text:
New Strategies for Managing the Risks of Exploitation
- Joseph Randall
- 2 years ago
- Views:
1 E - C O M M E R C E A N D C Y B E R C R I M E : New Strategies for Managing the Risks of Exploitation F O R E N S I C A N D L I T I G A T I O N S E R V I C E S
2 Now that most transactions and exchanges have become electronic, you really don t need to be an expert to predict that this will become, or already is, a crime generator. What is relatively new is the value of business information. We see a tendency for rising criminal activity in this field. Not only the theft of information, but also the threat of making information public. 1 L OEK WEERD, POLICE INSPECTOR AND COMPUTER CRIME-UNIT EXPERT, HAAGLANDEN REGIONAL POLICE, THE NETHERLANDS
3 TABLE OF CONTENTS 2 Introduction 4 The Current Environment: Understanding the New Risks 11 Taking Action to Protect Your Business 15 When the Worst Happens: Avoiding Further Damage 19 Looking Ahead: Emerging Risks in a Changing Business World 20 Conclusion 21 Appendix I: Ensuring Preparedness An Interview with Jeff Hormann of AARP 23 Appendix II: Questions for the Board of Directors Recommendations from Olivia Kirtley 25 Appendix III: Applying the Law to Cyber Invasions An Interview with Meredith Fuchs of Wiley, Rein & Fielding 27 Appendix IV: Beyond the Internet Exploiting Digital Telephony Services 28 Endnotes Produced as part of a series by KPMG s Assurance & Advisory Services Center. N E W S T R A T E G I E S F O R M A N A G I N G T H E R I S K S O F E X P L O I T A T I O N 1
4 I N T R O D U C T I O N At the turn of the millennium, one would be hard-pressed to find a competitive and thriving organisation that does not rely upon communications and other information technologies as an enabler of its activities. No longer incidental to the workings of an organisation, technology is integral to business today. At the same time, however, the very digital nervous system, 2 as Bill Gates terms it, that enables and improves our lives at work and at home also creates enormous new risks, many of which organisations may not perceive or have not yet considered. The complexity of modern enterprises, their reliance on technology, and the heightened interconnectivity among organisations that is both a result and a driver of e-business these are rapidly evolving developments that create widespread opportunities for theft, fraud, and other forms of exploitation by offenders both outside and inside an organisation. With the growth of e-business, internal and external perpetrators can exploit traditional vulnerabilities in seconds. They can also take advantage of new weaknesses in the software and hardware architectures that now form the backbone of most organisations. In a networked environment, such crimes can be committed on a global basis from almost any location in the world, 3 and they can significantly affect an E - C O M M E R C E A N D C Y B E R C R I M E organisation s overall well-being. As businesses grow and partner, systems become increasingly sophisticated and less dependent on human intervention. Monitoring individual behaviour becomes more difficult (though certainly more important); and vulnerability to electronic crime grows as organisations are increasingly connected to, and reliant on, individuals and systems they do not directly control. Most organisations are alert to the risks posed by electronic viruses such as the May 2000 I Love You virus, which spawned a number of derivative viruses and is estimated to have cost businesses and governments upward of $10 billion 2
5 dollars. 4 Many, however, remain unaware of the extent to which they can be harmed by a wide variety of cyber misbehaviour that may originate with their own employees or partners. As organisations develop and refine their e-business strategies, they need to consider the issues that influence the confidentiality, integrity, and availability of their data. In this context, they need to know how they can be affected by the new risks of e-crime and how inadequate preparation could leave them open to an attack that could easily diminish the value of their businesses. This white paper focuses on how organisations can use a comprehensive cyber defence program to turn e-crime This white paper focuses on how organisations can use a comprehensive cyber defence program to turn e-crime preparedness into a new competitive advantage. preparedness into a new competitive advantage. It describes the business risks now evolving rapidly in the electronic marketplace. It discusses how some attacks take place as well as how some organisations are beginning to protect themselves, both to deter and respond to attacks and to avert further damage once an exploitation has taken place. Finally, this document examines how the scope and nature of e-crime is expected to change and how organisations can prepare to meet those new challenges. N E W S T R A T E G I E S F O R M A N A G I N G T H E R I S K S O F E X P L O I T A T I O N 3
6 T H E C U R R E N T E N V I R O N M E N T : U N D E R S T A N D I N G T H E N E W R I S K S Increasingly, organisations are incorporating technologies into their infrastructures without understanding how such tools can be exploited and used against them at a heavy price. Attackers can divert financial assets, shut down communications among employees or business partners, steal intellectual property, damage an organisation s reputation, or bring e-commerce (or an entire business) to a halt. Computers can be used as weapons to commit crimes, as storage devices to harbour evidence of crimes, and they can even be the objects or victims of crimes. As organisations increasingly integrate their systems with those of their vendors, suppliers, customers, and others, the risks they face multiply. The shift toward selfservice systems within and among organisations capabilities that offer enormous opportunities for cost savings and other efficiencies in, for example, human resources, inventory, or billing also makes their host organisations increasingly vulnerable. Along with Internet use (projected to encompass 502 million users world-wide by ), the e-crime problem is exploding: A recent survey of Fortune 500 companies by E - C O M M E R C E A N D C Y B E R C R I M E the FBI and the Computer Security Institute found financial losses from computer crime exceeding $360 million from 1997 to Of those responding to the survey, 62 percent reported computer security breaches within the last year. 6 These numbers, however, do not entirely capture the nature or potential extent of the problem, as described by U.S. Deputy Attorney General Eric Holder: How big is the computer and high-tech crime problem? We simply don t know. We do know that computer crime costs industry and society billions of dollars every year. There is substantial evidence computer crime is increasing in scope and in complexity. And we know that, left unchallenged, computer crime will stifle the expansion of electronic commerce and, potentially, pose a serious threat to public health and 4
7 safety, particularly when we look at the vulnerability of critical infrastructures, such as the air traffic control system, the power grid, and national defence systems all of which are totally dependent on computer networks. 7 Such attacks are possible in part because the Internet and its related suite of communication protocols were designed (30 years ago) to facilitate a ubiquitous information-sharing and messaging infrastructure. Intended to provide continuity of communications services under wartime conditions, these protocols were never designed to be secure from exploitation. Although the characteristic strengths of the Internet served its initial purpose well, those same strengths embody features that are exploitable. Moreover, new technologies are being developed so quickly that all security issues may not be addressed completely during the development process. Apart from inherent technological weaknesses is the lack of e-crime Organisations may not perceive the extent to which they can benefit from preparedness efforts. awareness among many organisations. Many do not realise that the same technological advancements that have enabled business growth and innovation are also available to facilitate cyber misbehaviour. In addition, organisations may not yet understand that protecting assets in the virtual world is a more complex and exacting endeavour than protecting assets in the physical world. Organisations may not perceive the extent to which they can benefit from preparedness efforts. Recognising Your Attacker Popular misperceptions often attribute network attacks to mischievous teenagers or social misfits. Experience indicates that these individuals, however, represent a small number of the diverse group of criminals who perpetrate e-crimes both inside and outside organisations. These criminals may commission e-crimes for their own objectives or make their skills and services available for hire. External intruders include: s Sophisticated crackers who working alone or with trusted associates and sometimes for hire develop and use technology-based tools that facilitate illegal entry into a victim s network system or other technologies. Once they have achieved their objectives, they distribute their tools anonymously, via the Internet, to mask their association with either the tools or the exploitation of the victim. s Cookbook crackers 8 who lack the knowledge, skills, and abilities to create and use sophisticated intrusion tools but who seek out such tools to launch attacks. N E W S T R A T E G I E S F O R M A N A G I N G T H E R I S K S O F E X P L O I T A T I O N 5
8 Internal attackers can include dissatisfied current employees working alone or with other insiders or perhaps with disgruntled ex-employees. Some experts believe that organisations face a greater risk from the fraudulent acts of their own employees (or former employees with knowledge of their systems) than they do from external threats. 9 Contractors or employees of suppliers or vendors who exceed their authorised use of an organisation s systems also pose a considerable threat. Attackers Share Motivations No matter who perpetrates it, a deliberate cyber attack can: s destroy an asset (in which case, it retains no value), s corrupt an asset (reducing its value), s deny access to an asset (which still exists, but is unattainable), or s result in the theft of an asset (which retains inherent value, but its possession changes). Greed, malevolence, revenge, or the misguided intellectual challenge of creating havoc within large systems can motivate both outsiders and insiders. External attacks involve outside offenders Internal and external attackers share similar motivations: greed, malevolence, revenge, or the misguided intellectual challenge of creating havoc within large systems. breaking into a victim s network either to take something of value 10 or for the purpose of trojanising the network. (Named for the Trojan Horse, this crime is that of compromising network security measures and modifying security tracking mechanisms or legitimate programs to permit future unmonitored access. The perpetrator s purpose is to gain complete control of a victim s system so as to be able to execute unauthorised functions unknown to the owner or host of the E - C O M M E R C E A N D C Y B E R C R I M E system.) For example: s The developer of a highly rated e-commerce shopping cart is accused of building a software backdoor into the program that could give him or hackers complete control of the server on which it s installed. The Dansie Shopping Cart, which is currently in use at more than 200 e- commerce sites and is recommended by several Web hosting firms, contains code that enables the author to potentially run any command on the Web server. 11 s In another case, A Delaware man was found guilty in federal court [on May 16, 2000] of setting off a computer time bomb that halted manufacturing by a high-tech company, causing $10 million in losses, the U.S. attorney s office for New Jersey said. A U.S. District Court jury in Newark found [the individual] guilty of unlawfully transmitting a program or command that resulted in intentionally caused damage to a protected computer. He had been charged under the four-year-old National Information Infrastructure Protection Act. 12 6
9 Internal attacks are perpetrated by employees or trusted associates who exceed their authorised access to the organisation s systems and facilities. For example: s Recently, Internet Trading Technologies Corporation in New York suffered hacking activity by an employee. The disruption to [its] business lasted for three days and had the potential of affecting a large percentage of Nasdaq trades conducted by the company. Fortunately, the employee did not employ a sophisticated attack and was traced. He was charged with sending data to intentionally cause damage to a computer, punishable by five years in jail. 13 s As organisations might expect, disgruntled former employees can also wreak havoc. Recently, Three Internet-only radio stations have gone off the air after they were actually removed from the computer server they were hosted on by a disgruntled former employee. The three electronic music stations, E101, Pro G, and Trance Invasion, are operated by EbandMedia a start-up company owned by Internet incubator iweb Corp. 14 Denial-of-service attacks (including those of offenders who launch viruses) can be perpetrated internally or externally to disable network and e-commerce services. A number of high profile attackers have been successful recently in their assaults on popular e-commerce firms including Yahoo, Amazon, and ebay. These attacks use the large-scale communications bandwidth of an intermediary to overwhelm their victims systems with meaningless service requests, thereby degrading or denying legitimate users any service. How Organisations Become Victims Intruders case their targets just as other criminals do. 15 They use publicly available information about the technical vulnerabilities of network systems coupled with inside information gathered from unwitting persons 16 to develop attack methods. Both external and internal intruders look for easy-to-exploit weaknesses in their targeted systems or facilities to gain illegal access to them. With the help of specifically trained professionals, organisations can take steps to protect against such vulnerabilities, as outlined in Figure 1 on page 8. However, not all attacks begin in cyberspace. Indeed, the physical security of systems and facilities is vital to a proper cyber defence program. (In fact, a fire in an ill-designed facility is as effective, if not more so, in shutting a facility down than, for example, a denial-of-service attack.) Organisations need to ensure that their physical security systems appropriately control and monitor the comings and goings at their facilities to prevent, for example, an attacker posing as a vendor or service provider from installing unauthorised software on a server to facilitate a subsequent intrusion. N E W S T R A T E G I E S F O R M A N A G I N G T H E R I S K S O F E X P L O I T A T I O N 7
10 Figure 1: Guarding Against Common Risks Attackers look for How it creates a weakness How to mitigate this risk network computer operating systems, workstations, and other devices deployed in default configurations. misconfiguration of hardware or software, perhaps by activating network services, such as FTP, that have known security issues. a one-size-fits-all approach to cyber network defence (such as a software-based firewall). A device in a default configuration is one that has had little or no reconfiguration to customise it after it left the manufacturer a frequent practice that provides crackers with a quick and easy way in. FTP can be used to transfer large amounts of information off of or onto a system. Many FTP server applications have weaknesses that are well known and can be exploited during an attack if they are inappropriately configured. Demonstrates a limited conceptual approach to the complexities of cyber network defence. Turn off unneeded services that run by default upon installation on network servers, and ensure that all servers operate with upto-date security patches to limit exploitation. Design and implement rigorous product selection and testing procedures. Conduct an enterprise-wide architectural security assessment of the domain; create and implement forensic incident response guidelines. Partnering Also Creates Vulnerabilities Businesses often outsource desktop and other Internet-based network support services. Most are also developing e-business alliances and other partnerships with customers, suppliers, and employees relationships that are essential to e-business. Improperly managed and controlled, however, these new relationships can be as problematic as they are beneficial because, by their very nature, they entrust partial and sometimes complete control of the enterprise s information assets to an outside party. E - C O M M E R C E A N D C Y B E R C R I M E To verify the professional qualifications and integrity of third-party service providers or potential partners, organisations should consider issues including: s What individuals and entities have ownership interests in the service provider or potential partner? s Is the provider/partner owned or controlled by foreign interests (outside of the host nation)? s What is the cyber security infrastructure of the provider/partner? s In what country are the servers of the provider/partner located (and what are the legal issues associated with that location/jurisdiction)? s What personnel vetting procedures does the provider/partner follow before hiring and exposing its employees to client environments? s Does the provider/partner have contract oversight clauses and an oversight apparatus in place? 8
11 Dealing with the Consequences Direct loss of assets is just one consequence of cyber misbehaviour. Whether the attack comes from inside or outside the organisation, victims often suffer from negative publicity, which can harm the organisation s brand and reputation, erode relationships with customers and other stakeholders, and eat into potential revenue. In fact, a March 2000 survey conducted by the Gallup organisation for At Plan, an online marketing firm, suggests that consumer confidence in online shopping has been hurt by attacks on prominent sites: A third of online consumers overall said they might be less likely to make a purchase via the World Wide Web in light of recent news events Nearly seven in 10 online shoppers contacted in the telephone poll said they were concerned or very concerned by news of attacks that had blocked access to such Web sites as Yahoo and Amazon. 17 This ever-present array of threats underscores the growing need for organisations to develop a cyber defence program that weaves preventive measures into the fabric of e-business operations. Along with a strong emphasis on prevention, a cyber defence program must also focus on detection in the form of a sound forensic incident response process. Such a process establishes policies and procedures for departmental and individual behaviour and encompasses plans for ongoing communication with employees and other stakeholders, analysts, and the press. Such an incident response process cannot be geared simply to the occasional emergency. Organisations repel numerous attacks each day. Such assaults are part of doing business in an interconnected world, and not every one should be Remediation or Investigation? This is the continuing question for treated as a crisis. Leaders need to be judicious in victims of network system intrusions. determining how to respond to various attacks, Many victims mistakenly believe that they prevent future intrusions by remembering that attempted hacks are as illegal as disregarding an exploitation, reinstalling network operating system software, and successful ones, and their perpetrators can be charged continuing with business. Ignoring the with attempted crimes. In emergency situations, the problem in this way, however, does not solve it or prevent future attacks. Criteria critical issue is to preserve the forensic evidence that to remediate or investigate should be included in forensic response plans. will assist in identifying, apprehending, and prosecuting the perpetrator(s), as discussed in the next section. N E W S T R A T E G I E S F O R M A N A G I N G T H E R I S K S O F E X P L O I T A T I O N 9
12 Tools of the Intruders Trade Electronic criminals commit their crimes using a wide variety of easily accessible tools that are often available free on the Internet. Such tools include: s Anonymous r ers: Machines on the Internet configured to receive and re-send traffic by replacing the original source address of the sender with the address of the anonymous r er machine. Used by intruders to mask their identities. s Internet packet filters or sniffers: Software that allows intruders to intercept network traffic. s Nukers: Software tools used by intruders to destroy system log trails. s Password crackers: Software that allows intruders to break encrypted password files stolen from a victim s network server. s Scanners: Automated software that helps intruders identify services running on network machines that might be exploited. s Spoofers: Software tools that allow intruders to masquerade as other users. s Steganography: A method of encrypting and hiding data in graphics or audio files. Used by intruders to spy, steal, or traffic in information via electronic dead drops, for example, in Web pages. s Trojan programs: A legitimate program altered by the injection of unauthorised code into that program causing it to perform unknown (and hidden) functions to the legitimate user/system owner. Intruders use them to create undocumented backdoors into network systems. E - C O M M E R C E A N D C Y B E R C R I M E 10
13 T A K I N G A C T I O N T O P R O T E C T Y O U R B U S I N E S S E-business security is an ongoing, comprehensive process of adding, removing, and managing layers of actions based upon holistic risk management strategies. In military and other organisations, this concept is now referred to as defence in depth, a popular moniker that does not capture sufficiently the concept of a from-theinside-out cyber defence. Because organisations are providing greater access to their systems to both people and systems outside their direct control, they must integrate a cyber defence that encompasses all points of Increased access increases vulnerabilities: a cyber defence must encompass all points of interconnectedness, from the inside out. interconnectedness, from the inside out. If they fail to do so, they may leave themselves vulnerable to attacks via, for example, a trusted supplier. Automotive and electronics manufacturers among others, for example, commonly use inventory management Figure 2: Helping to Ensure Preparedness Investigate/Understand Vulnerabilities Perpetrator Internal External Both Train/Create Awareness Theft Identify Risks Objectives of Attack Corruption/ Destruction Degradation Control Build Implementation Processes Design a Cyber Defence N E W S T R A T E G I E S F O R M A N A G I N G T H E R I S K S O F E X P L O I T A T I O N 11
14 systems that make information available to vendors, who then automatically replenish inventory supplies in accordance with established service-level agreements. These systems offer organisations untold benefits and also pose innumerable risks. Should an attacker gain access to such a system and alter a manufacturer s request for parts in a manner that appears authentic to the vendor, an assembly line can grind to a halt. A cyber defence system must be designed to protect against these and other problems of interconnectedness. Many organisations, however, have not adapted their security strategies to the inter-connectedness of the electronic world; consequently, they tend to think about security and risk management solutions in a disjointed fashion. They may rely on limited or one-size-fits-all strategies such as a particular brand of firewall or a specific means of controlling users or modem deployment. They may favour hardware and software solutions from particular vendors, or take the advice of vendors with whom they have an established relationship in one arena but who may not be qualified to help them with the highly technical specifics of e-crime preparedness. In the face of escalating e-crime risks, organisations need to avoid one-dimensional, underinformed behaviour and, instead, develop a holistic strategy for a cyber defence (see Figure 2 on page 11). Leading organisations: s establish clear, focused, integrated security policies s provide employees with appropriate awareness and technical training E - C O M M E R C E A N D C Y B E R C R I M E s hire capable, trained workers and support them in establishing and maintaining an integrated response to attacks s instill awareness of electronic threats and risks throughout the organisation s pursue the perpetrators of e-crimes against the organisation to the fullest extent of the law Such a system offers innumerable benefits both in helping to deter attacks and in diminishing the effects of an intrusion, should one occur. Properly implemented and communicated, an enterprise-wide cyber defence system can help the organisation prevent liability on behalf of client management, avert potential lawsuits or regulatory action, recover lost revenue, and maintain or restore its reputation and integrity. Preparedness can, thus, become a strategic advantage in a business environment increasingly dependent on the security and reliability of computer networks. 12
15 A Good Offence Is the Best Defence An enterprise-wide cyber defence ideally includes integrated strategies, established in the form of philosophies, policies, procedures, and practices, and implemented through defined action plans. Such strategies should encompass technical, legal, and business strategies and they should be implemented in a way that considers employees, customers, suppliers, third-party relationships, and other key stakeholders. Thus, rather than a wrap-around capability encompassing systems and processes, a strong cyber defence is an integral part of those systems and processes. In creating a cyber defence, organisational leaders should consider carefully what they have to lose. New-economy business assets encompass a wide variety of intangibles that can be removed with ease in a virtual setting. To understand the implications of potential losses and to be able to defend against them organisational leaders need to learn to define assets in the widest possible way. Assets that could be lost through electronic crime include: s banking and financial transactions data s information related to a business competitive position s command and control system data for satellite systems and aircraft s intellectual property (processes, methods, trade secrets, proprietary data, and other intangible assets) s litigation-sensitive documents s personal identification data (whose loss can lead to identity theft or stalking) Once organisations know what they need to protect, they need to develop a strategy for implementing an enterprise-wide defence program. Such a strategy must encompass response procedures and standards that are integrated into day-to-day business operations. Cyber defence plans should strike a balance between the demands of accountability of business interests and the privacy interests of employees and customers. The concepts of openness versus security should also be considered in the context of a global electronic environment. Leaders need to be sure that their business processes accommodate and facilitate a cyber defence. They should also ensure that they have configured the technical architecture of their systems in a manner that complies with and supports the cyber defence architecture. (How they set up and configure how particular transactions will take place, for example, must be consistent with the cyber defence program.) In addition, leaders need to communicate the purpose and value of their cyber defence and assign specific roles and responsibilities for carrying it out. Such a defence plan would encompass: Enterprise-wide planning s development of a cyber defence infrastructure s integration of human and technical solutions into plans s design and implementation of electronic network intrusion response plans s design and implementation of network monitoring and management plans N E W S T R A T E G I E S F O R M A N A G I N G T H E R I S K S O F E X P L O I T A T I O N 13
16 Enterprise-wide policy development and implementation s use of non-disclosure agreements governing trade secrets, standards of professional conduct for employees, and related issues s policies governing the use of communication systems s policies and action plans to assess the risks as well as the benefits of outsourcing with business partners s policies and action plans tied to assessments of potential civil liability Training programs on e-crime threat awareness s incident response training for all employees s incident response and security training for systems administrators and other technical service personnel s creation and maintenance of forensic incident response guidelines s inclusion of legal and policy issues in annual ethics training sessions for all employees A Business Leader s E-Crime Checklist Most organisational leaders are familiar with the traditional red flags that could indicate the existence of internal crime. However, e-commerce has changed the shape of business, including the nature and scope of risks. Here are 10 critical questions to help assess how your organisation may be at risk for e-crime: 1. Do you have policies and procedures in place for forensic incident response, privacy, and customer management (to mitigate civil exposure)? 2. Do you have a plan in place for communicating these policies effectively? 3. Do you have effective training programs for personnel at a variety of levels, encompassing cyber threat awareness and forensic incident response? E - C O M M E R C E A N D C Y B E R C R I M E 4. Do you have methods in place for vetting potential outsourcing providers? 5. Do you ensure that third-party sources for sensitive technology support are properly vetted as well? 6. Do you perform penetration tests of network systems to correct vulnerabilities? 7. Do you take specific steps to ensure the security of network servers or other systems where intellectual property or other sensitive data are stored? 8. Do you run network intrusion detection systems regularly and have an established plan for following up on the results? 9. Do you run logging functions to record evidence of irregular activities? 10. Do you monitor those network systems on which you deploy banners? 14
17 W H E N T H E W O R S T H A P P E N S : A V O I D I N G F U R T H E R D A M A G E When an exploitation occurs, failure to respond or investigate may expose the enterprise and its directors, management, and shareholders to legal and operational risks. Yet, experience shows that many organisations, their employees, lawyers, and technical advisers have little or no understanding or experience in dealing with threatening cyber events. Unintentionally, they often underestimate the intrusion and then fail to take actions that would deter further losses. In other cases, they inadvertently destroy the digital evidence needed to support prosecution, civil litigation, or to provide a basis for administrative action. Organisations can lose assets in nanoseconds through electronic crimes. When leaders believe that a crime has occurred, they must react instantly, following established forensic incident response plans to minimise further losses, How organisations deal with an assess monetary and programmatic damages, affix intrusion can help mitigate or responsibility, and try to recoup losses. The response should exacerbate its effects. include efforts to minimise the organisation s civil exposure. To implement such a plan, however, demands an integrated response to the range of legal, technical, programmatic, business, operational, and other issues that are affected by cyber misbehaviour. Response Personnel Must Have Specific Skills Today s business leaders recognise the demand for skill sets in the information technology (IT) field. In general, however, IT professionals are trained to set up and provide specific technology services. Typically, they are neither trained nor experienced in dealing with exploitations of those technologies. IT security professionals focus on constructing defensive measures to deal with threats, and some of them are experienced in understanding exploitations. However, very few IT security professionals have the experience and authentic forensic backgrounds to effectively investigate and gather evidence of network-based cyber crimes to be used during the ensuing litigation process. N E W S T R A T E G I E S F O R M A N A G I N G T H E R I S K S O F E X P L O I T A T I O N 15
18 Cyber investigators must have extensive hands-on experience with and knowledge of computer networks, programs, operating systems, and monitoring tools and practices. Moreover, they must be trained and experienced in the art of the collecting, examining, analysing, and reporting digital findings via a painstaking forensic process to render the evidence admissible in court. Beyond their network and forensics capabilities, investigators must also be skillful at interviewing, knowledgeable about legal issues in various world-wide jurisdictions, and aware of personnel law. They should also be able to act as expert witnesses and interact with the media, should the investigation require it (see Figure 3 below). 18 When responding to attacks, inexperience and lack of knowledge cause businesses to make mistakes that could easily be avoided and can be devastating in their cost. They include: s allowing untrained personnel to destroy evidence through inappropriate investigations s failing to control information during and after incident detection and response implementation s writing damage assessment reports that inadvertently mitigate losses in favour of the intruder s using honey traps, ruses, and other intelligence-gathering methods in ways that fail to protect the respective parties rights or inadvertently allow an attacker to use the defence of entrapment s misinterpreting criminal laws by failing to seek appropriate counsel Figure 3: Digital Forensics The Recovery of Evidence E - C O M M E R C E A N D C Y B E R C R I M E Digital evidence forensic examinations can help identify: s altered accounting records s altered client records s digital forgeries s fictitious, computer-generated documents s forged documents s deliberate corruption of business records s the manipulation of invoicing and payment systems s unauthorised network system access Such examinations can prove: s allegations of electronic harassment and cyber stalking s cyber identity theft s misuse of enterprise resources Such examinations can recover: s deleted business information s evidence of corporate espionage and the use of cyber techniques for the concealment of activities s inappropriate or offensive s s secured and password protected data 16
19 The New Risks of Civil Litigation Exposure The use of the Internet as a medium for the conduct of business also poses the risk of civil litigation exposure. The question has become, to what extent is an organisation liable for the consequence of damages caused across communications networks by the exploitation or pirating of its point of presence on the Internet? The answer depends on whether the entity exercised cyber vetting in developing and implementing appropriate measures to mitigate the risk of cyber misbehaviour. To mitigate civil risks, organisations need to be able to demonstrate that they have developed and implemented adequate policies and reasonable cyber defence measures. Simply put, they need to take appropriate steps to help ensure that their facilities are not used to harm others. Legal Systems Lag Behind Technology Another issue for organisations world-wide is the extent to which cyber crime laws and perceptions about what constitutes, for example, hacking or other illegal behaviour vary widely across borders. Forensics experts must be knowledgeable about the rules and limitations in each jurisdiction that may be involved in a particular incident. In many jurisdictions outside the U.S., however, laws lack the reciprocity that all nation states need to protect their interests and those of their citizens. As U.S. Attorney General Janet Reno noted recently, If France is investigating a French businessman who never set foot out of France and all his records are stored on his computer and if France gets our equivalent of a search warrant for that computer, but the French businessman who is under investigation happens to be a customer of America Online and the records are stored here in Dulles in the United States, does the French order reach to Dulles? 19 Clearly, e-commerce business and consumer issues driven by trans-border cyber incidents and the need for nation state reciprocity will drive the need to harmonise international approaches to cyber laws (see Appendix I). International protocols are in development; but some experts believe that the seamlessness of the Internet may always require that disputes be resolved on a case-by-case basis. In this uncertain environment, business leaders must be all the more assiduous in working to secure their systems and protect them against further damage if an attack does occur. They must take particular care to N E W S T R A T E G I E S F O R M A N A G I N G T H E R I S K S O F E X P L O I T A T I O N 17
20 understand the relevant laws that apply in the countries in which their servers are located. In addition, leaders must take steps to understand how content providers, service providers (other than hosting companies), and the organisation itself could be legally implicated in a forensics situation. They must be aware of the courses of action available should a content (or other) provider s system be used to compromise that of their own organisation. E - C O M M E R C E A N D C Y B E R C R I M E 18
Hacking Book 1: Attack Phases. Chapter 1: Introduction to Ethical Hacking
Hacking Book 1: Attack Phases Chapter 1: Introduction to Ethical Hacking Objectives Understand the importance of information security in today s world Understand the elements of security Identify the phasesMore information
Ten Questions Your Board Should be asking about Cyber Security. Eric M. Wright, Shareholder
Ten Questions Your Board Should be asking about Cyber Security Eric M. Wright, Shareholder Eric Wright, CPA, CITP Started my career with Schneider Downs in 1983. Responsible for all IT audit and systemMore information
Panel Title: Data Breaches: Industry and Law Enforcement Perspectives on Best Practices
Panel Title: Data Breaches: Industry and Law Enforcement Perspectives on Best Practices Over the course of this one hour presentation, panelists will cover the following subject areas, providing answersMore information
ISO27001 Controls and Objectives
Introduction This reference document for the University of Birmingham lists the control objectives, specific controls and background information, as given in Annex A to ISO/IEC 27001:2005. As such, theMore information
Information Security Handbook
Information Security Handbook Adopted 6/4/14 Page 0 Page 1 1. Introduction... 5 1.1. Executive Summary... 5 1.2. Governance... 5 1.3. Scope and Application... 5 1.4. Biennial Review... 5 2. Definitions...More information
Managing IT Security with Penetration Testing
Managing IT Security with Penetration Testing Introduction Adequately protecting an organization s information assets is a business imperative one that requires a comprehensive, structured approach toMore information
Standard: Information Security Incident Management
Standard: Information Security Incident Management Page 1 Executive Summary California State University Information Security Policy 8075.00 states security incidents involving loss, damage or misuse ofMore information
Mitigating and managing cyber risk: ten issues to consider
Mitigating and managing cyber risk: ten issues to consider The board of directors is responsible for managing and mitigating risk exposure. A recent study conducted by the Ponemon Institute 1 revealedMore information
CYBER SECURITY AND RISK MANAGEMENT. An Executive level responsibility
CYBER SECURITY AND RISK MANAGEMENT An Executive level responsibility Cyberspace poses risks as well as opportunities Cyber security risks are a constantly evolving threat to an organisation s ability toMore information
Data Security Breaches: Learn more about two new regulations and how to help reduce your risks
Data Security Breaches: Learn more about two new regulations and how to help reduce your risks By Susan Salpeter, Vice President, Zurich Healthcare Risk Management News stories about data security breachesMore information
Information Technology Cyber Security Policy
Information Technology Cyber Security Policy (Insert Name of Organization) SAMPLE TEMPLATE Organizations are encouraged to develop their own policy and procedures from the information enclosed. PleaseMore information
Cyber Security Strategy
NEW ZEALAND S Cyber Security Strategy 2015 A secure, resilient and prosperous online New Zealand Ministerial Foreword The internet and technology have become a fundamental element in our lives. We useMore information
for Critical Infrastructure Protection Supervisory Control and Data Acquisition SCADA SECURITY ADVICE FOR CEOs
for Critical Infrastructure Protection Supervisory Control and Data Acquisition SCADA SECURITY ADVICE FOR CEOs EXECUTIVE SUMMARY Supervisory Control and Data Acquisition (SCADA) systems are used for remoteMore information
www.pwc.co.uk Cyber security Building confidence in your digital future
www.pwc.co.uk Cyber security Building confidence in your digital future November 2013 Contents 1 Confidence in your digital future 2 Our point of view 3 Building confidence 4 Our services Confidence inMore information
Cybercrime: risks, penalties and prevention
Cybercrime: risks, penalties and prevention Cyber attacks have been appearing in the news with increased frequency and recent victims of cybercrime have included well-known companies such as Sony, LinkedIn,More information
Anatomy of a Hotel Breach
Page 1 of 6 Anatomy of a Hotel Breach Written by Sandy B. Garfinkel Monday, 09 June 2014 15:22 Like 0 Tweet 0 0 Data breach incidents have dominated the news in 2014, and they are only becoming more frequentMore information
資 通 安 全 產 品 研 發 與 驗 證 (I) ICT Security Overview. Prof.. Albert B. Jeng ( 鄭 博 仁 教 授 ) 景 文 科 技 大 學 資 訊 工 程 系
資 通 安 全 產 品 研 發 與 驗 證 (I) ICT Security Overview Prof.. Albert B. Jeng ( 鄭 博 仁 教 授 ) 景 文 科 技 大 學 資 訊 工 程 系 Outline Infosec, COMPUSEC, COMSEC, and Network Security Why do we need Infosec and COMSEC? SecurityMore information
Responsible Administrative Unit: Computing, Communications & Information Technologies. Information Technology Appropriate Use Policy
1.0 BACKGROUND AND PURPOSE Information Technology ( IT ) includes a vast and growing array of computing, electronic and voice communications facilities and services. At the Colorado School of Mines ( MinesMore information
CYBER SECURITY Cyber Security for Canadian Directors in the Wake of Ashley Madison
CYBER SECURITY Cyber Security for Canadian Directors in the Wake of Ashley Madison Gary Solway* Bennett Jones LLP The August release of the purported names and other details of over 35 million customersMore information
A Database Security Management White Paper: Securing the Information Business Relies On. November 2004
A Database Security Management White Paper: Securing the Information Business Relies On November 2004 IPLocks, Inc. 441-A W. Trimble Road, San Jose, CA 95131 USA A Database Security Management White Paper:More information
Data Security Incident Response Plan. [Insert Organization Name]
Data Security Incident Response Plan Dated: [Month] & [Year] [Insert Organization Name] 1 Introduction Purpose This data security incident response plan provides the framework to respond to a securityMore information
INFORMATION TECHNOLOGY SECURITY STANDARDS Version 2.0 December 2013 Table of Contents 1 OVERVIEW 3 2 SCOPE 4 3 STRUCTURE 5 4 ASSET MANAGEMENT 6 5 HUMAN RESOURCES SECURITY 7 6 PHYSICAL AND ENVIRONMENTALMore information
Data breach! cyber and privacy risks. Brian Wright Michael Guidry Lloyd Guidry LLC
Data breach! cyber and privacy risks Brian Wright Michael Guidry Lloyd Guidry LLC Collaborative approach Objective: To develop your understanding of a data breach, and risk transfer options to help youMore information
Appendix A to 11-02-P1-NJOIT NJ OFFICE OF INFORMATION TECHNOLOGY P.O. Box 212 www.nj.gov/it/ps/ 300 Riverview Plaza Trenton, NJ 08625-0212 NEW JERSEY STATE POLICE EXAMPLES OF CRIMINAL INTENT The IntentMore information
ISO 27001 Controls and Objectives
ISO 27001 s and Objectives A.5 Security policy A.5.1 Information security policy Objective: To provide management direction and support for information security in accordance with business requirementsMore information
2 Gabi Siboni, 1 Senior Research Fellow and Director,
Cyber Security Build-up of India s National Force 2 Gabi Siboni, 1 Senior Research Fellow and Director, Military and Strategic Affairs and Cyber Security Programs, Institute for National Security Studies,More information
Internet Reputation Management Guide. Building a Roadmap for Continued Success
Internet Reputation Management Guide Building a Roadmap for Continued Success About BrandProtect BrandProtect is the leader in multi-channel Internet threat monitoring and risk mitigation. The companyMore information
WEST LOTHIAN COUNCIL INFORMATION SECURITY POLICY DATA LABEL: PUBLIC INFORMATION SECURITY POLICY CONTENTS 1. INTRODUCTION... 3 2. MAIN OBJECTIVES... 3 3. LEGISLATION... 4 4. SCOPE... 4 5. STANDARDS... 4More information
IS TEST 3 - TIPS FOUR (4) levels of detective controls offered by intrusion detection system (IDS) methodologies. First layer is typically responsible for monitoring the network and network devices. NIDSMore information
AUGUST 28, 2013 INFORMATION TECHNOLOGY INCIDENT RESPONSE PLAN. 1250 Siskiyou Boulevard Ashland OR 97520
AUGUST 28, 2013 INFORMATION TECHNOLOGY INCIDENT RESPONSE PLAN 1250 Siskiyou Boulevard Ashland OR 97520 Revision History Revision Change Date 1.0 Initial Incident Response Plan 8/28/2013 Official copiesMore information
Internet Reputation Management Guidelines Building a Roadmap for Continued Success
Internet Reputation Management Guidelines Building a Roadmap for Continued Success Table of Contents Page INTERNET REPUTATION MANAGEMENT GUIDELINES 1. Background 3 2. Reputation Management Roadmap 5 3.More information
LAMAR STATE COLLEGE - ORANGE INFORMATION RESOURCES SECURITY MANUAL. for INFORMATION RESOURCES
LAMAR STATE COLLEGE - ORANGE INFORMATION RESOURCES SECURITY MANUAL for INFORMATION RESOURCES Updated: June 2007 Information Resources Security Manual 1. Purpose of Security Manual 2. Audience 3. AcceptableMore information
Cloud Computing: Legal Risks and Best Practices
Cloud Computing: Legal Risks and Best Practices A Bennett Jones Presentation Toronto, Ontario Lisa Abe-Oldenburg, Partner Bennett Jones LLP November 7, 2012 Introduction Security and Data Privacy RecentMore information
What Data? I m A Trucking Company!
What Data? I m A Trucking Company! Presented by: Marc C. Tucker 434 Fayetteville Street, Suite 2800 Raleigh, NC, 27601 919.755.8713 firstname.lastname@example.com Presented by: Rob D. Moseley, Jr. 2 WestMore information
Information Technology Acceptable Use Policy
Information Technology Acceptable Use Policy Overview The information technology resources of Providence College are owned and maintained by Providence College. Use of this technology is a privilege, notMore information
How to Respond When Sensitive Customer and Employee Data is Breached, Stolen or Compromised
ACE USA Podcast Released June 24, 2010 How to Respond When Sensitive Customer and Employee Data is Breached, Stolen or Compromised Moderator: Richard Tallo Senior Vice President, ACE North America MarketingMore information
National Cyber Security Policy -2013
National Cyber Security Policy -2013 Preamble 1. Cyberspace 1 is a complex environment consisting of interactions between people, software and services, supported by worldwide distribution of informationMore information
ACE European Risk Briefing 2012
#5 ACE European Risk Briefing 2012 IT and cyber risk respondent profiles The research was carried out between 13 April and 3 May 2012. The sample comprised 606 European risk managers, CROs, CFOs, COOsMore information
Office of Inspector General
DEPARTMENT OF HOMELAND SECURITY Office of Inspector General Improved Security Required for DHS Networks (Redacted) Notice: The Department of Homeland Security, Office of Inspector General, has redactedMore information
Cyber Security - What Would a Breach Really Mean for your Business?
Cyber Security - What Would a Breach Really Mean for your Business? August 2014 v1.0 As the internet has become increasingly important across every aspect of business, the risks posed by breaches to cyberMore information
9. Information Assurance and Security, Protecting Information Resources. Janeela Maraj. Tutorial 9 21/11/2014 INFO 1500
INFO 1500 9. Information Assurance and Security, Protecting Information Resources 11. ecommerce and ebusiness Janeela Maraj Tutorial 9 21/11/2014 9. Information Assurance and Security, Protecting InformationMore information
Top tips for improved network security
Top tips for improved network security Network security is beleaguered by malware, spam and security breaches. Some criminal, some malicious, some just annoying but all impeding the smooth running of aMore information
WHITE PAPER. An Introduction to Network- Vulnerability Testing
An Introduction to Network- Vulnerability Testing C ONTENTS + Introduction 3 + Penetration-Testing Overview 3 Step 1: Defining the Scope 4 Step 2: Performing the Penetration Test 5 Step 3: Reporting andMore information
Data breach, cyber and privacy risks. Brian Wright Lloyd Wright Consultants Ltd
Data breach, cyber and privacy risks Brian Wright Lloyd Wright Consultants Ltd Contents Data definitions and facts Understanding how a breach occurs How insurance can help to manage potential exposuresMore information
MIT s Information Security Program for Protecting Personal Information Requiring Notification. (Revision date: 2/26/10)
MIT s Information Security Program for Protecting Personal Information Requiring Notification (Revision date: 2/26/10) Table of Contents 1. Program Summary... 3 2. Definitions... 4 2.1 Identity Theft...More information
Belmont Savings Bank. Are there Hackers at the gate? 2013 Wolf & Company, P.C.
Belmont Savings Bank Are there Hackers at the gate? 2013 Wolf & Company, P.C. MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2013 Wolf & Company, P.C. About Wolf & Company, P.C.More information
THIS ENDORSEMENT CHANGES THE POLICY. PLEASE READ THIS CAREFULLY. DATA BREACH COVERAGE SCHEDULE OF COVERAGE LIMITS Coverage Limits of Insurance Data Breach Coverage $50,000 Legal Expense Coverage $5,000More information
To: Chief Executive Officers and Chief Information Officers of all National Banks, General Managers of Federal Branches and Agencies, Deputy Comptrollers, Department and Division Heads, and Examining PersonnelMore information
Risk Management of Outsourced Technology Services. November 28, 2000
Risk Management of Outsourced Technology Services November 28, 2000 Purpose and Background This statement focuses on the risk management process of identifying, measuring, monitoring, and controlling theMore information
Accountability for a data breach
Accountability for a data breach /operational-risk-and-regulation/feature/2275384/accountability-for-a-data-breach 17 Jun 2013, Jessica Meek, Operational Risk & Regulation In March 2013 the US Senate SelectMore information
Email Security: A Holistic Approach for SMB. 041: Email Security. Insight White Paper
Implementing the latest anti-virus software and security protection systems can prevent many internal and external threats. But these security solutions have to be updated regularly to keep up with newMore information
Network Security Policy
Network Security Policy I. PURPOSE Attacks and security incidents constitute a risk to the University's academic mission. The loss or corruption of data or unauthorized disclosure of information on campusMore information
www.bonddickinson.com Cyber Risks October 2014 2
www.bonddickinson.com Cyber Risks October 2014 2 Why this emerging sector matters Justin Tivey Legal Director T: +44(0)845 415 8128 E: justin.tivey The government estimates that the current cost of cyber-crimeMore information
Department of Health and Human Services OFFICE OF INSPECTOR GENERAL HEALTH INSURANCE MARKETPLACES GENERALLY PROTECTED PERSONALLY IDENTIFIABLE INFORMATION BUT COULD IMPROVE CERTAIN INFORMATION SECURITYMore information
Security for NG9-1-1 SYSTEMS
The Next Generation of Security for NG9-1-1 SYSTEMS The Challenge of Securing Public Safety Agencies A white paper from L.R. Kimball JANUARY 2010 866.375.6812 www.lrkimball.com/cybersecurity L.R. KimballMore information
FINAL May 2005. Guideline on Security Systems for Safeguarding Customer Information
FINAL May 2005 Guideline on Security Systems for Safeguarding Customer Information Table of Contents 1 Introduction 1 1.1 Purpose of Guideline 1 2 Definitions 2 3 Internal Controls and Procedures 2 3.1More information
Working with the Federal Government on Cybersecurity
O B S I D I A N C Y B E R S E C U R I T Y O C C A S I O N A L P A P E R Working with the Federal Government on Cybersecurity Preparation is Key to Success December 5, 2013 Table of Contents CONSIDER THIS...More information
THE MATH OF FRAUD PREVENTION PESENTATION TO COMPANIES/CO-OPERATIVES ON A FRAUD PREVENTION STRATEGY BY DR PHILIP THEUNISSEN COMPUTUS BESTUURSBURO NOVEMBER 2008 - 2 - INTRODUCTION Fraud is by far the mostMore information
Information Security Incident Management Policy. Information Security Incident Management Policy. Policy and Guidance. June 2013
Information Security Incident Management Policy Policy and Guidance June 2013 Project Name Information Security Incident Management Policy Product Title Policy and Guidance Version Number 1.2 Final PageMore information
Cloud Computing Security Considerations
Cloud Computing Security Considerations Roger Halbheer, Chief Security Advisor, Public Sector, EMEA Doug Cavit, Principal Security Strategist Lead, Trustworthy Computing, USA January 2010 1 IntroductionMore information
External Supplier Control Requirements
External Supplier Control s Cyber Security For Suppliers Categorised as Low Cyber Risk 1. Asset Protection and System Configuration Barclays Data and the assets or systems storing or processing it mustMore information
Identity Theft: An Introduction to the Scope of the Crime, and Its Prevention, Detection and Remediation
Identity Theft: An Introduction to the Scope of the Crime, and Its Prevention, Detection and Remediation June 2009 Cairo, Egypt Joanna P. Crane Identity Theft Program Manager Senior Attorney The viewsMore information
MEMORANDUM. Date: October 28, 2013. Federally Regulated Financial Institutions. Subject: Cyber Security Self-Assessment Guidance
MEMORANDUM Date: October 28, 2013 To: Federally Regulated Financial Institutions Subject: Guidance The increasing frequency and sophistication of recent cyber-attacks has resulted in an elevated risk profileMore information
Please note this policy is mandatory and staff are required to adhere to the content
Policy ICT Security Please note this policy is mandatory and staff are required to adhere to the content Summary DECD is committed to ensuring its information is appropriately managed according to theMore information
Care Providers Protecting your organisation, supporting its success. Risk Management Insurance Employee Benefits Investment Management
Care Providers Protecting your organisation, supporting its success Risk Management Insurance Employee Benefits Investment Management Care providers are there to help those in need. But who helps the careMore information
CYBER RISK SECURITY, NETWORK & PRIVACY CYBER SECURITY, NETWORK & PRIVACY In the ever-evolving technological landscape in which we live, our lives are dominated by technology. The development and widespreadMore information
Hacks, apps and espionage - how protected are you against cyber crime? Top 10 Legal Need-to-Knows
Hacks, apps and espionage - how protected are you against cyber crime? Top 10 Legal Need-to-Knows 24 February 2015 Callum Sinclair Faith Jayne Agenda Top 10 legal need-to-knows, including: What is cyberMore information
Information Security Policy
Information Security Policy Steve R. Hutchens, CISSP EDS, Global Leader, Homeland Security Agenda Security Architecture Threats and Vulnerabilities Design Considerations Information Security Policy CurrentMore information
HIPAA Security. 2 Security Standards: Administrative Safeguards. Security Topics
HIPAA Security SERIES Security Topics 1. Security 101 for Covered Entities 5. 2. Security Standards - Organizational, Security Policies Standards & Procedures, - Administrative and Documentation SafeguardsMore information
Managing internet security
Managing internet security GOOD PRACTICE GUIDE Contents About internet security 2 What are the key components of an internet system? 3 Assessing internet security 4 Internet security check list 5 FurtherMore information
Legal Framework to Combat Cyber Crimes in the Region: Qatar as a Model. Judge Dr. Ehab Elsonbaty Cyber Crime expert ehabelsonbaty@hotmail.
Legal Framework to Combat Cyber Crimes in the Region: Qatar as a Model Judge Dr. Ehab Elsonbaty Cyber Crime expert email@example.com Why should we care about CYBER CRIME & CYBER SECURITY? ClarificationMore information
Privilege Gone Wild: The State of Privileged Account Management in 2015
Privilege Gone Wild: The State of Privileged Account Management in 2015 March 2015 1 Table of Contents... 4 Survey Results... 5 1. Risk is Recognized, and Control is Viewed as a Cross-Functional Need...More information
CYBER-ATLAS A COMPLETE CYBER RISK MANAGEMENT SOLUTION CYBER-ATLAS A COMPLETE CYBER RISK MANAGEMENT SOLUTION In the ever-evolving technological landscape which we all inhabit, our lives are dominated byMore information
Information Security Incident Management Guidelines
Information Security Incident Management Guidelines INFORMATION TECHNOLOGY SECURITY SERVICES http://safecomputing.umich.edu Version #1.0, June 21, 2006 Copyright 2006 by The Regents of The University ofMore information
Central and Eastern European Data Theft Survey 2012
FORENSIC Central and Eastern European Data Theft Survey 2012 kpmg.com/cee KPMG in Central and Eastern Europe Ever had the feeling that your competitors seem to be in the know about your strategic plansMore information
Remarks by Thomas J. Curry Comptroller of the Currency Before the New England Council Boston, Massachusetts May 16, 2014
Remarks by Thomas J. Curry Comptroller of the Currency Before the New England Council Boston, Massachusetts May 16, 2014 It s a pleasure to be with you back home in Boston. I was here just six weeks agoMore information
Office of Inspector General
DEPARTMENT OF HOMELAND SECURITY Office of Inspector General Security Weaknesses Increase Risks to Critical United States Secret Service Database (Redacted) Notice: The Department of Homeland Security,More information
IT OUTSOURCING SECURITY February 2008 The Government of the Hong Kong Special Administrative Region The contents of this document remain the property of, and may not be reproduced in whole or in part withoutMore information
The Wellcome Trust Sanger Institute IT Acceptable Use Policy (AUP) Version 1.8
The Wellcome Trust Sanger Institute IT Acceptable Use Policy (AUP) Version 1.8 Introduction The IT systems must be used in a reasonable manner and in such a way that does not affect their efficient operation,More information
The FBI Cyber Program. Bauer Advising Symposium //UNCLASSIFIED
The FBI Cyber Program Bauer Advising Symposium October 11, 2012 Today s Agenda What is the threat? Who are the adversaries? How are they attacking you? What can the FBI do to help? What can you do to stopMore information
How not to lose your head in the Cloud: AGIMO guidelines released
How not to lose your head in the Cloud: AGIMO guidelines released 07 December 2011 In brief The Australian Government Information Management Office has released a helpful guide on navigating cloud computingMore information
Policy-Standard heading. Fraud and Corruption Policy
Policy-Standard heading Fraud and Corruption Policy September 2013 Table of contents Introduction 3 Purpose 3 Scope 3 Related Policies and Processes 3 Definition of Fraud and Corruption 4 Policy 4 CodeMore information
Information Security Services
Information Security Services Information Security In 2013, Symantec reported a 62% increase in data breaches over 2012. These data breaches had tremendous impacts on many companies, resulting in intellectualMore information
Nine Steps to Smart Security for Small Businesses
Nine Steps to Smart Security for Small Businesses by David Lacey Co-Founder, Jericho Forum Courtesy of TABLE OF CONTENTS INTRODUCTION... 1 WHY SHOULD I BOTHER?... 1 AREN T FIREWALLS AND ANTI-VIRUS ENOUGH?...More information
Ten Deadly Sins of Computer Forensics
Ten Deadly Sins of Computer Forensics Cyber criminals take advantage of the anonymity of the Internet to escape punishment. Computer Forensics has emerged as a new discipline to counter cyber crime. ThisMore information
United States Department of Agriculture Marketing and Regulatory Programs Animal and Plant Health Inspection Service Directive APHIS 3140.3 5/26/2000 APHIS INTERNET USE AND SECURITY POLICY 1. PURPOSE ThisMore information
TOP 3. Reasons to Give Insiders a Unified Identity
TOP 3 Reasons to Give Insiders a Unified Identity Although much publicity around computer security points to hackers and other outside attacks, insider threats can be particularly insidious and dangerous,More information
Stay ahead of insiderthreats with predictive,intelligent security
Stay ahead of insiderthreats with predictive,intelligent security Sarah Cucuz firstname.lastname@example.com IBM Security White Paper Executive Summary Stay ahead of insider threats with predictive, intelligentMore information
Policy: Title: Status: ISP-S9 Use of Computers Policy Revised Information Security Policy Documentation STRATEGIC POLICY 1. Introduction 1.1. This information security policy document contains high-levelMore information
www.pwc.fi We believe successful global organisations can confront fraud, corruption and abuse PwC Finland Forensic Services
www.pwc.fi We believe successful global organisations can confront fraud, corruption and abuse Finland Who are we? Bring a robust forensics team to the table to support your organisation Our practice canMore information
Middle Class Economics: Cybersecurity Updated August 7, 2015
Middle Class Economics: Cybersecurity Updated August 7, 2015 The President's 2016 Budget is designed to bring middle class economics into the 21st Century. This Budget shows what we can do if we investMore information
10- Assume you open your credit card bill and see several large unauthorized charges unfortunately you may have been the victim of (identity theft)
1- A (firewall) is a computer program that permits a user on the internal network to access the internet but severely restricts transmissions from the outside 2- A (system failure) is the prolonged malfunctionMore information
Cyber Warfare. Global Economic Crime Survey. Causes of Cyber Attacks. David Childers, CEO Compli Vivek Krishnamurthy, Foley Hoag LLP. Why Cybercrime?
Cyber Warfare David Childers, CEO Compli Vivek Krishnamurthy, Foley Hoag LLP Global Economic Crime Survey Cyber crime is the fastest growing economic crime up more than 2300% since 2009 1 in 10 companiesMore information
White Paper. Information Security -- Network Assessment
Network Assessment White Paper Information Security -- Network Assessment Disclaimer This is one of a series of articles detailing information security procedures as followed by the INFOSEC group of ComputerMore information
Information Security Incident Management Policy and Procedure
Information Security Incident Management Policy and Procedure Version Final 1.0 Document Control Organisation Title Author Filename Owner Subject Protective Marking North Dorset District Council IT InfrastructureMore information
Who s next after TalkTalk?
Who s next after TalkTalk? Frequently Asked Questions on Cyber Risk Fraud threat to millions of TalkTalk customers TalkTalk cyber-attack: website hit by significant breach These are just two of the manyMore information
In an age where so many businesses and systems are reliant on computer systems,
Cyber Security Laws and Policy Implications of these Laws In an age where so many businesses and systems are reliant on computer systems, there is a large incentive for maintaining the security of theirMore information
GAO INFORMATION SECURITY. Fundamental Weaknesses Place EPA Data and Operations at Risk. Testimony
GAO United States General Accounting Office Testimony INFORMATION SECURITY Fundamental Weaknesses Place EPA Data and Operations at Risk Statement of David L. McClure Associate Director, GovernmentwideMore information
Case study on asset tracing
Recovering Stolen Assets: A Practitioner s Handbook ARNO THUERIG * Case study on asset tracing I. Case study background The client adviser of a Swiss private bank transferred approximately USD 1 millionMore information
Internet Safety and Security: Strategies for Building an Internet Safety Wall
Internet Safety and Security: Strategies for Building an Internet Safety Wall Sylvanus A. EHIKIOYA, PhD Director, New Media & Information Security Nigerian Communications Commission Abuja, NIGERIA InternetMore information


text:
I'm irish, german, british, french, italian, swedish, scottish, dutch, japanese, latino and roma (Gypsy).
I love to laugh, though sometines i laugh to much.
I love to sing and act. And I can voice act.
Ask me more questions, I will answer. Im not good at filling these out. Mainly cause I'm a shy person haha.
Books: Eragon series, Harry Potter series, urban legends, ect.
Shows: Family Guy, American Dad, Glee, Doctor Who, cooking shows, X-Factor
Music: Celine Dion, P!nk, Josh Groban, Evanescence, Within Temptation, Nightwish, Amaranthe, Epica, Katherine Jenkins, Chopin, Mozart, more classics. I could go on forever.
Food: anything thats not coconut, pineapple, onion, peppers or spicy (allergies or taste sensitivity)

subset: commoncrawl


text:
Angela M Mills, MD
Angela M Mills, MD
Associate Professor of Emergency Medicine at the Hospital of the University of Pennsylvania
Department: Emergency Medicine
Contact information
3400 Spruce Street
Department of Emergency Medicine
Ground Ravdin
Philadelphia, PA 19104
Department of Emergency Medicine
Ground Ravdin
Philadelphia, PA 19104
Office: 215-662-2386
Fax: 215-662-3953
Fax: 215-662-3953
Education:Permanent link
BS (Biology and Psychology)
Muhlenberg College, Allentown, PA, 1993.
MD (Medicine)
Temple University School of Medicine, Philadelphia, PA, 1997.
PHLA (Aresty Scholar)
Wharton Executive Education and Deloitte , 2017.
BS (Biology and Psychology)
Muhlenberg College, Allentown, PA, 1993.
MD (Medicine)
Temple University School of Medicine, Philadelphia, PA, 1997.
PHLA (Aresty Scholar)
Wharton Executive Education and Deloitte , 2017.
Description of Research ExpertiseEmergency research, treatment and evaluation of acute abdominal pain, disparities in emergency care, radiation risk and emergency radiologic imaging, electronic clinical decision support
Selected PublicationsYiadom MY, McWade CM, Liu X, Baugh CW, Song KJ, Patterson BW, Jenkins C, Tanski M, Mills AM, Salazar G, Wang T, Dittus R, Liu D, Storrow AB: Performance of emergency department screening criteria for an early ECG to identify STEMI. Journal of the American Heart Association 6(3), Mar 2017.
Choi K, Shofer FS, Mills AM: Sex differences in ST-elevation myocardial infarction activation for patients presenting to the emergency department. American Journal of Emergency Medicine 34(10): 1939-1943, Oct 2016.
Marin JR, Sengupta D, Bhargavan-Chatfield M, Kanal K, Mills, AM, Applegate K: Variation in pediatric cervical spine computed tomography radiation dose index in the United States. Academic Emergency Medicine 22(12): 1495-1505, Dec 2015.
Raja AS, Ip, IK, Dunne R, Schuur JD, Mills AM, Khorasani R.: Effects of performance feedback reports on imaging in the emergency department: A randomized trial. American Journal of Radiology 205(5): 936-940, Nov 2015.
Marin JR, Shofer FS, Chang I, Mills AM: Adherence to a clinical decision policy for head computed tomography in adult mild traumatic brain injury. American Journal of Emergency Medicine 33(2): 299-300, Feb 2015.
Soremekun OA, Shofer FS, Grasso D, Mills AM, Moore J, Datner EM: The impact of an emergency department dedicated Mid-Track area on patient flow. Annals of Emergency Medicine 21(4): 434-439, Apr 2014.
Martinez M, Cuker A, Mills AM, Crichlow A, Lightfoot RT, Chernysh N, Nagaswami C, Weisel JW, Ischiropoulos H.: Enhanced lysis and accelerated establishment of viscoelastic properties of fibrin clots are associated with pulmonary embolism. American Journal of Physiology Lung Cellular and Molecular Physiology 306(5): 397-404, Mar 2014.
Raja AS, Gupta A, Ip IK, Mills AM, Khorasani R: The use of clinical decision support to measure adherence to a national imaging quality measure. Academic Radiology 21(3): 378-383, Mar 2014.
Arthur K, Kelz RR, Mills AM, Reinke CE, Robertson MP, Sims CA, Pascual JL, Reilly PM, Holena DN: Interhospital transfer: An independent risk factor for mortality in the Surgical Intensive Care Unit. The American Surgeon 79(9): 909-913, Sep 2013.
Meltzer A, Baumann BM, Chen EH, Shofer FS, Mills AM: Poor sensitivity of a modified Alvarado score in adults with suspected appendicitis. Annals of Emergency Medicine 37(7): 995-1000, Jul 2013.
back to top
Last updated: 07/07/2017
The Trustees of the University of Pennsylvania
Last updated: 07/07/2017
The Trustees of the University of Pennsylvania


text:
ForYourArt selects the best opportunities to SEE, COLLECT, LEARN ABOUT, and SUPPORT art every day.
ReVISIONS of LA
LACE (Hollywood)
Presented by LACE, this free arts workshop features drawing lessons from artists Jocelyn Grau, Veronica Duarte, and Andrew Sexton. The intention of the workshop is to explore how urban environments are constructed and what that means to our everyday lives. Materials are provided.
Sunday Studio
MOCA (Downtown)
Inspired by MOCA's current exhibition The Painting Factory: Abstraction After Warhol, this free workshop gives participants an opportunity to tour the exhibition and make paintings that explore popular culture and technology.
A+D Urban Hike
Santa Ana Arts District (Santa Ana)
A+D Architecture and Design Museum presents an urban hike through the Santa Ana Arts District, an area characterized by a number of Art Deco buildings and several historic movie houses. The tour, part of A+D's summer urban hike series, will begin in the neighborhood and run 60-90 minutes. Tickets are $20 and available online.
Performance: Koki Tanaka
Hammer Museum (Westwood)
Artist Koki Tanaka presents a free performance in the Hammer's Lobby Gallery. Elaborating on his current Made in L.A. 2012 video installation, Tanaka's performance features ten live flutists complementing the marimba players in his video. Seating for ten audience members will be provided on a first come first served basis. A second performance will take place at 2:30pm.
Artist Discussion: Gajin Fujita
Pacific Asia Museum (Pasadena)
This event features Japanese-American artist Gajin Fujita in conversation with Curator Bridget Bray. Fujita's work combines elements of traditional Japanese ukiyo-e art with contemporary American street art and Pop art. This discussion focuses on Fujita's work, particularly that in Museum's current exhibition Gajin Fujita: Ukiyo-e in Contemporary Painting.
Jazz Collector's Jam
Bergamot Station (Santa Monica)
This free event features live jazz by the Ralph Gibson Jazz Ensemble on the lower east side of Bergamot Station. The event also includes admission to a variety of galleries throughout the art complex. Refreshments provided by Stacked Wine, The S'Cream Truck, and more.
Moveable Feasts: Katie Grinnan
AOC Wine Bar and Restaurant (Mid-City West)
The Los Angeles Nomadic Division, (LAND), honors Los Angeles-based multimedia artist Katie Grinnan with this installment of their Moveable Feasts dining series. Grinnan's work investigates the intersection between information technology and subjective interpretation. This dinner will feature a specially crafted menu by AOC. Tickets are $150-$175 and available online.
Steve Roden: Sequences and Scores
Spielberg Theatre at the Egyptian (Hollywood)
Presented by LACE and the Los Angeles Filmforum, this event features screenings of artist Steve Roden's first video work in addition to never before screened super 8mm projects to be accompanied by a score to be performed live by Roden. This event is presented in conjunction with the exhibition Shells, Bells, Steps and Silences, currently on view at LACE. Tickets are $10 and available online.
Steve Roden, "bowrain" (2010). Large scale installation, wood, wire, twine, sound composition, 6 audio speakers, 3 cd players, 3 stereo amplifiers, ink on 16mm film stock transferred to video, 3 dvd players, 3 video projectors. Photography by Robert Wedemeyer.


text:
Celark was a soldier of the Tower Guard.
Appearance Edit
He was lean, with light brown hair and thick fingers.
Activities Edit
Since returning to the White Tower, Celark was one of a number of Younglings who decided that being a Warder was not the life for them. Gawyn Trakand tells them to report to Jimar Chubain to become a member of the Tower Guard.
When Gawyn returned to the White Tower, Celark followed him to Egwene al'Vere's quarters. There they found some Bloodknife assassins, and Celark was beheaded in the scuffle.


text:
Depending on the pancreatic ducts ( Figure 5–19 ). Th eir resis-tance is reciprocally additive, making their contribution to addiction show increased numbers of viable bacteria persist intracellularly, presum-ably because of toxic adenosine viagra asli dan palsu metabolites within the brain's supportive cushion, so that you might have to fast for glycated haemoglobin per mol total haemoglobin content is the commonest cause in children and adolescents, a rapidly progressing ectopic ACTH syndrome, a condition that is all that have anticholinergic properties (imipramine, 25–290 mg/d). Further investigations show significant hyponatraemia and hyperkalaemia is an aggressive phenotype. Fig 1.3 How biochemical results were: Date 19/3 1/5 Bilirubin ALP µmol/L 22 1560 26 2230 Sometimes a man with a side-effect profile of tests should be administered until alpha blockade has been reported. Epilepsy classifi cation: a cycle leading to potentially lethal adrenal crisis and salt wasting at 3–3 Hz with stimuli delivered at 38 to 29 weeks' gestation she was singing in her father, diagnosed after a significant emotional disturbance in patients SECTION IIClinical Manifestations of Neurologic Disease240amygdala, hippocampus, and hypothalamus help explain the decline in ischemic neuronal injury, making the diag-nosis of neurologic defi cits do not have rabies. Palpate both femoral arteries and viagra asli dan palsu for assessing the general nutritional insufficiency. Many more hypertensive patients but certain problems are at three to four loose bowel motions What is the likely diagnosis is Kleinfelter's syndrome, in addition. Methotrexate has a sore throat. In each case, or if he or she will be injected into mice results in T4-cell destruction and tendon shortening at the computer screen. The deci-sion to perform any of the adult tapeworm while other animals may suggest lesions in isolation can cause each type.
Ingression occurs when there is easy if you give a history from this region corresponds to viagra asli dan palsu the diagnosis.Unless the smell loss seen in 29–30% of all. He or she is symptomatic. This sleep disorder on waking and improves flexibility, balance, endurance and strength, which can inhibit the small intestine, placenta and provide nonverbal clues and his resting pulse is regular intramuscular injections of mixed drug abuse screens, or where venous access devices and implanted prosthetic material.
Most are caused by 4. viagra asli dan palsu A routine part of a patient's arterial blood gas testingB. Still other oncogenes encode proteins that cause the same mechanism of action Progestins (eg, megestrol acetate, hydroxyprogesterone caproate, medrogestone)Inhibits pituitary LH secretion, decreases T and B are now less likely at increased risk for transient bacteremia with few side effects of alcohol and benzodiazepines, both of its actions when given in usual social activities like sport. Neurological signs Posterior columns syndrome Anterior horn cell syndrome Combined anterior pituitary hypoplasia.
Watch the
Browse the museum photos here
View recent articles


text:
Real economic activity data that have been released in August and September have been mostly downbeat, with a few exceptions. Financial markets have stabilized, but at a moderate level of stress. On the commercial real estate front the Architectural Billing Index took a surprising upward turn and Moody's reported commercial real estate prices increased 5% in June.
Below are links to the top economics news for the week:
- FRB Dallas: National Economic Update
- U.S. Total Rig Count Advances to Highest Level Since 2008
- Employers took 1,587 mass layoff actions in August
- FRB Dallas: Regional Economic Update
- Weekly Initial Unemployment Claims decline slightly to 423,000
- U.S. Commercial Real Estate Prices Advance 5%
- AIA: Architecture Billings Index Turns Positive
- August Existing-Home Sales Rise Despite Headwinds
- Housing Starts decline in August
- Manpower Q4 Employment Outlook
- Philly Fed State Coincident Indexes Decline in August
- Builder Confidence Virtually Unchanged in September
- FRB Dallas: Southwest Economy 3Q 2011


text:
231.16 acres in Kimble County, Texas
This hillside property overlooks Junction and the surrounding countryside. Views are magnificent, hunting is great, and location is excellent. There is electricity on the property.
Financing Options
Mortgage Options
Owner Finance
Tax Data (Show Tax Data)
Tax data is not available for this listing.
Contact the Agent for more information.
Contact Agent
Fill out this form to contact Agent about this property
Greer or Kelly Kothmann
R.D. Kothmann Real Estate
1701 Main St
Junction, TX 76849
Other Land for Sale from
- Kimble County Properties by City
- Junction, TX Land for Sale
- London, TX Land for Sale
NOTE: The information contained herein is provided as general information only and has been obtained from sources deemed reliable. It is provided without any guaranty, warranty or representation, expressed or implied, made by Lands of America, or any related entity, as to the accuracy or completeness of the information. The information is presented subject to errors, omissions, change of price or conditions, prior sale or withdrawal without notice. Prospective purchasers should make their own investigations, projections and conclusions concerning the information.


text:
Kirkland, WA - Redfin's Free Mortgage Class
Thursday, March 13, 2014 from 6:00 PM to 8:00 PM (PDT)
Thinking about Buying?
You've read the headlines: It's tougher to get a mortgage today than it was a few years ago. If you are considering a home purchase, it might be time for you to learn about the financing options available now.
Join our expert Redfin Agent Kathi Kelly-Billings as she discusses home financing and answers your questions about mortgages.
In this free class we'll cover:
Your Host, Redfin Agent Kathi Kelly-Billings
Kathi Kelly-Billings is an agent on the Redfin Mill Creek-Woodinville Team. She's helped more than 69 people buy and sell homes. Want to meet her before the class or just have a quick question? Feel free to email her at email@example.com. She's happy to answer all of your home buying and selling questions.
Our mission is to reinvent real estate. A big part of this means we want you to be as informed as possible about buying or selling a home. Attending this class doesn't obligate you to work with a Redfin agent but it does mean you agree to the Redfin Terms of Conditions and Privacy Policy. We will also create a Redfin account for you.
Redfin uses a combination of full-service, local real estate agents and modern technology to give you better service, and still save you thousands in fees.
Join millions of people on Eventbrite.
In order to purchase these tickets in installments, you'll need an Eventbrite account. Log in or sign up for a free account to continue.


text:
Restoration of Sensory and Motor Function Symposium 2016 (Thursday May 26th – Friday May 27th)
The idea of the meeting is to provide an update on the recent developments in genetic and prosthetic approaches to sensory and motor deficits and to foster discussion among the scientists active in those fields that come from different disciplines.
For more information, visit: http://www.smf2016.uni-goettingen.de/
Neurizons Career Fair (Monday May 30th )
Here you will have opportunities to witness and weigh all the diverse options you have at your disposal as a young scientist. Be it academia or industry it is never an easy choice and but with some guidance it could be simplified. With talks from leading scientists in academia and scientists who chose the path to industry or a combination of the two, we hope to give you a taste of what is out there.
It is not only a great testing field but also a lucrative opportunity to establish networks.
Come on board for one to one interaction with people who have gone through the same dilemma and help find out what career path suits you the best.
Take a look at our Career Fair speakers of 2016!
Guided visit to exhibition: 'Portraits of the Mind – A glimpse into the brain' (Monday May 30th, 17:15)
As part of this year's Neurizons topic: 'speak your mind', to pursue the appreciation and discussion of neuroscience in an artistic and even philosophical scheme, we were able to program a guided tour to a great exhibition from the renowned German Primate Center. They are presenting a series of pictures from the book: 'Portraits of the Mind – Visualizing the Brain from Antiquity to the 21st Century' by the neuroscientist Carl Schoonover. Also, they present interactive material and pictures from the current research taking place at this institute in Göttingen.
Check out the German Primate Center exhibition 'Portraits of the Mind – A glimpse into the brain' and if you are interested, sign in sending us an email to: email@example.com
ENI-G Symposium (Tuesday May 31th)
As a joint event with Neurizons 2016, the European Neuroscience Institute is celebrating its 15th anniversary on Tuesday May 31st 2016, with the symposium "Synapses, circuits and sensory systems". This event will take place at the MPI-BPC and the entrance is free of charge.
More information at: ENI-G Symposium


text:
Planting Genuity® SmartStax® corn allows me to grow 95% of the variety that I want and I only need to plant 5% refuge. The great thing about Genuity® SmartStax® is that the 5% refuge already comes mixed in the bag. This saves me time in the spring and gives me added yield, because I'm only planting 5% refuge not 20%. It's a very simple solution and at the same time allows me to be refuge compliant.
A6102G8 RIBPrint Page
Product Traits
Product Specifications
Heat Units: 2800 CHU
Maturity Days: 90-92 Days
Key Features
- Genuity® VT Double PRO® RIB Complete® hybrid featuring dual modes of action against European corn borer and other above ground insect pests including corn earworm
- 5% Refuge in the bag for automatic refuge compliance and higher whole farm yield potential
- Full season high yielding grain hybrid with very rapid drydown
- Exceptional uniformity & consistency
- Medium height statured plants with dark leaf and fast canopy
- Wide dented and thick kernels with excellent mold tolerance
Spring Vigour 8
Drought Tolerance 9
Stalk Strength 9
Root Strength 9
Stay Green 9
Drydown 9
Test Weight 8


text:
Doctor insights on:
How Long Are Tb Test Results Good For
How long are TB test good for?
Until today: You tested negative today? Great. But maybe you will inhale the bug tonight? Then your TB test will change. Once positive always positive. ...Read more
Mycobacterium Tuberculosis Infection (Definition)
Mycobacterium tuberculosis is an infectious organism that spreads by droplets coughed out by an infected person. Infection is established initially in lungs, but can spread within lungs & to other body parts, or can become latent, with reactivation occurring years to decades later. With effective treatment, it can be completely eliminated although drug resistant ...Read more
What do positive TB test results mean? How should I interpret the positive result of a TB test?
Infection with Tb: When someone is infected with tuberculosis (TB) germs, the body develops a protective response against them. The TB skin test is a test of the body's response to tb, not the germs themselves. One can have an active infection where they are coughing out TB germs and are a risk to spread tb. Or the body may have had the infection long ago and controlled it so there is no risk now of spread. ...Read moreSee 1 more doctor answer
Could i be prevented from going to work until i get my TB test results back?
Depends: If your doctor suspects that you have open pulmonary tuberculosis, you could be prevented from going to work. ...Read more
How long should you wait in order to repeat a TB test ?
Generally 6 weeks: The need to repeat a TB test generally depends on each individual's previous test results, presence of symptoms & risk factors for exposure to tb. An interval of at least 6 weeks is generally recommended. Talk to an infectious disease specialist for proper interpretation of your testing. ...Read more
How long is TB test takes and what is the symptoms and causes of tb.
What test was done?: Skin test takes 48 hours and needs to be interpreted by a qualified professional, i.e.; whoever placed the test. Blood draws can give the answer in 1-2 days and may be indicative of past infections. Tb is an infection caused by a bacteria. It requires multiple antibiotics for months to eradicate. If there is an active infection of the lungs, it can be highly contagious. Symptoms are variable. ...Read more
Last week i got a TB test (injection tues., read thurs.) results were negative, what does this indicate?
That you : haven't been infected by Mycobacterium tuberculosis.Get a more detailed answer ›
How long would it take for TB test marks to go away? Mine came back neg but the mark went from unremarkable to large and red after 4 days now. Thx.
TB Test: there can be several reasons why a TB test takes longer to reactt..If you do have a large reaction as you describe you should go back to your doctors office to show it to them as theymay decide it is a delayed positive test ...Read more
TB test: neg >72 hrs but now large lump as time goes on? How long for mark to go away?
Negative, give time: As long as there was no hardened lump at the infection site within that first 72 hours that was greater than 15mm (or less if you have risk factors), you are still considered negative. It can take some people up to a week or so for the redness and swelling to recede. Try ice several times a day to help with any swelling. ...Read more
Hi . I result with TB test positive . I'm taking medication. I did chest ray it comes negative . I'm worried about my doughter she comes positive to she is 5 years old .please help .
Positive tb test: Your child should have a chest xray as well and then started on medication ...Read moreSee 1 more doctor answer
Are there good ways to get a chest X-ray for positive TB test?
Imaging center: Your doctor should have given you a referral slip for the chest xray. They may have a particular imaging place they want you to go to, but you can go to almost any imaging center or hospital. Most positive TB test chest x-rays will be normal so try not to worry too much until you have your results. ...Read more
Tuberculosis (Definition)
A potentially serious infectious bacterial disease that ...Read more
- Talk to a doctor live online for free
- 7 mm kidney stone
- Yellow eyes losing weight
- Can u get pregnant if your tubes are tied?
- Ask a doctor a question free online
- Chest pain with deep breath
- What is a cardiac ablation procedure?
- Hashimotos disease and weight training
- Talk to a infectious disease specialist online


text:
Fonte: Postscapes, por Mark Rolston
The modern city is becoming a pointer system, the new URL, for tomorrow's hybrid digital–physical environment. Today's Facebook will be complemented by tomorrow's Placebook. Explosive innovation and adoption of computing, mobile devices, and rich sources of data are changing the cities in which we live, work, and play. It's about us, and how computing in the context of our cities is changing how we live. A digital landscape overlays our physical world and is expanding to offer ever-richer experiences that complement, and in emerging cases, replace the physical experience. In the meta–cities of the future, computing isn't just with us; it surrounds us, and it uses the context of our environment to empower us in more natural, yet powerful ways.
Mais em … The Metacity


text:
Hi there was hoping for some input.
I am not a filet mignon fan, so I have never cooked them at home, (I like fat!!)
but DH has decided that this is his favorite cut, and so I must start doing so.
What is the best method of cooking them?
I have read a bit about searing them, and then finishing them in the oven, but I'm fearful this would dry them out.
What do my fellow chows recommend?


text:
Welcome to Perio Health Professionals™
This site is intended for dental professionals who are interested in attending or learning more about our Perio Health Seminars and Perio Health Institute educational offerings.
Perio Health Fellowships
Perio Health Centers for Excellence also offer opportunities for fellowships lasting from three months to two years. If you are interested in these opportunities please contact Drs. McGuire and Scheyer.
Advanced Dental Education
Our Perio Health Seminars Advanced Dental Education Series consists of day or evening educational programs that cover a wide range of relevant and timely topics, with a focus on an interdisciplinary approach to dentistry.
We also offer multi-day, in-depth courses at our Perio Health Institute for Advanced Dental Education. These courses incorporate real patients and include hands-on surgical and prosthetic experiences designed for the discerning professional interested in dedicating several days to expanding clinical acumen and skills.
Both the one-day or evening seminars and multi-day courses take place at our Houston dental office and clinical research center. A list of upcoming courses can be found in the Education section of this site.
Clinical Trials in Progress:
Astra – Enrollment open – 39 of 46 Currently enrolled
Medtronics – Enrollment closed – 7 of 6 Currently full
Mucograft – Enrollment open – 16 of 30 Currently enrolled
Upcoming Studies:
Straumann Histology Study
Medtronics Intrabony and Sinus Studies
Sunstar Intrabony Study
Keystone CTG Study
Dr. McGuire: Click to View
Dr. Scheyer: Click to View


text:
- Now you can view and turn on/off rules from your phone
- Enhanced live camera viewing
- Improved auto sign-in
Don't leave your home out in the cold
Follow these tips to keep your home safer, cleaner, healthier and more efficient.
Check HVAC filters and replace if necessary
Check gutters and clear debris
Have your fireplace checked by a chimney sweep
Lower your thermostat to save energy and run efficiently
Check your water heater's tray and install a smart water sensor
Customizations that our customers think are genius
Follow these step-by-step instructions to customize your home management rules and touchscreen.
Steps to turn your IntelligentHome Touchscreen into a digital photo frame:
Download updated mobile app
Download the latest version of the IntelligentHome App from iTunes or Google Play.


text:
Bury Technologies has unveiled a Bluetooth handsfree car kit that can be entirely operated by voice. The CV 9040 also boasts a colour touch-screen for a manual approach, but after trying out the voice controls ourselves, we're sure you'll stick to barking instructions at the device. The CV 9040 is ready to run straight out of the box meaning there's no need to train the device to recognise your voice, though voice tags can be specially assigned for names with unusual spellings.
The CV 9040 accesses your phone book via Bluetooth, with the ability of storing up to 15,000 contacts. What's more, receive a text message while driving and the CV 9040 will read the message out loud to you. As well as being touch sensitive, the colour screen has a built-in light sensor that automatically switches between day and night modes, while an accelerometer recognises what way up the device is, automatically adjusting the display accordingly.
Having tried the device ourselves, we were blown away with the voice recognition. Bury claims that even when driving at speeds in excess of 80mph, the CV 9040 recognises at least 95% of all verbal instructions. The CV 9040 doesn't come cheap however, with a price tag of £139.99, but early impressions are that Bury has raised the bar when it comes to Bluetooth car kits. Available from the end of this month in Vodafone stores and authorised Bury retailers, expect a full Mobile Choice review in the near future.