Verbraucher
KRAFTFAHRZEUG GARANTIE UND Lemon Law

New Protections für Verbraucher Neuwagen & Gebrauchtwagen Ein Käufer oder Mieter eines Kraftfahrzeugs hat verschiedene Rechte aus beiden staatlichen und bundesstaatlichen Gesetzen, wenn das Fahrzeug nicht wie unter einer ausdrücklichen Garantie beschränkt. Garantie Recht kann komplex sein, und es ist unmöglich umfassend zu beschreiben alle das Gesetz in einem kurzen Raum. Die folgenden Ausführungen kurz auf die Song-Beverly Consumer Warranty Act und was ist im Volksmund bekannt als "Lemon Law".
Diese Meldung ist kein Ersatz für das Kontaktieren Ihres eigenen Anwalt, der am besten beraten können Sie über Ihre Rechte unter den besonderen Umständen Ihres Falles. Die Generalstaatsanwaltschaft kann Ihnen nicht raten, über Ihre Rechte und können nicht vertreten Sie in einer Garantie Streit.

1. Coverage für neue Kraftfahrzeuge.

   1. ÜBERBLICK ÜBER DIE SONG-BEVERLY GEWÄHRLEISTUNGSRECHTEN

      Die Song-Beverly Consumer Warranty Act (beginnend mit BGB § 1790) bietet Schutz für die Verbraucher, oder leasen kaufen neue Kraftfahrzeuge. Das Gesetz verlangt, dass, wenn der Hersteller oder sein Vertreter in diesem Zustand, wie ein autorisierter Händler ist nicht in der Lage zu warten oder zu reparieren ein neues Kraftfahrzeug um die Bedingungen einer ausdrückliche schriftliche Garantie nach Ablauf einer angemessenen Anzahl von Reparaturversuchen gerecht zu werden, ist der Hersteller umgehend an das Fahrzeug zu ersetzen oder den Kaufpreis an den Leasingnehmer oder Käufer erforderlich. Der Kaufpreis, die zurückgegeben werden muss auch der Preis für Hersteller installierte Gegenstände und Transport bezahlte, aber nicht die Preise für nonmanufacturer Artikel vom Händler installiert bezahlt. Der Mieter oder Käufer ist völlig frei entscheiden, ob ein Ersatz oder eine Rückerstattung zu akzeptieren. Was auch immer die Wahl, ist der Hersteller verantwortlich für Vertrieb bezahlen oder Steuern; Lizenz, Registrierung und andere amtliche Gebühren und mittelbare Schäden, die der Mieter oder Käufer wie Gebühren finanzieren, Reparatur, Abschleppen und Mietwagen entstandenen Kosten können .
      Der Mieter oder Käufer kann für die Nutzung des Fahrzeugs berechnet, unabhängig davon, ob das Fahrzeug ersetzt oder der Kaufpreis erstattet werden. Der Betrag, für den Einsatz aufgeladen werden kann, ist durch die Multiplikation der tatsächliche Preis des neuen Fahrzeugs durch einen Bruch mit dessen Nenner 120.000 und als dessen Zähler die Anzahl der Meilen vom Fahrzeug ermittelt, bevor es wurde zum ersten Mal in für die Korrektur des Problems gebracht . Zum Beispiel, wenn das Auto 6.000 Meilen gereist war, bevor es wurde zum ersten Mal in für die Korrektur des Problems brachte, konnte der Mieter oder Käufer 5% (6.000 / 120.000 = 5%) des Kaufpreises für den Einsatz in Rechnung gestellt.
      Das Gesetz gilt für den gesamten Zeitraum der Garantie. Zum Beispiel, wenn Sie Ihr Fahrzeug durch einen Drei-Jahres-Garantie abgedeckt ist, und Sie entdecken einen Mangel nach zwei Jahren wird der Hersteller des Fahrzeugs zu ersetzen oder erstatten Ihnen wie oben, wenn der Hersteller oder sein Vertreter nicht in der Lage, das Fahrzeug zu entsprechen skizzierten die ausdrückliche Garantie nach Ablauf einer angemessenen Anzahl von Versuchen, dies zu tun.
      Song-Beverly gilt nicht, wenn das Problem durch Missbrauch verursacht wurde, nachdem das Fahrzeug ausgeliefert wurde. Seien Sie sicher, dass Sie folgen den Bedingungen der Garantie für die Wartung und den richtigen Gebrauch des Fahrzeugs.
      Zwar gibt es eine vierjährige Verjährungsfrist für eine Klage wegen Verletzung einer Garantie oder der Verletzung von Song-Beverly bringen, sollten Sie umgehend handeln, um zu versuchen, das Problem fair und schnell zu lösen, ohne rechtliche Schritte, falls möglich.

   2. Das "Lemon Law" und WAS IST eine vernünftige Anzahl von Reparaturversuchen

      Was gilt als eine vernünftige Anzahl von Reparaturversuchen wird von den Umständen einschließlich der Schwere des Mangels ab. Zum Beispiel kann ein oder zwei Reparaturversuche als angemessen betrachtet werden für gravierende Sicherheitsmängel wie Bremsversagen, abhängig von der genauen Situation.
      Eine besondere Vorschrift, die oft als "Lemon Law", hilft festzustellen, was eine angemessene Anzahl von Reparaturversuchen für Probleme, die wesentlich beeinträchtigen die Verwendung, den Wert oder die Sicherheit des Fahrzeugs. Die "Lemon Law" gilt für diese Probleme, wenn sie während der ersten 18 Monate, nachdem der Verbraucher erhalten Auslieferung des Fahrzeugs oder innerhalb der ersten 18.000 Meilen auf dem Tacho, je nachdem, was zuerst eintritt entstehen. Während der ersten 18 Monate oder 18.000 Meilen, setzt die "Lemon Law", dass ein Hersteller eine angemessene Anzahl von Versuchen, um das Fahrzeug zu reparieren hatte, wenn entweder (1) Das gleiche Problem ergibt sich in einem Zustand, den Tod oder eine schwere Körperverletzung verursacht wird Verletzungen, wenn das Fahrzeug angetrieben wird und das Problem war Gegenstand zwei oder mehrere Male durch den Hersteller oder seinen Agenten zu reparieren, und der Käufer oder Mieter hat mindestens einmal direkt vom Hersteller für die Notwendigkeit der Reparatur über das Problem informiert, wie in sofern der Gewährleistung oder der Bedienungsanleitung oder (2) Das gleiche Problem war Gegenstand vier oder mehr Male durch den Hersteller oder seinen Agenten Reparatur und der Käufer hat mindestens einmal direkt vom Hersteller für die Notwendigkeit der Reparatur über das Problem informiert, wie in sofern der Gewährleistung oder der Bedienungsanleitung oder (3) Das Fahrzeug ist außer Betrieb, weil die Reparatur von einer beliebigen Anzahl von Problemen durch den Hersteller oder seine Vertreter für eine Gesamtsumme von mehr als 30 Tage seit der Auslieferung des Fahrzeugs.
      Die "Lemon Law" Vermutung ist ein Leitfaden, keine absolute Regel. Ein Richter oder Schiedsrichter kann davon ausgehen, dass der Hersteller eine angemessene Anzahl von Chancen, um das Fahrzeug zu reparieren, wenn alle Bedingungen erfüllt sind hatte. Der Hersteller hat jedoch das Recht vor, versuchen zu beweisen, dass er die Chance, zusätzliche Reparaturen versucht haben, und die Verbraucher hat das Recht, um zu zeigen, dass weniger Reparaturversuche den Umständen nach angemessenen sind.
      Achten Sie darauf, Ihre Garantie-und Bedienungsanleitung für Anweisungen zu überprüfen. Sie müssen unter Umständen direkt dem Hersteller das Problem (s) sein. Es ist eine gute Idee, um Ihre schriftliche Mitteilung an den Hersteller zu senden an die Adresse in der Gewährleistung oder der Bedienungsanleitung per Einschreiben gezeigt, Rückschein, so dass Sie nachweisen, dass Ihr Brief war. Behalten Sie eine Kopie des gesamten Schriftverkehrs.
      Wenn der Hersteller unterhält eine staatlich geprüfte Schieds-Programm muss der Verbraucher die Garantie Streitigkeit dem Schiedsverfahren Programm vorzulegen, bevor der Verbraucher können die Vorteile der Vermutung Gericht zu bringen. Das Schiedsverfahren ist eine Alternative zu Gerichtsverfahren. Der Verbraucher darf die Vermutung im Schiedsverfahren geltend zu machen. Informationen über Schiedsverfahren soll in der Gewährleistung oder der Bedienungsanleitung beschrieben werden.
      Nicht jeder Hersteller hält eine staatlich geprüfte Programm. Sie sollten mit dem Department of Consumer Affairs 'check Arbitration Certification Program an (800) 952-5210 oder im Internet unter www.dca.ca.gov/acp/ . Sie können auch für die Abteilung ist kostenlos Broschüre, die mehr über Schiedsverfahren, erklärt fragen "Lemon Aid for Consumers".

   3. Wer ist versichert

      Das Gesetz gilt für ein neues Kraftfahrzeug, das gekauft oder verwendet in erster Linie für persönliche, familiäre oder Haushaltszwecke. Das Gesetz gilt auch für ein neues Kraftfahrzeug mit einem zulässigen Gesamtgewicht unter £ 10.000, die gekauft oder ist in erster Linie für geschäftliche Zwecke von einer Person, einschließlich einer Partnerschaft, Gesellschaft mit beschränkter Haftung, Aktiengesellschaft, Verein, oder jede andere juristische Person benutzt, um die nicht mehr als fünf Kraftfahrzeuge sind in diesem Zustand registriert.

   4. WAS IST ein neues Kraftfahrzeug

      Das Gesetz oben diskutierten gilt für "neue Kraftfahrzeuge." (Bestimmte begrenzten Schutz können gebrauchte Fahrzeuge gelten, wie in Abschnitt 2 beschrieben.) Der Begriff "neues Kraftfahrzeug" beinhaltet nicht nur neue Kraftfahrzeuge, sondern auch Demonstranten, die Chassis, Fahrgestell mit Fahrerhaus und Antrieb eines neuen Reisemobils, und jeder anderen Kraftfahrzeug mit einem Hersteller das neue Auto Garantie verkauft. Zum Beispiel wäre eine zwei Jahre alte Gebrauchtwagen mit den restlichen 1 Jahr Teil eines Herstellers Drei-Jahres-Neuwagengarantie verkauft als ein neues Kraftfahrzeug behandelt werden. Der Begriff "neues Kraftfahrzeug" jedoch nicht enthalten Motorräder oder ausschließlich Offroad-Fahrzeugen.

2. Abdeckung der Fahrzeuge, die nicht "Neu"

   Obwohl die besonderen Bestimmungen oben diskutierten gelten für neue Kraftfahrzeuge, hat Song-Beverly viele allgemeine Regeln, die auf allen Konsumgütern mit einer ausdrücklichen schriftlichen Garantie verkauft werden. Als Ergebnis gibt es wichtige Versicherungsschutz für Motorräder, die Wohnräume eines Wohnmobils, gebrauchte Fahrzeuge mit einem Händler die ausdrückliche schriftliche Garantie verkauft, "Zitrone" Fahrzeuge vom Hersteller zurückgekauft und verkaufte, um den Verbrauchern eine ausdrückliche schriftliche Garantie für den Defekt, und Fahrzeuge mit einem Service-Vertrag verkauft.
   Eine vollständige Beschreibung der Gewährleistungsrechte ist nicht Gegenstand dieser Nachricht, aber Sie sollten sich bewusst sein, dass die Berichterstattung nicht identisch ist mit der Abdeckung für neue Kraftfahrzeuge. Zum Beispiel ist ein Garant, die nicht ein Consumer-Produkt auf seine ausdrückliche Garantie übereinstimmt innerhalb einer angemessenen Anzahl von Versuchen ist verpflichtet, die Ware ersetzen oder den Kaufpreis erstatten, abzüglich eines dem Verbraucher zuzurechnen ist zu verwenden. Im Gegensatz zu den besonderen Vorschriften für neue Kraftfahrzeuge, jedoch gibt es keine feste Formel für die Bestimmung der Gebühr für die Verbraucher zu verwenden, bevor die Entdeckung des Mangels und der Lemon Law Vermutung nicht zutrifft.
   Für eine vollständige Beratung über Ihre Rechte, sollten Sie Ihren eigenen Anwalt.

California Lemon Law

California Lemon Laws and the federal Lemon Law (the Magnuson-Moss Warranty Act) provide for compensation to California consumers of defective automobiles and trucks  and other vehicles and products including motorcycles, RV’s, boats, computers and other consumer appliances and products. To qualify under the California Lemon Law or the federal Lemon Law, you must generally have a product that suffered multiple repair attempts under the manufacturer’s factory warranty. Lemon Law compensation can include a refund, replacement or cash compensation. If you think you qualify for a Lemon Law, click here for a free California Lemon Law case review or for an immediate evaluation, simply fax your repair records to 866-773-6152. An experienced Lemon Law attorney will personally review your inquiry and records and quickly contact you for a free consultation.
For other useful California Lemon Law information, click here to visit the California section of our State Lemon Laws Statutes and Guide pages. Or just keep reading below for the entire California Lemon Law, or click here to read the federal lemon law.

California Lemon Law

Civil Code Section 1793.22 - 1793.26
Sale Warranties
Tanner Consumer Protection Act
Used Car Disclosures

---

Note: As of January 1, 2001, under California Lemon Law, a vehicle is considered a Lemon if it fails two attempts at repairing life-threatening defects.

---

California Lemon Law 1793.22.

(a) This section shall be known and may be cited as the Tanner Consumer Protection Act.
(b) It shall be presumed that a reasonable number of attempts have been made to conform a new motor vehicle to the applicable express warranties if, within 18 months from delivery to the buyer or 18,000 miles on the odometer of the vehicle, whichever occurs first, either

(1) the same nonconformity has been subject to repair four or more times by the manufacturer or its agents and the buyer has at least once directly notified the manufacturer of the need for the repair of the nonconformity or
(2) the vehicle is out of service by reason of repair of nonconformities by the manufacturer or its agents for a cumulative total of more than 30 calendar days since delivery of the vehicle to the buyer. The 30-day limit shall be extended only if repairs cannot be performed due to conditions beyond the control of the manufacturer or its agents. The buyer shall be required to directly notify the manufacturer pursuant to paragraph (1) only if the manufacturer has clearly and conspicuously disclosed to the buyer, with the warranty or the owner's manual, the provisions of this section and that of subdivision (d) of Section 1793.2, including the requirement that the buyer must notify the manufacturer directly pursuant to paragraph (1). This presumption shall be a reputable presumption affecting the burden of proof, and it may be asserted by the buyer in any civil action, including an action in small claims court, or other formal or informal proceeding.

(c) If a qualified third-party dispute resolution process exists, and the buyer receives timely notification in writing of the availability of that qualified third-party dispute resolution process with a description of its operation and effect, the presumption in subdivision (b) may not be asserted by the buyer until after the buyer has initially resorted to the qualified third-party dispute resolution process as required in subdivision (d). Notification of the availability of the qualified third-party dispute resolution process is not timely if the buyer suffers any prejudice resulting from any delay in giving the notification. If a qualified third-party dispute resolution process does not exist, or if the buyer is dissatisfied with that third-party decision, or if the manufacturer or its agent neglects to promptly fulfill the terms of the qualified third-party dispute resolution process decision after the decision is accepted by the buyer, the buyer may assert the presumption provided in subdivision (b) in an action to enforce the buyer's rights under subdivision (d) of Section 1793.2. The findings and decision of a qualified third-party dispute resolution process shall be admissible in evidence in the action without further foundation. Any period of limitation of actions under any federal or California laws with respect to any person shall be extended for a period equal to the number of days between the date a complaint is filed with a third-party dispute resolution process and the date of its decision or the date before which the manufacturer or its agent is required by the decision to fulfill its terms if the decision is accepted by the buyer, whichever occurs later.
(d) A qualified third-party dispute resolution process shall be one that does all of the following:

(1) Complies with the minimum requirements of the Federal Trade Commission for informal dispute settlement procedures as set forth in Part 703 of Title 16 of the Code of Federal Regulations, as those regulations read on January 1, 1987.
(2) Renders decisions which are binding on the manufacturer if the buyer elects to accept the decision.
(3) Prescribes a reasonable time, not to exceed 30 days after the decision is accepted by the buyer, within which the manufacturer or its agent must fulfill the terms of its decisions.
(4) Provides arbitrators who are assigned to decide disputes with copies of, and instruction in, the provisions of the Federal Trade Commission's regulations in Part 703 of Title 16 of the Code of Federal Regulations as those regulations read on January 1, 1987, Division 2 (commencing with Section 2101) of the Commercial Code, and this chapter.
(5) Requires the manufacturer, when the process orders, under the terms of this chapter, either that the nonconforming motor vehicle be replaced if the buyer consents to this remedy or that restitution be made to the buyer, to replace the motor vehicle or make restitution in accordance with paragraph (2) of subdivision (d) of Section 1793.2.
(6) Provides, at the request of the arbitrator or a majority of the arbitration panel, for an inspection and written report on the condition of a nonconforming motor vehicle, at no cost to the buyer, by an automobile expert who is independent of the manufacturer.
(7) Takes into account, in rendering decisions, all legal and equitable factors, including, but not limited to, the written warranty, the rights and remedies conferred in regulations of the Federal Trade Commission contained in Part 703 of Title 16 of the Code of Federal Regulations as those regulations read on January 1, 1987, Division 2 (commencing with Section 2101) of the Commercial Code, this chapter, and any other equitable considerations appropriate in the circumstances. Nothing in this chapter requires that, to be certified as a qualified third-party dispute resolution process pursuant to this section, decisions of the process must consider or provide remedies in the form of awards of punitive damages or multiple damages, under subdivision (c) of Section 1794, or of attorneys' fees under subdivision (d) of Section 1794, or of consequential damages other than as provided in subdivisions (a) and (b) of Section 1794, including, but not limited to, reasonable repair, towing, and rental car costs actually incurred by the buyer.
(8) Requires that no arbitrator deciding a dispute may be a party to the dispute and that no other person, including an employee, agent, or dealer for the manufacturer, may be allowed to participate substantively in the merits of any dispute with the arbitrator unless the buyer is allowed to participate also. Nothing in this subdivision prohibits any member of an arbitration board from deciding a dispute.
(9) Obtains and maintains certification by the Department of Consumer Affairs pursuant to Chapter 9 (commencing with Section 472) of Division 1 of the Business and Professions Code.

(e) For the purposes of subdivision (d) of Section 1793.2 and this section, the following terms have the following meanings:

(1) "Nonconformity" means a nonconformity which substantially impairs the use, value, or safety of the new motor vehicle to the buyer or lessee.
(2) "New motor vehicle" means a new motor vehicle that is used or bought for use primarily for personal, family, or household purposes.
"New motor vehicle" also means a new motor vehicle that is bought or used for business and personal, family, or household purposes by a person, including a partnership, limited liability company, corporation, association, or any other legal entity, to which not more than five motor vehicles are registered in this state. "New motor vehicle" includes the chassis, chassis cab, and that portion of a motor home devoted to its propulsion, but does not include any portion designed, used, or maintained primarily for human habitation, a dealer-owned vehicle and a "demonstrator" or other motor vehicle sold with a manufacturer's new car warranty but does not include a motorcycle or a motor vehicle which is not registered under the Vehicle Code because it is to be operated or used exclusively off the highways. A demonstrator is a vehicle assigned by a dealer for the purpose of demonstrating qualities and characteristics common to vehicles of the same or similar model and type.
(3) "Motor home" means a vehicular unit built on, or permanently attached to, a self-propelled motor vehicle chassis, chassis cab, or van, which becomes an integral part of the completed vehicle, designed for human habitation for recreational or emergency occupancy.

(f)

(1) Except as provided in paragraph (2), no person shall sell, either at wholesale or retail, lease, or transfer a motor vehicle transferred by a buyer or lessee to a manufacturer pursuant to paragraph (2) of subdivision (d) of Section 1793.2 or a similar statute of any other state, unless the nature of the nonconformity experienced by the original buyer or lessee is clearly and conspicuously disclosed to the prospective buyer, lessee, or transferee, the nonconformity is corrected, and the manufacturer warrants to the new buyer, lessee, or transferee in writing for a period of one year that the motor vehicle is free of that nonconformity.
(2) Except for the requirement that the nature of the nonconformity be disclosed to the transferee, paragraph (1) does not apply to the transfer of a motor vehicle to an educational institution if the purpose of the transfer is to make the motor vehicle available for use in automotive repair courses.

California Lemon Law 1793.23.

(a) The Legislature finds and declares all of the following:

(1) That the expansion of state warranty laws covering new and used cars has given important and valuable protection to consumers.
(2) That, in states without this valuable warranty protection, used and irrepairable motor vehicles are being resold in the marketplace without notice to the subsequent purchaser.
(3) That other states have addressed this problem by requiring notices on the title of these vehicles or other notice procedures to warn consumers that the motor vehicles were repurchased by a dealer or manufacturer because the vehicle could not be repaired in a reasonable length of time or a reasonable number of repair attempts or the dealer or manufacturer was not willing to repair the vehicle.
(4) That these notices serve the interests of consumers who have a right to information relevant to their buying decisions.
(5) That the disappearance of these notices upon the transfer of title from another state to this state encourages the transport of "lemons" to this state for sale to the drivers of this state.

(b) This section and Section 1793.24 shall be known, and may be cited as, the Automotive Consumer Notification Act.
(c) Any manufacturer who reacquires or assists a dealer or lien holder to reacquire a motor vehicle registered in this state, any other state, or a federally administered district shall, prior to any sale, lease, or transfer of the vehicle in this state, or prior to exporting the vehicle to another state for sale, lease, or transfer if the vehicle was registered in this state and reacquired pursuant to paragraph (2) of subdivision (d) of Section 1793.2, cause the vehicle to be re-titled in the name of the manufacturer, request the Department of Motor Vehicles to inscribe the ownership certificate with the notation "Lemon Law Buyback," and affix a decal to the vehicle in accordance with Section 11713.12 of the Vehicle Code if the manufacturer knew or should have known that the vehicle is required by law to be replaced, accepted for restitution due to the failure of the manufacturer to conform the vehicle to applicable warranties pursuant to paragraph (2) of subdivision (d) of Section 1793.2, or accepted for restitution by the manufacturer due to the failure of the manufacturer to conform the vehicle to warranties required by any other applicable law of the state, any other state, or federal law.
(d) Any manufacturer who reacquires or assists a dealer or lien holder to reacquire a motor vehicle in response to a request by the buyer or lessee that the vehicle be either replaced or accepted for restitution because the vehicle did not conform to express warranties shall, prior to the sale, lease, or other transfer of the vehicle, execute and deliver to the subsequent transferee a notice and obtain the transferee's written acknowledgment of a notice, as prescribed by Section 1793.24.
(e) Any person, including any dealer, who acquires a motor vehicle for resale and knows or should have known that the vehicle was reacquired by the vehicle's manufacturer in response to a request by the last retail owner or lessee of the vehicle that it be replaced or accepted for restitution because the vehicle did not conform to express warranties shall, prior to the sale, lease, or other transfer, execute and deliver to the subsequent transferee a notice and obtain the transferee's written acknowledgment of a notice, as prescribed by Section 1793.24.
(f) Any person, including any manufacturer or dealer, who sells, leases, or transfers ownership of a motor vehicle when the vehicle's ownership certificate is inscribed with the notation "Lemon Law Buyback" shall, prior to the sale, lease, or ownership transfer of the vehicle, provide the transferee with a disclosure statement signed by the transferee that states:

"THIS VEHICLE WAS REPURCHASED BY ITS MANUFACTURER DUE TO A DEFECT IN THE VEHICLE PURSUANT TO CONSUMER WARRANTY LAWS. THE TITLE TO THIS VEHICLE HAS BEEN PERMANENTLY BRANDED WITH THE NOTATION "LEMON LAW BUYBACK"."

(g) The disclosure requirements in subdivisions (d), (e), and (f) are cumulative with all other consumer notice requirements and do not relieve any person, including any dealer or manufacturer, from complying with any other applicable law, including any requirement of subdivision (f) of Section 1793.22.
(h) For purposes of this section, "dealer" means any person engaged in the business of selling, offering for sale, or negotiating the retail sale of, a used motor vehicle or selling motor vehicles as a broker or agent for another, including the officers, agents, and employees of the person and any combination or association of dealers.

California Lemon Law 1793.24.

(a) The notice required in subdivisions (d) and (e) of Section 1793.23 shall be prepared by the manufacturer of the reacquired vehicle and shall disclose all of the following:

(1) Year, make, model, and vehicle identification number of the vehicle.
(2) Whether the title to the vehicle has been inscribed with the notation "Lemon Law Buyback."
(3) The nature of each nonconformity reported by the original buyer or lessee of the vehicle.
(4) Repairs, if any, made to the vehicle in an attempt to correct each nonconformity reported by the original buyer or lessee.

(b) The notice shall be on a form 8 1/2 x 11 inches in size and printed in no smaller than 10-point black type on a white background.
The form shall only contain the following information prior to it being filled out by the manufacturer:
WARRANTY BUYBACK NOTICE
(Check One)
/__/ This vehicle was repurchased by the vehicle's manufacturer after the last retail owner or lessee requested its repurchase due to the problem(s) listed below.
/__/ THIS VEHICLE WAS REPURCHASED BY ITS MANUFACTURER DUE TO A DEFECT IN THE VEHICLE PURSUANT TO CONSUMER WARRANTY LAWS. THE TITLE TO THIS VEHICLE HAS BEEN PERMANENTLY BRANDED WITH THE NOTATION "LEMON LAW BUYBACK." Under California law, the manufacturer must warrant to you, for a one year period, that the vehicle is free of the problem(s) listed below.

___________________________________________________________
|V.I.N.                     |Year    | Make     | Model     |
|___________________________|________|__________|___________|
 ___________________________________________________________
|  Problem(s) Reported by   |   Repairs Made, if any, to    |
|      Original Owner       |  Correct Reported Problem(s)  |
|                           |                               |
|                           |                               |
|                           |                               |
|                           |                               |
|                           |                               |
|                           |                               |
|                           |                               |
|                           |                               |
|                           |                               |
|___________________________|_______________________________|


Signature of Manufacturer                       Date

_______________________________________________ ____________


Signature of Dealer(s)                          Date

_______________________________________________ ____________

_______________________________________________ ____________

_______________________________________________ ____________


Signature of Retail Buyer or Lessee             Date

_______________________________________________ ____________

_______________________________________________ ____________

(c) The manufacturer shall provide an executed copy of the notice to the manufacturer's transferee. Each transferee, including a dealer, to whom the motor vehicle is transferred prior to its sale to a retail buyer or lessee shall be provided an executed copy of the notice by the previous transferor.

California Lemon Law 1793.25.

(a) Notwithstanding Part 1 (commencing with Section 6001) of Division 2 of the Revenue and Taxation Code, the State Board of Equalization shall reimburse the manufacturer of a new motor vehicle for an amount equal to the sales tax which the manufacturer pays to or for the buyer when providing a replacement vehicle pursuant to subparagraph (A) of paragraph (2) of subdivision (d) of Section 1793.2 or includes in making restitution to the buyer pursuant to subparagraph (B) of paragraph (2) of subdivision (d) of Section 1793.2, when satisfactory proof is provided that the retailer of the motor vehicle for which the manufacturer is making restitution has reported and paid the sales tax on the gross receipts from the sale of that motor vehicle and the manufacturer provides satisfactory proof that it has complied with subdivision (c) of Section 1793.23. The State Board of Equalization may adopt rules and regulations to carry out, facilitate compliance with, or prevent circumvention or evasion of, this section.
(b) Nothing in this section shall in any way change the application of the sales and use tax to the gross receipts and the sales price from the sale, and the storage, use, or other consumption, in this state or tangible personal property pursuant to Part 1 (commencing with Section 6001) of Division 2 of the Revenue and Taxation Code.
(c) The manufacturer's claim for reimbursement and the board's approval or denial of the claim shall be subject to the provisions of Article 1 (commencing with Section 6901) of Chapter 7 of Part 1 of Division 2 of the Revenue and Taxation Code, except Sections 6902.1, 6903, 6907, and 6908 thereof, insofar as those provisions are not inconsistent with this section.

California Lemon Law 1793.26.

(a) Any automobile manufacturer, importer, or distributor who reacquires, or who assists a dealer or lien holder in reacquiring, a motor vehicle, whether by judgment, decree, arbitration award, settlement agreement, or voluntary agreement, is prohibited from doing either of the following:

(1) Requiring, as a condition of the reacquisition of the motor vehicle, that a buyer or lessee who is a resident of this state agree not to disclose the problems with the vehicle experienced by the buyer or lessee or the non-financial terms of the reacquisition.
(2) Including, in any release or other agreement, whether prepared by the manufacturer, importer, distributor, dealer, or lien holder, for signature by the buyer or lessee, a confidentiality clause, gag clause, or similar clause prohibiting the buyer or lessee from disclosing information to anyone about the problems with the vehicle, or the non-financial terms of the reacquisition of the vehicle by the manufacturer, importer, distributor, dealer, or lien holder.

(b) Any confidentiality clause, gag clause, or similar clause in such a release or other agreement in violation of this section shall be null and void as against the public policy of this state.
(c) Nothing in this section is intended to prevent any confidentiality clause, gag clause, or similar clause regarding the financial terms of the reacquisition of the vehicle.

Arbitration Certification Program:

Lemon Law:

The California Lemon Law covers new and used vehicles sold or leased in California that come with the manufacturer’s new vehicle warranty. If the manufacturer or dealer can’t repair a serious warranty defect in your vehicle after a “reasonable” number of repair attempts, the manufacture must either replace the vehicle, or refund its purchase price (whichever you prefer).

Arbitration Certification Program:

The ACP certifies and monitors third-party arbitration programs of participating automobile manufacturers to ensure compliance with CA laws and regulations related to new vehicle warranties and manufacturer sponsored arbitration programs.

One of the ACP's goals is to promote the use of alternative dispute resolution in lieu of court action and reduce the strain and cost on consumers and the court system.

Problem and Service Needed

California's Lemon Law Arbitration

• Information on the Arbitration Process
• Certified manufacturers
• Laws and Regulations
• Apply for Arbitration Process
• Motorcycles/off road vehicles
• Towables/5th Wheel
• Used car with no manufacturer warranty

Auto Repair/Body Shop/Smog

• Department of Consumer Affairs, Bureau of Automotive Repair

Failure to Honor Warranties/Contracts/Sales Dispute/Dealer Fraud

• New Motor Vehicle Board
• Bureau of Automotive Repair
• DMV,Bureau of Investigation
• District Attorney's Office
• DMV Investigation for Used Car Dealers

Electronics/Extended Service Contracts/Warranties

• Bureau of Electronic and Appliance Repair
• Department of Insurance

Student Loan Consolidation Guide

College Graduates Are Drowning In Debt

College graduates are leaving school with more debt now than ever. Some students have had trouble for a variety of reason to secure Federal loans, more of those college graduates turned to private lenders, often from multiple...
Read more of this article

---

Student Loan Consolidation – Will it Affect Your Credit?

Student loan consolidation is a smart way to manage your student loan debt. It is also a great way to simplify your finances. Managing multiple due dates, fees and loan payments can not only be stressful, but it sets you up...
Read more of this article

---

Type of Federal Loans that can Be Consolidated?

College graduates may find repaying their federal student loans to be a difficult burden while entering the professional workforce. Often, the jobs college graduates land after completing their degrees pay substantially less...
Read more of this article

---

How to Consolidate Student Loans

Higher education can be a valuable tool improving one’s future career options, income, and happiness. A college education can be expensive, with tuition, fees, books, and housing adding up to at least $80,000 for a bachelor’s...
Read more of this article

---

Five Easy Steps to Consolidate your Federal Student Loans

If you are considering Federal Student Loan Consolidation your first step is to consider whether or not your student loans can be consolidated into a federal loan. Private loans do not allow for consolidation of federal loans,...
Read more of this article

---

Facts About Student Loan Consolidation

For the past few decades, the need to go to college and obtain higher level of education has become a much more significant necessity. Many studies have pointed to the fact that college educated people have an easier time...
Read more of this article

---

Compare Student Loan Consolidation – Important Tips

Before you begin the process of consolidating your student loans it is important you understand consolidation and compare the differences in the options available to you. Consolidating student loans is a means of combining...
Read more of this article

---

Private Student Loan Consolidation – A Great Option for Some!

If you are struggling to pay multiple student loans, you are not alone! Therefore, the option to consolidate student loans is one of the more important decisions you will make regarding your student loan debt. Which type...
Read more of this article

---

Lowering Your Debt by Consolidating Student Loans

Students loans may be necessary to achieve your educational goals, but they can also become a financial hardship. Depending on the type of loan you receive, you will be able to take advantage of grace periods, forbearance...
Read more of this article

---

Consolidating Student Loans – Requires Proper Timing

Consolidating student loans is an important step towards managing your debt and being able to pay off your student loans without the risk of default. When you consolidate loans the result is a simplified loan repayment and...
Read more of this article

IT Security Event Management

3.3 Core Engine
The core engine carries out the processing of the collected events and provides a response according to business rules. Event processing includes aggregation, correlation, and prioritization.
•
•
•
•
•
•
•
•
Aggregation is the act of gathering similar events and combining them into one event. Aggregation helps the SEM system avoid forwarding/receiving duplicate events.
Correlation security sub-events generated during the data mining stage are linked, which enables to reconstruct a security event.
Prioritization determines the order in which the security analysts should handle the events based on threat assessment.
Event processing depends on the input from the following:
Business rules, decision trees define the rules that govern correlation and response logistics.
The Historical Database provides information on previously collected events.
The Environmental Database provides information on the assets and their configuration inside the enterprise environment. Such as which machine is running what software, how critical they are, what is the associated risk, who are the users and what are their roles.
The core engine also contains a set of tools that can be used to respond to events. These actions are sometimes executed automatically as defined by business rules and other times, the user must initiate the response. At times, the event-processing engine may lack the necessary information to make a decision and needs to execute a tool to gather additional information for correlation and prioritization.
Different types of tools include:
Actions executed on point products, which include but are not limited to the following: blocking a firewall port, initiating “syslog” backup, or commands such as “traceroute” or “whois.” These actions are executed by running a script or a program.
Third-party applications such as vulnerability assessment tools that are tied to remediation databases.
3.4 User Interface
The user interface module describes how the users interact with the system. The interface is used to monitor security alerts, as well as for performing system administration tasks. Additionally, it can interface with other management tools such as HP Openview, IBM’s Tivoli to gather and report some of the same information.
This information gathering and reporting depends on the enterprise security policy and security network operations procedures.
In summary the primary objectives of all the modules interacting together are to reduce the number of alerts that must be evaluated. They do that by automating the evaluation of a significant percentage of security data, and also by reducing the labor associated with security log analysis.
4.0 Event Workflow
The event workflow of an security event manager is very crucial in deciphering the right information. Not only does the right information need to be collected but the appropriate rule sets need to be applied to the data to determine action to be taken. The following illustration depicts how a stream of events should flow: MonitoredElementAssessment/PredictionRuleSetResponseManagementSends EventsConsultsWorkFlowConsultsCategorizes EventDirects ActionEvaluatesEvaluatesEnforces RulesPrevents ActionInformPreventEnforce
Once the data has been collected from the monitored elements the information is examined by the Assessment and Prediction capabilities of a SEM system. Here the Rule Set is consulted to determine if the event information is of significance. If so, the event information is categorized for Response Management, which consults the predefined work flows to determine what response actions should be taken. The most common response are the following:
At the Inform level, response is directed to an appropriate analyst for further review. After review, the analyst may take separate action to amend either the Rule Set or the Work Flow to improve the response of the SEM system should these events re-occur. Hence this is also where the knowledge base is propagated for future reference.
The Enforce level, identifies the need to force compliance with the predefined policies of the enterprise and takes direct action to do so. A simple example might be that the SEM system detects that a password or other system secret has not been changed within the prescribed period of time and force a password change.
At the Prevent level, a serious risk or threat has been detected by the SEM system. Using the predefined workflow for such occurrences, the SEM rule set reacts to minimize if not eliminate the risk. For example, if a SEM system detected an intrusion in progress on a particular device, it could act to shut the device down pending further investigation by the appropriate analysts.
5.0 SEM System Features
Most SEM systems available in the market have common baseline, which should include event collection, aggregation, correlation, analysis and response. A comprehensive selection criterion for a SEM system is listed below. These are features that should be evaluated or considered when selecting a SEM vendor. Appendix A lists some of the more popular SEMs vendors that satisfy these features.
Features
Monitoring of security infrastructure components (hardware and software).
Analysis of information reported by / from security infrastructure components.
Local response to events in spite of network failures.
Guaranteed (but possibly delayed) synchronization of events and responses between local and central components.
Monitoring of network systems.
Monitoring of building control systems such as physical access and fire control.
Monitoring of security systems.
Management of local rules controlling event responses.
Management of central rules controlling event responses.
Management of security workflows.
Management of escalation in workflows.
Post mortem analysis of events.
Secure, real-time and collaborative alternative communications channel with enterprise security personnel in response to threats or attacks.
Features
Threat prediction and forecasting.
Detection, identification and reporting of issues and events.
Collection and correlation (connect-the-dots) of issues and events from sources throughout the enterprise.
Logging of administrative actions.
Management of enterprise assets.
Automated triggering of actions / reactions to protect assets.
Automated, rule-based escalation to insure timely resolution.
Definition and reporting of Key Performance Indicators (KPI’s)
Prepared (static) reporting of events.
Ad hoc reporting of events to support forensic analysis and executive decision.
Statistical quality control (SQC) reports.
Visualization (both logically and physically) “reports.”
Communication with and real-time control of systems protecting enterprise assets.
Portal to external security and system information.
Reviewing local compliance to security policies.
Incident reports required by regulatory bodies.
Network infrastructure management.
Monitoring attacks and responses in real-time.
Centralized configuration, audit logging and operational logging.
Framework / toolkit for creating agents.
Components that execute on many different enterprise operating systems.
Role-based authorization.
History or roles played by subjects.
Responses based on time horizon (short-term and long-term).
Management of enterprise policies.
Support of custom agents built by the enterprise.
Enforcement of enterprise policies.
Integration with enterprise provisioning systems.
Provisioning of employees.
Features
Integrity of application internal data.
Risk analysis
Contingency planning
Security planning
Migration planning or implementation of enterprise system updates, upgrades, or enhancements
Data exchange with Intrusion Detection Systems (IDS)
Automated generation of assurance documentation
Simulated security training
Operational advisories or alerts from monitored elements
However, in addition to the features listed, it is important to note the following constraints: a SEM system is a distributed heterogeneous management system. As such, it shares some of the same strengths and weaknesses of diverse distributed systems. At the foundation it can aggregate events and can improve efficiency and lower security risk. But on the other hand they are complex to deploy, require interoperability of many devices from different vendors and could be expensive to maintain. Furthermore, the human cost to deploy, maintain and use a SEM system is significant. Not only do the systems need to be configured and deployed, but security personnel need to be trained to use the system and at a minimum follow-up on “emergency” alerts. Needless to say, the security analyst is a crucial part of a SEM system and without their involvement; the SEM system would be ineffective.
6.0 Case Study 1
To better understand how a SEM system works, two case studies have been presented:
The W32.Sasser.Worm hit the Internet the first week of May 2004. The intent of the worm was to exploit the vulnerability described in Microsoft Security Bulletin MS04-011. It began to infect corporate networks and spread by scanning the randomly selected IP addresses of vulnerable systems.
The way the virus spread was by determining the local machine's IP address. It did this by looping through every address returned by gethostbyname for the local hostname. If it found a publicly routable Internet address (non-RFC1918) it would use that address. If none were found it would use any private subnet address (RFC1918 or 127.0.0.1) it found. If no address was returned it would use 127.0.0.1
If successful, the exploit would open a shell on the remote system on TCP port 9996 and attempt to copy the worm via an FTP transfer.
A SEM system would have detected the following:
• Scanning of IP address would have been a violation of most corporate Firewalls and hence would have raised in an alert in the SEM Core Engine.
• FTP connects to remote hosts outside the corporate network would also be deemed as a violation of security policy and recorded as a security event by the SEM core.
• Activity on port 9996 could have also triggered a security incident based on the SEM rule set.
These three events by themselves may have not been interpreted as a malicious attack. But once correlated the IT SEM would have alerted the system admin of a possible attack. It would have observed that the host scanning for IP addresses was also the host attempting FTP connects and all on the same port 9996.
Thus an organization with a SEM deployed would have detected the Saaser worm at a faster pace and stopped the spread of the virus by configuring the Antivirus gateways at the internet router to remediate the attack.
Case Study 2
The Attack – A hacker scans the public network looking for active systems to attack. The scan detects a firewall and web server as active and responsive systems. The attacker attempts to scan both systems to get a listing of available services in order to identify potential vulnerabilities. Although no vulnerability is found on the Firewall, but the HTTP service is located on the web server. Having access to the HTTP service, the attacker successfully exploits vulnerability and executes a Trojan on the web server which then establishes an outbound connection to the attacker.
The Response – The IT SEM system detects from the firewall logs that an attacker has performed a ping sweep against an internal system. The SEM raises a warning message indicating suspicious activity. Next the SEM system detects several port scans on the internal network. The port scans and pings cause several IDS alerts to be generated which in turn are detected by the SEM system. The port scans are correlated with the previous ping sweep and IDS alerts and conclude that a system has been compromised. The event is escalated to an “emergency” status and responds with an appropriate action by the SEM system which could be either in the form of a notification or a service/port shutdown. Thus in this case the SEM system would have prevented the compromise of an internal system by an attacker.
7.0 Cost/Benefit
Estimated budget to deploy a IT SEM system starts from the $100K range and goes up. The core SEM engine starts in the $50-60K range for the server software. The agents which aggregate the data from the various devices cost anywhere between $400-900 per agent. Add an additional $15K for the hardware with appropriate disk space, memory and bandwidth connectivity for log consolidation and archiving. Next include 7-10 days of professional services at $1000/per day to design, deploy and customize the SEM system to individual corporate requirements.
In addition to the hardware and software, one must also consider the cost of security personnel to monitor and manage the system which in today’s high tech market is in the $80K+ range. Add to this training, replacement, separation of duties and career path concerns and you are well into the $140K range.
Although these cost combined together may seem high, but the overall cost of deploying a SEM should be gauged against the loss of value resulting from a compromise of corporate information assets and downtime associated with a malicious attack or the prevention of such attacks.
8.0 Conclusion
Information security administrators face numerous challenges today. Rapidly increasing attacks through the Internet, coupled with persistent threat of insider abuse, demand the attention of security staff on a daily basis. However, as corporations deploy more and more security solutions to protect against these threats, the amount of data being generated by these solutions has become overwhelming. In order to adequately protect corporate information assets on a 7x24 basis, information security staff must constantly analyze security data from various security devices, such as firewalls, Intrusion Detection Systems (IDS’s), to identify and counteract security attacks in real time.
The IT Security Event Manager market is driven by enterprises' needs to filter, aggregate and correlate security data from heterogeneous sources for real-time monitoring and historical analysis. Primary adopters of this technology tend to be large organizations with a complex IT infrastructure and dedicated IT security staff.
Security Event Manager provides an enterprise-wide solution for security monitoring and administration. It reduces the amount of time security officers need to spend to detect attacks and vulnerabilities on the network by reducing the amount of information that needs to be processed. As a result enterprise assets are better protected against threats.
When selecting a IT SEM vendor it is important to look at functional capabilities with specific focus given to ease of deployment, integrated vulnerability management tools, and monitoring and reporting functionality for regulatory and audit compliance.
In short the Security is an investment, not an expense. The challenge is to get this point across to upper management. Investing in computer and network security measures that meet changing business requirements and risks makes it possible to satisfy changing business requirements without hurting the business' viability.
Bibliography
Technology evaluation of Netforensics, Micromuse, CA, Intellitactics and open service.
http://www.infoworld.com/article/03/01/10/030113fenexttci_1.html
http://www.computerworld.com/securitytopics/security/story/0,10801,83978,00.html
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html
About the Author: Yahya Mehdizadeh, was the director of Managed Security Services for SchlumbergerSema where he had responsibility in defining the tools, technology and processes for implementing an enterprise wide managed security service including the security administration in the 2004 Athens Olympics. He can be reached at Yahya@mehdizadeh.org
Appendix A
• Arcsight Inc. TruThreat Risk Correlation Engine: Combines threat-severity information with asset data to determine and prioritize risk. Allows administrators to set and monitor policies according to asset priorities. Arcsight is considered to be a leader in vulnerability assessment data integration and visualization.
• Computer Associates International Inc. eTrust security management software: Product suite comprising of identity management, access management and threat management components. An eTrust security center provides centralized management of these functions.
• e-Security Inc. eSecurity Security Event Manager: Consists of three modules -- Sentinel, Wizard and Advisor -- for gathering and analyzing and centralized reporting of security event data. e-Security has technology and sales relationships with Hewlett-Packard.
• IBM Tivoli Security Event Manager: Allows users to automate responses to security events in addition to helping monitor and track security events.
• Intellitactics Inc. Network Security Manager: Does security event correlation from multivendor security devices and nonsecurity information sources and provides a graphical visualization of threats, anomalies and trends. The company is considered to be a leader in threat visualization and vulnerability assessment data integration.
• netForensics Inc. Security Incident Manager: Uses a three-tier architecture. Agents gather data from security systems, Engines aggregate and correlate the data, and the Real-Time Console presents the data. NetForensics has a rather large installed base mainly as a result of its strong relationship with Cisco Systems.
• NetIQ Inc. VigilEnt Integrated Security Management: A product suite for policy and compliance management, administration and identity management, vulnerability and configuration management, and incident and event management.
• Symantec Corp. Symantec Security Management System: Combines a security incident manager component for consolidating and correlating security information from disparate systems, an event-manager for antivirus software and a security manager policy-compliance tool.

Event management security

Security event manager

From Wikipedia, the free encyclopedia

A security event manager (SEM) (acronyms SIEM and SIM) is a computerized tool used on enterprise data networks to centralize the storage and interpretation of logs, or events, generated by other software running on the network.^[1][2]
SEMs are a relatively new idea, pioneered in 1999 by a small company called E-Security, and in 2010 are still evolving rapidly. Just a year or two ago they were called security information managers (SIMs) and are also called security information and event managers (SIEMs). An adjacent, but somewhat different market also exists for Log Management; although these two fields are closely related, Log Management typically focuses on collection and storage of data whereas SEM focuses on data analysis. Some vendors specialize in one market or the other and some do both, or have complementary products.
Many systems and applications which run on a computer network generate events which are kept in event logs. These logs are essentially lists of activities that occurred, with records of new events being appended to the end of the logs as they occur. Protocols, such as Syslog and SNMP, can be used to transport these events, as they occur, to logging software that is not on the same host on which the events are generated. The better SEMs provide a flexible array of supported communication protocols to allow for the broadest range of event collection.
It is beneficial to send all events to a centralized SEM system for the following reasons:

• Access to all logs can be provided through a consistent central interface
• The SEM can provide secure, forensically sound storage and archival of event logs (this is also a classic Log Management function)
• Powerful reporting tools can be run on the SEM to mine the logs for useful information
• Events can be parsed as they hit the SEM for significance, and alerts and notifications can be immediately sent out to interested parties as warranted
• Related events which occur on multiple systems can be detected which would be impossible to detect if each system had a separate log
• Events which are sent from a system to a SEM remain on the SEM even if the sending system fails or the logs on it are accidentally or intentionally erased

In addition to collecting and storing data, SEMs distinguish themselves from simpler Log Management tools by providing a deeper level of event analysis. This may include attaching contextual information, such as host information (value, owner, location, etc), identity information (user info related to accounts referenced in the event like first/last name, workforce ID, manager's name, etc), and so forth. This contextual information can be leveraged to provide better correlation and reporting capabilities.
SEMs can also integrate with external remediation, ticketing, and workflow tools to assist with the process of incident resolution. The better SEMs will provide a flexible, extensible set of integration capabilities to ensure that the SEM will work with most customer environments.
As SEM deployments move beyond logging infrastructural events from routers, switches, servers, firewalls, and so forth, the ability to properly monitor business applications becomes crucial. Since most applications - especially those developed internally or by external software developers - do not include detailed logging it has become a challenge to incorporate this critical data into SEM products. Potential solutions to this challenge are based on network sniffing or other technologies.
SEMs are often sold to help satisfy U.S. regulatory requirements such as those of Sarbanes-Oxley, PCI-DSS, GLBA; in general the solutions these products can provide extend only to enhanced monitoring and analysis of enterprise computing activity; SEM is not a "magic bullet" for compliance but can be helpful in generating reports to support a limited set of controls.

Contents  [hide]  1 Standardization 2 See also 3 References 4 External Links

[edit] Standardization

One of the major problems in the SEM space is the difficulty in consistently analyzing event data. Every vendor, and indeed in many cases different products by one vendor, uses a different proprietary event data format and delivery method. Even in cases where a "standard" is used for some part of the chain, like Syslog, the standards don't typically contain enough guidance to assist developers in how to generate events, administrators in how to gather them correctly and reliably, and consumers to analyze them effectively.
As an attempt to combat this problem, a couple parallel standardization efforts are underway. First, The Open Group is updating their circa 1997 XDAS standard, which never made it past draft status. This new effort, dubbed XDAS v2, will attempt to formalize an event format including which data should be included in events and how it should be expressed. The XDAS v2 standard will not include event delivery standards but other standards in development by DMTF may provide a wrapper.
In addition, MITRE is also in the midst of a standardization effort called CEE that is somewhat broader in scope - it attempts to define an event structure as well as delivery methods.

[edit] See also

• Computer security incident management
• Security information management
• Comparison of network monitoring systems
• Security Information and Event Management

[edit] References

1. ^ Preparing for Security Event Management
2. ^ A Practical Application of SIM/SEM/SIEM Automating Threat Identification

[edit] External Links

• SC Magazine 2010 review and comparison of commercial SIEM products
• Gartner 2010 Magic Quadrant review and comparison of commercial SIEM products
• [1]

best anti spam appliance

Antispam appliance This site was created after making my own decision on which Antispamappliance that one of our customers bought. The result was taken after extensive tests etc. We hope that you will find the information that you need to make a good decision on which antispamappliance to buy. Appliances So what is an appliance machine. An Appliance is a machine that is built to handle a specific task. There are all sort of Appliances. We have Mailserver, Antivirus, Firewall, VPN, Backup aswell as Antispam appliances. These are all machines (standard of customfitted) installed with one objective inmind, namely to help the administrator to handle either mail, antivirus, firewall, VPN, Backup or Antispam problems without forcing the administrator to install their own machines or programs. Behavior of Appliances An appliance might act as a transparent server or in normal mode. Antispamappliances All antispam programs that is needed to run an almost spamfree environment should be included in the antispam-appliance. There are a couple of items that should be taken into consideration when acquiring an antispam appliance. We will give you information about different antispamappliances, which will help you in your tough decision. An antispamappliance is a great way of getting rid of those pesky spam mails. You wont need to make any installations, maintain any software. Everything is taken care of by the antispam appliance. Here are some of the items that you should check before taking a decision. Price of appliance Support. If you have a appliance machine, then you would proberbly want support. S check to see to what extent the organisaton where you buy the antispam appliance can fullfill your need for support. Trackrecord for the company developing the antispamappliance. Financialstability, trustworthness. Performance. How much throughput do you need. What kind of redundancy or backup do you need.

Bestantispamappliance Antispam Articles Antispam protection by Gary Gresham Eliminating Spam by Gary Gresham Spam Zombi by Niall Roche Challenge Response Spam Filters BitDefender solution adds heuristic spam filters Are You A Spam Zombie? Antispam appliances Borderware mxtreme antispamappliance MX-200 antispamappliance MX-400 antispamappliance MX-800 antispamappliance MX-1000 antispamappliance. Barracuda antispamappliance Model 200 Barracuda Model 300 Barracuda Model 400 Barracuda Model 600 and 800 Barracuda Ironport antispamappliance Symantec Brightmail antispam appliance Anti-virus appliance Antispam-links Antivirus program Virus and Malware information Exe file information DLL file information

Antispam-Appliance

Unverlangte Massen-Emails (Spam) belästigen den Empfänger nicht nur in erheblichem Maße, sie stellen durch die mögliche Verbreitung von Viren, Trojanern etc. oder durch sogenanntes "Phishing" auch ein großes Gefährdungspotential dar.

Zur Abwehr und Filterung von Spam-Mails setzt die Universität zu Lübeck eine zentrale AntiSpam-Appliance ein, mit der Emails in einem mehrstufigen Verfahren auf Viren und Spam untersucht und bewertet werden.

Stufe 1: Schon beim Verbindungsaufbau zur Email-Kommunikation wird die "Vertrauenswürdigkeit" des sendenden Email-Servers geprüft. Wird dieser als unseriös eingestuft, wird die Email garnicht erst angenommen. Auf diese Weise werden bereits über 90% der ankommenden Mails abgelehnt und gelangen von vornherein nicht in das Email-System der Universität.

Stufe 2: Die von vertrauenswürdigen Servern kommenden Mails werden angenommen und automatisch nach bestimmten Spam-Merkmalen untersucht.

Als Spam erkannte Mails werden nicht zugestellt, sondern in einer sogenannten Quarantäne abgelegt. Um 6, 9, 12, 15 und 18 Uhr erhalten die Empfänger eine Benachrichtigungs-Mail mit dem Betreff "Spam Quarantine Notification" über den Inhalt ihrer Quarantäne, sofern seit der letzten Benachrichtigung neue Spam-Mails in ihre Quarantäne gelangt sind.

Die Benachrichtigungsmails sehen wie folgt aus:

Erläuterungen:

Unter "1" sehen Sie, an welche Email-Adresse die Benachrichtung ging. Dies ist eventuell interessant, wenn Sie mehrere Uni-Mailadressen besitzen.

Mit einem Klick auf "Freigeben" (Punkt "2") können Sie die Mail direkt aus der Quarantäne freisetzen. Sie wird Ihnen dann umgehend zugestellt.

Wenn Sie sich nicht sicher sind, ob Sie die Mail freigeben möchten, können Sie sich zunächst weitere Details zu der Mail durch einen Klick auf die Betreffzeile ("3") ansehen.

Wenn Sie Ihre komplette Quarantäne ansehen möchten, klicken Sie unten rechts auf den mit "4" gekennzeichneten Link (in Klammern sehen Sie dort die Gesamtanzahl der Mails in Ihrer Quarantäne). Es öffnet sich dann ein Browserfenster mit Ihrer Quarantäne:

Hier sehen Sie alle Mails, die sich für Ihrer Email-Adresse in der Quarantäne befinden. Für alle Mails, die Sie links mit einem Haken ("1") auswählen, können Sie unter "Aktion auswählen" ("2") eine der folgenden Aktionen auswählen und mit einem Klick auf "Übermitteln" durchführen:

• "Freigeben": Die ausgewählten Mails werden aus der Quarantäne freigegeben und Ihnen umgehend zugestellt.
• "Freigeben und der Liste sicherer Absender hinzufügen": Die ausgewählten Mails werden freigegeben und zugestellt. Zudem werden zukünftig alle Mails dieser/s Absender/s nicht mehr in die Quarantäne verschoben, sondern Ihnen direkt zugestellt.
• "Löschen": Die ausgewählten Mails werden endgültig gelöscht.

Rechts oben unter "Optionen" können Sie auch direkt Email-Adressen in die "Liste sicherer Absender" eintragen oder in eine Sperrliste, falls Sie von dieser Adresse keine Mails mehr direkt empfangen möchten. Die Mails der in der Sperrliste eingetragenen Absender gelangen dann immer in die Quarantäne.

Hinweis: Alle Mails in der Quarantäne werden für einen Zeitraum von 30 Tagen aufbewahrt und danach automatisch gelöscht, wenn sie bis dahin nicht freigegeben wurden!

Weitere Hinweise finden Sie unter diesem Link:

• Handlungsempfehlung an die Anwender des DFN zur Abwehr von Spam und mit Viren behafteter Mails

Adverse Remortgage

Compare bad credit remortgage deals

Use our free service to compare adverse remortgages - when you have difficulty getting a remortgage as a result of a bad credit rating or problems with your existing mortgage lender.

If this is the case, then there are various remortgaging services available to you even if you are unable to get one from high street banks.

Advantages of remortgaging include:

• Reducing your monthly payments if you have a problem keeping up with your current outgoings
• Releasing money to spend on other things
• Enjoying a fixed rate so you know where you stand financially
• Consolidating all of your existing debts into a more manageable arrangement
• Potentially saving money by finding a discount remortgage rate
• Being able to get a remortgage despite having problems with an adverse remortgage in the past

When choosing an organisation for your remortgage, you should be aware that even though your monthly payments may decrease, you will be extending the term of your debt and the total amount that you end up repaying could be higher. There may also be various fees that they might charge, such as mortgage valuation fees, arrangement fees, exit fees, early repayment fees and legal fees.

To find the best deals, check out the rates below or fill in the enquiry form to compare the entire UK mortgage market and make sure you find the best deal for your individual circumstances.

Video will change your life

How to Add Google AdSense to Your Tumblr Blog

How to Add Google AdSense to Your Tumblr Blog

ould you like to make a bit of revenue from your blog?  Here’s how you can make your content work for you by adding Google AdSense to your Tumblr blog.
Blogging can be serious work, and with your easy-to-use Tumblr blog, you might be posting more than ever.  You may be writing about your beautiful vacation, sharing the newest wallpaper you designed in Photoshop, or explaining how to get your dog to quit barking at frogs.
Either way, your blog takes real time, and it might be nice to make a little money from it.  Google AdSense has enabled bloggers around the world to get ad revenue from their content.  The Tumblr Terms of Service require that your blog be used primarily for blogging, but they do allow you to use AdSense or other ad systems as long as that’s not the primary focus of your site.  It’s fairly easy, so let’s see how to add it to your blog, no matter what theme you’re using.
Please note: This article is designed for users who don’t know how to edit HTML, and so may seem overly simplified if you’re already a code ninja.  But that’s no problem; just skip over the parts you already understand, and use the parts you do need!
Signing up For AdSense
Before you can add AdSense to your site, you’ll need to register for an AdSense account with Google.  If you already have an account, skip to the next section; otherwise, browse to the AdSense site (link below), and click the Sign up now button.

Fill out the form as usual, with information about your site as well as some personal contact information.  Make sure to check the boxes at the top with guidelines about ads, and make sure your site follows them or your AdSense account could be suspended.

Accept the additional policies at the bottom of the form, and then click Submit Information.

Make sure your information is correct, then select if you have a Google account and either enter your account info or create a new account.

Once you’re finished, you’ll have to wait between 1 and 3 days for your account to be approved.  Once you receive your conformation email, head back to the AdSense site, but this time, log in with your Google account info.

If you have problems with AdSense, or need more info about your account, check out Google’s AdSense Help Site (link below).
Create an AdSense Unit for Your Tumblr
Once you’ve got an AdSense account and are logged in, click on the AdSense Setup tab to create a new ad for your site.

Select the AdSense for Content link.

Choose if you’d like an Ad unit with text or image ads, or a link unit that only has links to sponsored terms on Google.  Ad units are often a good choice for a sidebar, which link units may look better in a header or footer of a theme.

Select the size you want from the drop-down menu beside Format.  Pick something that would fit good on your site; if you’re unsure, click the Ad Formats link to see examples.

From the Colors section, select the colors that would match your site, or chose one of the preconfigured Palettes.

Finally choose the font family and size for your ads, and select if you’d like square or rounded corners.

Once you’re finished, click Continue at the bottom.

You’ll now be presented with a textbox showing your AdSense unit’s code.  Select the text and copy it, as we’ll need this to add the AdSense to our blog.

Note that you can always access your ad units in the future and edit them from the Manage Ads link in AdSense.

Adding AdSense to Your Theme
Now that you’ve got your AdSense code, it’s time to add it to your theme.  Browse to the Customize page on Tumblr by clicking Customize in your Tumblr dashboard or by following the link below.

Select the Theme tab in the Customize page,

Scroll down, and then select Use custom HTML at the bottom of the tab.

After the code loads, you should see the HTML and CSS code that makes up your site’s theme.  There are endless potentials for customization here, but if you’ve never designed a website from scratch or even edited HTML, it can look intimidating.  Don’t worry; it’s easy to add the code!
Note that if you’ve already edited your theme’s code in the past, you may see this by default without having to press the custom HTML button.

You’ll now need to find where to place your AdSense code in your theme.  If you’re a website designer, you can look around the code and place it anywhere you want: inside , , or more.  If you’ve never used HTML code before, though, there’s another trick you can use.  Spot some text near the place on your theme where you want to place your ads.  For instance, if you want to place it near on a sidebar under the About this blog description, look at your theme preview to see what default wording it uses.  Pick something that’s a title or other default text, as your page description itself will not be in the code.

Now, press Ctrl+F in your browser to open the search dialog, and enter the term you want to find.  The search box will look different, depending on your browser, but will work the same.

Look for the highlighted text in your code.  We want to post our content right after this section.  Note that the next line is still describing the profile, so it goes with the About box still.  We’ll want to paste our ad code right after this.

In this theme, we searched for About, and pasted the code right below the code for the about box, just like we showed above.

Once you’ve entered the code, click the Update preview button on the bottom of the tab.

You can now see your changes on the sample blog preview.

If it looks good, click Save in the top right corner, and then visit your site in a different tab or window.

Here’s our AdSense right in my Tumblr sidebar.  The colors blend in with my theme, and the ads are at least somewhat related to what I’m writing about.
Remember: Don’t click on your own ads, or your AdSense account may be suspended!

If the ads look too close to the next item in the sidebar, as they did in this theme, you can easily add some space by entering right after your .

This works great on many themes, including the default Redux theme.  We added the same ad panel to the sidebar in this theme, and it worked great.  No extra spacing required for this theme.

To get the ads where we wanted this time, we opened the code, searched for Follow on Tumblr, and pasted the code right above it as below.  This is one of the best ways to get your add right where you want it, even if you’re not a web designer; just find something you want your ads near, search for it, and paste it above.  It may take a little trial and error, but you might be surprised how quickly you’ll get the hang of it!

You can even add ads to the footer of your theme.  Paste your ad code inside the of your theme, or if it doesn’t have one, you can just post it right before the at the end of the theme code.  Here we added the of the Neue theme.

Remember that AdSense allows you to show up to 3 AdSense and 3 link units on a page, but again, Tumblr doesn’t want blogs to be ridiculously covered with advertisements.  So, perhaps you may want to put one in your sidebar and one in the footer, or some other configuration that you think looks good and still focuses mainly on your blog’s content.  Sometimes less is more; people won’t like your site as much if it’s plastered with ads from top to bottom!  Feel free to play with it and get the ads looking great with your theme.
Undoing Mistakes
If you somehow accidently delete something or mess your theme up, you can revert your changes by pressing the Disable custom HTML button on the bottom of the editor window.

Tumblr will remind you that this will remove your theme customizations.  Press Ok, and then press Save in the top right corner.

Now your theme will revert to its default settings, and you can come back and try editing the theme again if you want.  One thing to note, though, is that changing your theme around may remove some of your customizations such as Disqus comments.  Click the Appearance tab and make sure all of your settings are correct, or add them back if you need to after restoring your theme.

Conclusion
No matter what theme you’re using, it’s fairly easy to add AdSense to your Tumblr blog.  Try out the different places you can place the blog, find something that works good for your blog, and see how it works.  Don’t expect to make much in AdSense revenue, especially if your blog doesn’t get much traffic, but you may at least make enough to justify a premium theme for your blog or an occasional