Just your basic roundup of editorial that you don't have to be a CSI member to take advantage of:

Is Data Loss Plummeting?

Our guess is that the primary finding of the latest Verizon business 2011 Data Breach Investigations Report –namely that even with doubling the number of examined incident cases, the total number of compromised data records dropped by an order of magnitude—will be so unpalatable to some that the report will fall off the radar in a hurry.  [more]

Click-to-Run as a Security Paradigm

While preparing for Filter 3 (which goes live on April 7), it fell to me to create a segment on good security ideas we'd run across in the realm of virtualization. I put four together in all, but the first seemed like the one that was the one least talked about. So I thought I'd share it here in advance.

Indeed, the first idea almost doesn’t look like virtualization – it’s Microsoft’s “Click to Run” technology and it’s what Microsoft is using to sell Microsoft Office to home users, although they’ve built a framework that enables them to use it in any arbitrary situation including enterprise application deployment management. More...

It Feels the Heat of Your Seat

I see no real practical application but am nevertheless charmed and amused by a creation of Didier Stevens that sees whether your butt is in the chair or not. Actually, management might be able to make good use of such a thing for non-security purposes.

CSI Members in Japan Report They're OK

No sooner had word arrived of the massive earthquake in Japan than our thoughts turned to several Japanese CSI members we've had an opportunity to meet with over the years. In particular, we thought of Dr. Uchida Katsuya, who has attended something on the order of twenty consecutive CSI events. He replied remarkably quickly, given the situation, to an email we sent to check up on him. He reports that he and several other CSI members he's in touch with in Japan are safe and well. Alongside this very good news, of course, our thoughts and prayers go out to all those impacted by this disaster.

Just don't say "Trillion"

There's this "fact" circulating among security pundits (including President Obama) that says that cybercrime costs a trillion bucks a year. But check up on the underlying numbers and, what do you know, there's no there there.