Performance and effectiveness claims from vendors of network security products can never be taken at face value. In a process crucial to making the right buying decisions, how do the CISO, CIO and other security professionals ensure... Learn More »
Analysis Briefs
Analysis Briefs provide focused analyses of emerging information security trends, events, and technology issues, offering context and perspective for IT professionals.
Reports
At the end of 2011, Chrome’s protection rate steadily climbed to just over 50% before suddenly falling back to 20%. At the same time, Firefox and Safari’s block rate moved in the opposite direction. Chrome, Firefox and Safari all use Google’s Safe Browsing API, and Google has publicly stated that it has not withheld data from their Safe Browsing feed. So what should end users make of the results? Learn More »
Free
Apple’s iOS4 for iPads and iPhones improved security and manageability in enterprise environments. The new features in iOS5 take this one step further. What do IT departments need to do... Learn More »
Subscription
required
Internet Explorer, Firefox, and Chrome were the subject of a Google-funded publication by security reseller Accuvant in which Google Chrome comes out on top, seemingly at the expense of Mozilla Firefox. What should end users make of the results? Learn More »
Free
The firewall market is mature, populated with established vendors and provides limited scope for true innovation. Emerging threats are proving increasingly effective... Learn More »
Subscription
required
Following the RSA breach announced on March 17, 2011 there was
little information made public regarding the extent of the risks to which SecurID users were exposed. In the light of the breach at Lockheed Martin... Learn More »
Subscription
required
During Q1 2011, NSS Labs performed the industry’s most rigorous test of leading Firewall solutions and discovered a serious problem involving the way many firewalls handle TCP... Learn More »
Recent publicity over snooping and hijacking tools such as Firesheep has encouraged providers of Web services such as Twitter and Facebook to implement the SSL protocol in order to better secure client communications... Learn More »
Subscription
required
This FAQ answers questions around our Q2 2011 Network Firewall Group Test Report, mainly concerning the critical TCP split handshake and stability issues discovered in a significant number of firewalls... Learn More »
This brief details NSS Labs' assessment of the recent RSA breach and provides some important points that need to be taken into consideration by enterprises needing to protect critical information... Learn More »
The payment card industry has made great strides in security through the introduction of the PCI Data Security Standard (PCI DSS), which prescribes requirements for cardholder network architectures, policies & procedures, and even products. As a natural result, a number of clarifying questions surrounding products continue to arise, e.g. which products are required, when and where, and how should they be configured? Learn More »
Free
Explains how we test products: Just how you use them in the real world. This is in response to the increasing differentiation among products such as IPS. One size does not fit all. Learn More »
Free
Effective performance of network products must be measured in the context for which the product will be implemented. Typical packet blasting and simple capture/replay technologies are insufficient for realistic determination of network performance for sophisticated state-based network products. Learn More »
Free
Provides a glossary in response to some research and discussions we've had with a number of end-users and vendors. Learn More »
Free
