<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" xmlns:georss="http://www.georss.org/georss/" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:cc="http://web.resource.org/cc/" xmlns:g-custom="http://base.google.com/cns/1.0" xmlns:g-core="http://base.google.com/ns/1.0" xmlns:apple-wallpapers="http://www.apple.com/ilife/wallpapers" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:media="http://search.yahoo.com/mrss" xmlns:creativeCommons="http://backend.userland.com/creativeCommonsRssModule" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>InfoTech Live</title>
    <link>http://podcasts.shoutshow.com/home.jsp?cmpnyid=8</link>
    <description>&lt;center&gt;&lt;script type='text/javascript' src='/js/swfobject.js'&gt;&lt;/script&gt;&#xD;
 &#xD;
&lt;div id='mediaspace'&gt;This div will be replaced&lt;/div&gt;&#xD;
&#xD;
 &#xD;
  &lt;script type='text/javascript'&gt;&#xD;
  var so = new SWFObject('/video/player.swf','ply','490','500','9','#ffffff');&#xD;
  so.addParam('allowfullscreen','true');&#xD;
  so.addParam('allowscriptaccess','always');&#xD;
  so.addParam('allownetworking','all');&#xD;
  so.addParam('flashvars','file=http://www.infotechlive.com/video/playlist.xml&amp;autostart=true&amp;stretching=exactfit&amp;abouttext=ShoutStream&amp;aboutlink=http://www.shoutstream.com&amp;playlist=bottom&amp;playlistsize=200&amp;linktarget=new&amp;skin=http://www.infotechlive.com/video/snel.swf&amp;displayclick=link&amp;shuffle=true');&#xD;
  so.write('mediaspace');&#xD;
&lt;/script&gt;&lt;/center&gt;</description>
    <itunes:owner>
      <itunes:email>info@infotech.net</itunes:email>
      <itunes:name>InfoTech Live</itunes:name>
    </itunes:owner>
    <itunes:image href="http://www.ittshow.com/images/logos/20060622095208.gif" />
    <itunes:explicit>no</itunes:explicit>
    <itunes:keywords />
    <itunes:summary>&lt;center&gt;&lt;script type='text/javascript' src='/js/swfobject.js'&gt;&lt;/script&gt;&#xD;
 &#xD;
&lt;div id='mediaspace'&gt;This div will be replaced&lt;/div&gt;&#xD;
&#xD;
 &#xD;
  &lt;script type='text/javascript'&gt;&#xD;
  var so = new SWFObject('/video/player.swf','ply','490','500','9','#ffffff');&#xD;
  so.addParam('allowfullscreen','true');&#xD;
  so.addParam('allowscriptaccess','always');&#xD;
  so.addParam('allownetworking','all');&#xD;
  so.addParam('flashvars','file=http://www.infotechlive.com/video/playlist.xml&amp;autostart=true&amp;stretching=exactfit&amp;abouttext=ShoutStream&amp;aboutlink=http://www.shoutstream.com&amp;playlist=bottom&amp;playlistsize=200&amp;linktarget=new&amp;skin=http://www.infotechlive.com/video/snel.swf&amp;displayclick=link&amp;shuffle=true');&#xD;
  so.write('mediaspace');&#xD;
&lt;/script&gt;&lt;/center&gt;</itunes:summary>
    <image>
      <title>InfoTech Live</title>
      <url>http://podcasts.shoutshow.com/images/logos/20070511062415.gif</url>
      <link>http://podcasts.shoutshow.com/home.jsp?cmpnyid=8</link>
      <description>&lt;![CDATA[&lt;center&gt;&lt;script type='text/javascript' src='/js/swfobject.js'&gt;&lt;/script&gt;&#xD;
 &#xD;
&lt;div id='mediaspace'&gt;This div will be replaced&lt;/div&gt;&#xD;
&#xD;
 &#xD;
  &lt;script type='text/javascript'&gt;&#xD;
  var so = new SWFObject('/video/player.swf','ply','490','500','9','#ffffff');&#xD;
  so.addParam('allowfullscreen','true');&#xD;
  so.addParam('allowscriptaccess','always');&#xD;
  so.addParam('allownetworking','all');&#xD;
  so.addParam('flashvars','file=http://www.infotechlive.com/video/playlist.xml&amp;autostart=true&amp;stretching=exactfit&amp;abouttext=ShoutStream&amp;aboutlink=http://www.shoutstream.com&amp;playlist=bottom&amp;playlistsize=200&amp;linktarget=new&amp;skin=http://www.infotechlive.com/video/snel.swf&amp;displayclick=link&amp;shuffle=true');&#xD;
  so.write('mediaspace');&#xD;
&lt;/script&gt;&lt;/center&gt; ]]&gt;</description>
    </image>
    <item>
      <title>Fraud Hits Where it Hurts Most - The Bottom Line</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=39</link>
      <description>&lt;![CDATA[Fraud management continues to be a mission-critical function as global statistics show an increase in both the number of incidents of fraud and the loss per incident. In the United States, the Federal Trade Commission identified a 34% increase in total fraud between 2003 and 2005, when the fraud bill reached $648 million, and has recently reported that fraud cost $1.2B in 2006. The Association for Payment Clearing Services revealed that online fraud losses in Great Britain increased 55% in 2006 over 2005. While compliance has created more attention and spending to prevent fraud, sound management is essential to both protect the organization and prevent erosion of marketplace trust. Those that do not keep up in fraud management are impacted twice - first by the initial loss, then again by attracting perpetrators thwarted by better equipped organizations. As security professionals battle to protect their organization and maintain trust, they need a holistic fraud management strategy that goes beyond point solutions to include a layered integration of technology with people, policy, and process. With increased scrutiny from the press, regulators, consumers, patients, and other clients, CISOs are asking questions like, What&amp;acute;s the best approach to protect against fraud? What technology do I need in my arsenal? Where do I begin? &#xD;
&#xD;
Please join Sunil Bhargava, Vice President of Product Management with Intellitactics for an informative podcast on the Enterprise Fraud Management and why proactive security practices that include security information and event management will play a crucial role in protecting the organization. &#xD;
&lt;br&gt;&lt;br&gt;&#xD;
Agenda &#xD;
&lt;br&gt;&#xD;
&amp;middot; Enterprise fraud the risk and the evolving enemy&lt;br&gt;&#xD;
&amp;middot; Thinking like a fraudster moving beyond defensive strategies&lt;br&gt;&#xD;
&amp;middot; The three P&amp;acute;s Policy, Process, People &lt;br&gt;&#xD;
&amp;middot; Why do I need security information and event management in my arsenal?&lt;br&gt;&#xD;
&amp;middot; How do I develop a fraud management game plan?&lt;br&gt; &#xD;
&amp;middot; Best practices for preventing, detecting, reacting&lt;br&gt; &#xD;
&amp;middot; Benefits beyond fraud management&lt;br&gt; ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/clients/intellitactics/podcast_intellitactics_2.mp3 " type="audio/mp3" />
      <pubDate>Fri, 23 Mar 2007 03:44:40 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=39</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:00:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>Fraud management continues to be a mission-critical function as global statistics show an increase in both the number of incidents of fraud and the loss per incident. In the United States, the Federal Trade Commission identified a 34% increase in total fraud between 2003 and 2005, when the fraud bill reached $648 million, and has recently reported that fraud cost $1.2B in 2006. The Association for Payment Clearing Services revealed that online fraud losses in Great Britain increased 55% in 2006 over 2005. While compliance has created more attention and spending to prevent fraud, sound management is essential to both protect the organization and prevent erosion of marketplace trust. Those that do not keep up in fraud management are impacted twice - first by the initial loss, then again by attracting perpetrators thwarted by better equipped organizations. As security professionals battle to protect their organization and maintain trust, they need a holistic fraud management strategy that goes beyond point solutions to include a layered integration of technology with people, policy, and process. With increased scrutiny from the press, regulators, consumers, patients, and other clients, CISOs are asking questions like, What&amp;acute;s the best approach to protect against fraud? What technology do I need in my arsenal? Where do I begin? &#xD;
&#xD;
Please join Sunil Bhargava, Vice President of Product Management with Intellitactics for an informative podcast on the Enterprise Fraud Management and why proactive security practices that include security information and event management will play a crucial role in protecting the organization. &#xD;
&lt;br&gt;&lt;br&gt;&#xD;
Agenda &#xD;
&lt;br&gt;&#xD;
&amp;middot; Enterprise fraud the risk and the evolving enemy&lt;br&gt;&#xD;
&amp;middot; Thinking like a fraudster moving beyond defensive strategies&lt;br&gt;&#xD;
&amp;middot; The three P&amp;acute;s Policy, Process, People &lt;br&gt;&#xD;
&amp;middot; Why do I need security information and event management in my arsenal?&lt;br&gt;&#xD;
&amp;middot; How do I develop a fraud management game plan?&lt;br&gt; &#xD;
&amp;middot; Best practices for preventing, detecting, reacting&lt;br&gt; &#xD;
&amp;middot; Benefits beyond fraud management&lt;br&gt;</itunes:summary>
      <dc:date>2007-03-23T03:44:40Z</dc:date>
    </item>
    <item>
      <title>How to Justify Spending and Communicate Effective Programs</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=38</link>
      <description>&lt;![CDATA[&lt;p&gt;Khalid Kark, Senior Security Analyst with Forrester Research, discusses the state of security spending in North America. Central to his guidance is how to use security metrics, actionable reports, and proactive security practices to get more from security spending and justify future investment. &lt;BR&gt;&#xD;
  &lt;BR&gt;&#xD;
  Companies and federal agencies alike are discovering that spending more doesn&amp;rsquo;t necessarily translate into increased security effectiveness. Security continues to be a top priority, but there is never enough money or resources to do everything. Forrester&amp;rsquo;s advice and guidance is valuable for every manager who is looking to increase visibility for security programs. &lt;BR&gt;&#xD;
&lt;/p&gt;&#xD;
&lt;p&gt;Agenda&lt;/p&gt;&#xD;
&lt;ul&gt;&#xD;
  &lt;li&gt;  Security spending &amp;ndash; the facts and trends &lt;/li&gt;&#xD;
  &lt;li&gt; Regional and industry variances&lt;/li&gt;&#xD;
  &lt;li&gt;Impact of compliance spending on IT security spending&lt;/li&gt;&#xD;
  &lt;li&gt;How to increase the impact of security reports going to business peers and company executives&lt;/li&gt;&#xD;
  &lt;li&gt;What measures and metrics will interest your manager&lt;/li&gt;&#xD;
  &lt;li&gt;What to measure, how to start&lt;/li&gt;&#xD;
  &lt;li&gt;Best practices for developing and communicating metrics and reports&lt;/li&gt;&#xD;
&lt;/ul&gt; ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/clients/intellitactics/podcast_intellitactics_1.mp3" type="audio/mp3" />
      <pubDate>Mon, 12 Mar 2007 20:26:02 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=38</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:00:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>&lt;p&gt;Khalid Kark, Senior Security Analyst with Forrester Research, discusses the state of security spending in North America. Central to his guidance is how to use security metrics, actionable reports, and proactive security practices to get more from security spending and justify future investment. &lt;BR&gt;&#xD;
  &lt;BR&gt;&#xD;
  Companies and federal agencies alike are discovering that spending more doesn&amp;rsquo;t necessarily translate into increased security effectiveness. Security continues to be a top priority, but there is never enough money or resources to do everything. Forrester&amp;rsquo;s advice and guidance is valuable for every manager who is looking to increase visibility for security programs. &lt;BR&gt;&#xD;
&lt;/p&gt;&#xD;
&lt;p&gt;Agenda&lt;/p&gt;&#xD;
&lt;ul&gt;&#xD;
  &lt;li&gt;  Security spending &amp;ndash; the facts and trends &lt;/li&gt;&#xD;
  &lt;li&gt; Regional and industry variances&lt;/li&gt;&#xD;
  &lt;li&gt;Impact of compliance spending on IT security spending&lt;/li&gt;&#xD;
  &lt;li&gt;How to increase the impact of security reports going to business peers and company executives&lt;/li&gt;&#xD;
  &lt;li&gt;What measures and metrics will interest your manager&lt;/li&gt;&#xD;
  &lt;li&gt;What to measure, how to start&lt;/li&gt;&#xD;
  &lt;li&gt;Best practices for developing and communicating metrics and reports&lt;/li&gt;&#xD;
&lt;/ul&gt;</itunes:summary>
      <dc:date>2007-03-12T20:26:02Z</dc:date>
    </item>
    <item>
      <title>Third Brigade's blended approach to intrusion detection &amp; prevention</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=37</link>
      <description>&lt;![CDATA[In this 20 minute podcast, Brian O'Higgins, Third Brigade's CTO describes the company's unique, powerful, blended approach to detecting and preventing a broad range of malicious code at the host, and explains why it dramatically reduces false positives and negatives.  ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/010_20061003_01.mp3" length="1200" type="audio/mp3" />
      <pubDate>Tue, 10 Oct 2006 03:07:10 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=37</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:20:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>In this 20 minute podcast, Brian O'Higgins, Third Brigade's CTO describes the company's unique, powerful, blended approach to detecting and preventing a broad range of malicious code at the host, and explains why it dramatically reduces false positives and negatives.</itunes:summary>
      <dc:date>2006-10-10T03:07:10Z</dc:date>
    </item>
    <item>
      <title>Compliance Policies for Endpoint Devices</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=36</link>
      <description>&lt;![CDATA[In This Podcast we talk with Mitchell Ashley about managing endpoint devices and managing compliance policies. If you are concerned with compliance issues and you have remote connections to your data, then join us for this informative podcast. ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/008_20060824_1_stilsecure.mp3" length="2040" type="audio/mp3" />
      <pubDate>Thu, 24 Aug 2006 16:45:59 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=36</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:34:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>In This Podcast we talk with Mitchell Ashley about managing endpoint devices and managing compliance policies. If you are concerned with compliance issues and you have remote connections to your data, then join us for this informative podcast.</itunes:summary>
      <dc:date>2006-08-24T16:45:59Z</dc:date>
    </item>
    <item>
      <title>Web Application Security (Part 6)</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=35</link>
      <description>&lt;![CDATA[This is the sixth of twelve episodes dedicated to web application security and Tom discusses the number six item on the OWASP Top Ten list:  Injection Flaws.  Included in the discussion are the three primary types of Injection Flaws:  System Calls, Shell Commands, and Sequel Injection and how they can affect a company.  A detailed example is given on how they work and just how much damage they can do. ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/008_20060816_6.mp3" length="480" type="audio/mp3" />
      <pubDate>Wed, 16 Aug 2006 20:55:40 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=35</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:08:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>This is the sixth of twelve episodes dedicated to web application security and Tom discusses the number six item on the OWASP Top Ten list:  Injection Flaws.  Included in the discussion are the three primary types of Injection Flaws:  System Calls, Shell Commands, and Sequel Injection and how they can affect a company.  A detailed example is given on how they work and just how much damage they can do.</itunes:summary>
      <dc:date>2006-08-16T20:55:40Z</dc:date>
    </item>
    <item>
      <title>Web Application Security (Part 5)</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=34</link>
      <description>&lt;![CDATA[The discussion of items on the OWASP Top Ten list continues with items four and five:  Cross-site Scripting and Buffer Overflows.  You will find out two ways that Cross-site Scripting is used and how to prevent it as well as the dangers posed from Buffer Overflows. ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/008_20060816_5.mp3" length="1140" type="audio/mp3" />
      <pubDate>Wed, 16 Aug 2006 20:44:50 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=34</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:19:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>The discussion of items on the OWASP Top Ten list continues with items four and five:  Cross-site Scripting and Buffer Overflows.  You will find out two ways that Cross-site Scripting is used and how to prevent it as well as the dangers posed from Buffer Overflows.</itunes:summary>
      <dc:date>2006-08-16T20:44:50Z</dc:date>
    </item>
    <item>
      <title>Web Application Security (Part 4)</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=33</link>
      <description>&lt;![CDATA[The fourth episode of the twelve part series of web applications, we discover the third item on the OWASP Top Ten list of web application vulnerabilities:  Broken Authentication and Session Management.  This threat can compromise user access and Tom discusses safeguards against it.  Also discussed is the importance of solid passwords and how to properly create them. ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/008_20060816_4.mp3" length="900" type="audio/mp3" />
      <pubDate>Wed, 16 Aug 2006 20:42:16 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=33</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:15:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>The fourth episode of the twelve part series of web applications, we discover the third item on the OWASP Top Ten list of web application vulnerabilities:  Broken Authentication and Session Management.  This threat can compromise user access and Tom discusses safeguards against it.  Also discussed is the importance of solid passwords and how to properly create them.</itunes:summary>
      <dc:date>2006-08-16T20:42:16Z</dc:date>
    </item>
    <item>
      <title>Web Application Security (Part 3)</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=32</link>
      <description>&lt;![CDATA[In this episode, we discover the second item in the OWASP Top Ten list:  Broken Access Controls.  Access controls are the fundamental safeguard in protecting information.  Tom does an in-depth explanation of four aspects of broken access controls which include:  Client-side Caching, Directory Traversal, File Permission, and Predictable Resource Location. ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/008_20060816_3.mp3" length="720" type="audio/mp3" />
      <pubDate>Wed, 16 Aug 2006 20:39:21 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=32</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:12:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>In this episode, we discover the second item in the OWASP Top Ten list:  Broken Access Controls.  Access controls are the fundamental safeguard in protecting information.  Tom does an in-depth explanation of four aspects of broken access controls which include:  Client-side Caching, Directory Traversal, File Permission, and Predictable Resource Location.</itunes:summary>
      <dc:date>2006-08-16T20:39:21Z</dc:date>
    </item>
    <item>
      <title>Web Application Security (Part 2)</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=31</link>
      <description>&lt;![CDATA[This is the second part of the twelve episode series on web application vulnerabilities.  This episode goes into detail of the first item in the OWASP Top Ten list: Validated Input.  Tom discusses how this is the most common vulnerability in web applications and exposes potential threats from it. ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/008_20060816_2.mp3" length="600" type="audio/mp3" />
      <pubDate>Wed, 16 Aug 2006 20:37:20 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=31</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:10:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>This is the second part of the twelve episode series on web application vulnerabilities.  This episode goes into detail of the first item in the OWASP Top Ten list: Validated Input.  Tom discusses how this is the most common vulnerability in web applications and exposes potential threats from it.</itunes:summary>
      <dc:date>2006-08-16T20:37:20Z</dc:date>
    </item>
    <item>
      <title>Web Application Security (Part 1)</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=30</link>
      <description>&lt;![CDATA[In this episode, the first of a twelve part series, Tom discusses web application vulnerability and the challenges faced by organizations as they grow more dependent on web-based applications.  The episode also features a brief overview of the Open Web Application Security Project(OWASP)?s Top Ten list of web application vulnerabilities.  Also noted in this episode is the importance of properly using encryption ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/008_20060816_1.mp3" length="720" type="audio/mp3" />
      <pubDate>Wed, 16 Aug 2006 20:35:15 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=30</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:12:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>In this episode, the first of a twelve part series, Tom discusses web application vulnerability and the challenges faced by organizations as they grow more dependent on web-based applications.  The episode also features a brief overview of the Open Web Application Security Project(OWASP)?s Top Ten list of web application vulnerabilities.  Also noted in this episode is the importance of properly using encryption</itunes:summary>
      <dc:date>2006-08-16T20:35:15Z</dc:date>
    </item>
    <item>
      <title>XML Enabled Networks</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=20</link>
      <description>&lt;![CDATA[XML Enabled Networks are the most powerful method&#xD;
for effectively handling the cost, complexity, security and&#xD;
performance of web services and Service Oriented Architecture&#xD;
(SOA). Application server functions such as routing, fire walling,&#xD;
load balancing and others have all migrated to the network.&#xD;
Today the XML processing overhead of web services and SOA&#xD;
can be offloaded from application platforms and software&#xD;
middleware to the network allowing the promises of Service&#xD;
Oriented Architectures to be realized.&#xD;
Moving XML, Web Services and SOA processing into a network&#xD;
device that acts as a Policy Enforcement Point is just good&#xD;
sense. ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/reactivity_073106A.mp3" length="1500" type="audio/mp3" />
      <pubDate>Wed, 26 Jul 2006 01:00:54 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=20</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:25:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>XML Enabled Networks are the most powerful method&#xD;
for effectively handling the cost, complexity, security and&#xD;
performance of web services and Service Oriented Architecture&#xD;
(SOA). Application server functions such as routing, fire walling,&#xD;
load balancing and others have all migrated to the network.&#xD;
Today the XML processing overhead of web services and SOA&#xD;
can be offloaded from application platforms and software&#xD;
middleware to the network allowing the promises of Service&#xD;
Oriented Architectures to be realized.&#xD;
Moving XML, Web Services and SOA processing into a network&#xD;
device that acts as a Policy Enforcement Point is just good&#xD;
sense.</itunes:summary>
      <dc:date>2006-07-26T01:00:54Z</dc:date>
    </item>
    <item>
      <title>Five Easy Steps to IT Change Change Management</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=17</link>
      <description>&lt;![CDATA[It's one thing to know that change management sets high performing IT organizations apart from the rest of the pack; it's another thing to know how to implement the policies and processes that will create that culture.&#xD;
 ]]&gt;</description>
      <enclosure url="http://podcasts.shoutshow.com/archives/audio/008_20060706_02.mp3" length="1500" type="audio/mp3" />
      <pubDate>Thu, 06 Jul 2006 18:40:15 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=17</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:25:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>It's one thing to know that change management sets high performing IT organizations apart from the rest of the pack; it's another thing to know how to implement the policies and processes that will create that culture.</itunes:summary>
      <dc:date>2006-07-06T18:40:15Z</dc:date>
    </item>
    <item>
      <title>Fundamentals of Change Management</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=16</link>
      <description>&lt;![CDATA[Description - High performing IT organizations set themselves apart from low and medium performing organizations with their high levels of compliance, security, and productivity. But how do they achieve such high performance? It all comes down to one issue: Change management. ]]&gt;</description>
      <enclosure url="http://podcasts.shoutshow.com/archives/audio/008_20060706_01.mp3" length="1800" type="audio/mp3" />
      <pubDate>Thu, 06 Jul 2006 18:38:35 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=16</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:30:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>Description - High performing IT organizations set themselves apart from low and medium performing organizations with their high levels of compliance, security, and productivity. But how do they achieve such high performance? It all comes down to one issue: Change management.</itunes:summary>
      <dc:date>2006-07-06T18:38:35Z</dc:date>
    </item>
    <item>
      <title>Phishing and Spam - Putting up a good fight</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=15</link>
      <description>&lt;![CDATA[Phishing and Spam, two dirty words that &#xD;
&#xD;
every information technology department has to deal &#xD;
&#xD;
with. In this show we talk about what can be done &#xD;
&#xD;
about it and where to find more information. Our &#xD;
&#xD;
guests include Aaron Eimgh, notable email security &#xD;
&#xD;
expert. We also talk with David Jevans, director of &#xD;
&#xD;
the Anti-Phishing Working Group. ]]&gt;</description>
      <enclosure url="http://podcasts.shoutshow.com/archives/audio/008_20060608_01.mp3" length="1800" type="audio/mp3" />
      <pubDate>Tue, 27 Jun 2006 19:39:48 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=15</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:30:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>Phishing and Spam, two dirty words that &#xD;
&#xD;
every information technology department has to deal &#xD;
&#xD;
with. In this show we talk about what can be done &#xD;
&#xD;
about it and where to find more information. Our &#xD;
&#xD;
guests include Aaron Eimgh, notable email security &#xD;
&#xD;
expert. We also talk with David Jevans, director of &#xD;
&#xD;
the Anti-Phishing Working Group.</itunes:summary>
      <dc:date>2006-06-27T19:39:48Z</dc:date>
    </item>
    <item>
      <title>The Three Pillars of Effective Database Security</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=14</link>
      <description>&lt;![CDATA[The tide has turned in the battle for network security and by most accounts, the good guys are losing. A decade or more ago, databases were usually kept physically secure in a central data center and accessed mostly by applications within the corporate borders. Today, applications and databases may be distributed in business units to meet local needs, and are increasingly made available to suppliers, customers and business partners in order to conduct business over the Web. &#xD;
&#xD;
 &#xD;
&#xD;
With this increased access comes increased risk. Many of the new threats take advantage of the fact that today's databases are not mere repositories for information, but robust development environments that allow developers ? and hackers ? to carry out complex functions within the database. &#xD;
&#xD;
 &#xD;
&#xD;
Organizations that understand the importance of their applications and databases recognize the need for proactive, dynamic tools that can find and stop attacks on applications and databases before they cripple the enterprise. Fortunately, hard-earned experience securing the network provides a ready-made blueprint for an effective approach to securing enterprise applications: vulnerability assessments, real-time intrusion protection and audit, and encryption at the application layer.&lt;br&gt;&lt;br&gt;&#xD;
&#xD;
 &#xD;
&#xD;
&lt;b&gt;Attendees will learn:&lt;/b&gt;&lt;br&gt;&#xD;
How to protect their databases by focusing on three areas of threat:&#xD;
&#xD;
&lt;li/&gt;Know where you're most vulnerable (through vulnerability assessments)&#xD;
&#xD;
&lt;li/&gt;Expect the unexpected (real-time activity monitoring and security audit), and &#xD;
&#xD;
&lt;li/&gt;Defend what's most critical (with encryption at the application layer) &#xD;
&#xD;
 ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/20061018_01_appSecurity.mp3" length="2700" type="audio/mp3" />
      <pubDate>Tue, 27 Jun 2006 19:31:06 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=14</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:45:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>The tide has turned in the battle for network security and by most accounts, the good guys are losing. A decade or more ago, databases were usually kept physically secure in a central data center and accessed mostly by applications within the corporate borders. Today, applications and databases may be distributed in business units to meet local needs, and are increasingly made available to suppliers, customers and business partners in order to conduct business over the Web. &#xD;
&#xD;
 &#xD;
&#xD;
With this increased access comes increased risk. Many of the new threats take advantage of the fact that today's databases are not mere repositories for information, but robust development environments that allow developers ? and hackers ? to carry out complex functions within the database. &#xD;
&#xD;
 &#xD;
&#xD;
Organizations that understand the importance of their applications and databases recognize the need for proactive, dynamic tools that can find and stop attacks on applications and databases before they cripple the enterprise. Fortunately, hard-earned experience securing the network provides a ready-made blueprint for an effective approach to securing enterprise applications: vulnerability assessments, real-time intrusion protection and audit, and encryption at the application layer.&lt;br&gt;&lt;br&gt;&#xD;
&#xD;
 &#xD;
&#xD;
&lt;b&gt;Attendees will learn:&lt;/b&gt;&lt;br&gt;&#xD;
How to protect their databases by focusing on three areas of threat:&#xD;
&#xD;
&lt;li/&gt;Know where you're most vulnerable (through vulnerability assessments)&#xD;
&#xD;
&lt;li/&gt;Expect the unexpected (real-time activity monitoring and security audit), and &#xD;
&#xD;
&lt;li/&gt;Defend what's most critical (with encryption at the application layer)</itunes:summary>
      <dc:date>2006-06-27T19:31:06Z</dc:date>
    </item>
    <item>
      <title>Coveo Podcast</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=13</link>
      <description>&lt;![CDATA[Chart Industries Uses Microsoft SharePoint&#xD;
&#xD;
&lt;li/&gt;Chart Industries uses Microsoft SharePoint for their internal collaboration and knowledgement requirements.  Stored in their SharePoint portals is corporate information such as financial data, sales information and customer presentations, literature libraries, and process forms.&#xD;
&lt;li/&gt;Chart Industries has a global SharePoint implementation with five SharePoint implementations in China, the United Kingdom and the US.  In the next six months, Chart Industries will add additional SharePoint servers in 4 more locations.&lt;br&gt;&lt;br&gt;&#xD;
&#xD;
 &#xD;
&#xD;
&lt;b&gt;Problem&lt;/b&gt;&#xD;
&#xD;
&lt;li/&gt;Chart Industries has made a significant investment in SharePoint, however their user adoption was poor because it was difficult for users to find information stored in SharePoint.  Users wanted a search capability that was simple to use, easy to use, and accurate.  Janice tried to fine tune native search in SharePoint for weeks with minimal success.&lt;br&gt;&lt;br&gt;&#xD;
&#xD;
 &#xD;
&#xD;
&lt;b&gt;Solution&lt;/b&gt;&#xD;
&#xD;
&lt;li/&gt;Chart Industries initially purchased Coveo Enterprise Search for SharePoint (CESS) in April, 2006.  &#xD;
&#xD;
&lt;li/&gt;Admin benefits include:&lt;ul&gt;&#xD;
&#xD;
&lt;li/&gt;Extremely simple to administer - graphic administration interface is &amp;quot;phenomenal&amp;quot; and makes it easy to fine tune the system&#xD;
&#xD;
&lt;li/&gt;CESS was implemented in less than a day&#xD;
&#xD;
&lt;li/&gt;CESS's security model leverages the security interface in SharePoint so search is extremely secure&#xD;
&#xD;
&lt;li/&gt;SharePoint is also used as a document storage facility, so it's easy to exclude archived information from end user access &#xD;
&#xD;
&lt;li/&gt;Estimated 25% reduction in end user support requests&#xD;
&lt;/ul&gt;&#xD;
&#xD;
&lt;li/&gt;End User benefits:&#xD;
&lt;ul&gt;&#xD;
&lt;li/&gt;Stronger adoption of SharePoint&#xD;
&#xD;
&lt;li/&gt;Easy to use (&amp;quot;users are very excited&amp;quot;)&#xD;
&lt;/ul&gt;&#xD;
 &#xD;
&#xD;
&lt;li/&gt;After the initial success of CESS, Chart Industries purchased an additional 5 instances of CESS in Sept 2006.&#xD;
&#xD;
  ]]&gt;</description>
      <enclosure url="http://www.shoutstreammedia.com/mp3/011_20061025_01_coveo.mp3" length="480" type="audio/mp3" />
      <pubDate>Tue, 27 Jun 2006 19:24:00 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=13</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:08:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>Chart Industries Uses Microsoft SharePoint&#xD;
&#xD;
&lt;li/&gt;Chart Industries uses Microsoft SharePoint for their internal collaboration and knowledgement requirements.  Stored in their SharePoint portals is corporate information such as financial data, sales information and customer presentations, literature libraries, and process forms.&#xD;
&lt;li/&gt;Chart Industries has a global SharePoint implementation with five SharePoint implementations in China, the United Kingdom and the US.  In the next six months, Chart Industries will add additional SharePoint servers in 4 more locations.&lt;br&gt;&lt;br&gt;&#xD;
&#xD;
 &#xD;
&#xD;
&lt;b&gt;Problem&lt;/b&gt;&#xD;
&#xD;
&lt;li/&gt;Chart Industries has made a significant investment in SharePoint, however their user adoption was poor because it was difficult for users to find information stored in SharePoint.  Users wanted a search capability that was simple to use, easy to use, and accurate.  Janice tried to fine tune native search in SharePoint for weeks with minimal success.&lt;br&gt;&lt;br&gt;&#xD;
&#xD;
 &#xD;
&#xD;
&lt;b&gt;Solution&lt;/b&gt;&#xD;
&#xD;
&lt;li/&gt;Chart Industries initially purchased Coveo Enterprise Search for SharePoint (CESS) in April, 2006.  &#xD;
&#xD;
&lt;li/&gt;Admin benefits include:&lt;ul&gt;&#xD;
&#xD;
&lt;li/&gt;Extremely simple to administer - graphic administration interface is &amp;quot;phenomenal&amp;quot; and makes it easy to fine tune the system&#xD;
&#xD;
&lt;li/&gt;CESS was implemented in less than a day&#xD;
&#xD;
&lt;li/&gt;CESS's security model leverages the security interface in SharePoint so search is extremely secure&#xD;
&#xD;
&lt;li/&gt;SharePoint is also used as a document storage facility, so it's easy to exclude archived information from end user access &#xD;
&#xD;
&lt;li/&gt;Estimated 25% reduction in end user support requests&#xD;
&lt;/ul&gt;&#xD;
&#xD;
&lt;li/&gt;End User benefits:&#xD;
&lt;ul&gt;&#xD;
&lt;li/&gt;Stronger adoption of SharePoint&#xD;
&#xD;
&lt;li/&gt;Easy to use (&amp;quot;users are very excited&amp;quot;)&#xD;
&lt;/ul&gt;&#xD;
 &#xD;
&#xD;
&lt;li/&gt;After the initial success of CESS, Chart Industries purchased an additional 5 instances of CESS in Sept 2006.</itunes:summary>
      <dc:date>2006-06-27T19:24:00Z</dc:date>
    </item>
    <item>
      <title>Enabling Endpoint Security through a Network Based Quarantine Protection - TippingPoint Sponsored Podcast</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=12</link>
      <description>&lt;![CDATA[TippingPoint's Intrusion Prevention System (IPS) and Security Management System (SMS) incorporate innovative enhancements to prevent the propagation of cyber threats from within the network and quarantine infected devices. This quarantine process prevents the infected device from harming neighboring systems and provides instantaneous redirection to remediation Web pages or URLs.&#xD;
&#xD;
With the TippingPoint solution, a wide range of Quarantine actions can be initiated in minutes to quickly and easily cover end-point security needs without a menagerie of agents or labor consumption.&#xD;
&#xD;
Using Quarantine Protection, an administrator can automatically block malicious traffic, inform the user of device infection and quarantine the device for remediation. TippingPoint Quarantine Protection also allows administrators to select filters and configure thresholds that will invoke the quarantine function. When the TippingPoint IPS matches against such filters, it will prevent malicious traffic from propagating through the network and communicate with the LAN infrastructure to remove the offending device from the network.  ]]&gt;</description>
      <enclosure url="http://podcasts.shoutshow.com/archives/audio/008_20060605_03.mp3" length="1500" type="audio/mp3" />
      <pubDate>Thu, 22 Jun 2006 21:59:39 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=12</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:25:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>TippingPoint's Intrusion Prevention System (IPS) and Security Management System (SMS) incorporate innovative enhancements to prevent the propagation of cyber threats from within the network and quarantine infected devices. This quarantine process prevents the infected device from harming neighboring systems and provides instantaneous redirection to remediation Web pages or URLs.&#xD;
&#xD;
With the TippingPoint solution, a wide range of Quarantine actions can be initiated in minutes to quickly and easily cover end-point security needs without a menagerie of agents or labor consumption.&#xD;
&#xD;
Using Quarantine Protection, an administrator can automatically block malicious traffic, inform the user of device infection and quarantine the device for remediation. TippingPoint Quarantine Protection also allows administrators to select filters and configure thresholds that will invoke the quarantine function. When the TippingPoint IPS matches against such filters, it will prevent malicious traffic from propagating through the network and communicate with the LAN infrastructure to remove the offending device from the network.</itunes:summary>
      <dc:date>2006-06-22T21:59:39Z</dc:date>
    </item>
    <item>
      <title>Integration Appliances: Deliver Application Integration in Days</title>
      <link>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=11</link>
      <description>&lt;![CDATA[Corporation spend 33% of their IT budgets on integration projects according to Gartner Research. This Show talks about some appliance based approaches to integration projects and how they can shorten the time to deploy. ]]&gt;</description>
      <enclosure url="http://podcasts.shoutshow.com/archives/audio/008_20060605_01.mp3" length="900" type="audio/mp3" />
      <pubDate>Thu, 22 Jun 2006 08:14:49 GMT</pubDate>
      <guid>http://podcasts.shoutshow.com/podcastDetail.jsp?cmpnyid=8&amp;podcastid=11</guid>
      <itunes:author>InfoTech Live</itunes:author>
      <itunes:duration>00:15:00</itunes:duration>
      <itunes:explicit>no</itunes:explicit>
      <itunes:keywords />
      <itunes:summary>Corporation spend 33% of their IT budgets on integration projects according to Gartner Research. This Show talks about some appliance based approaches to integration projects and how they can shorten the time to deploy.</itunes:summary>
      <dc:date>2006-06-22T08:14:49Z</dc:date>
    </item>
  </channel>
</rss>

