April 2012