SEARCH RESULTS
 
Showing 1-10 of 61 records
 
Expand article

Biometrics

2009-01-08 12:53:57 by schneier in Schneier on Security
 
...compare, an attacker can't inject a previously stored print as easily as he can cut and paste a signature. A photo on an ID card works the same way: the verifier can compare the face in front of him with the face on the card Fingerprints on ID cards are more problematic, because the attacker can try to fool the fingerprint reader. Researchers...
 
Tags: biometric systems, biometric, biometric database, hard biometric, biometrics, fingerprint reader, fingerprint, biometric identification system, vastly improve security
 
 
 
 
Expand article

Who should do your security audits? Or, how do you organize the security department?

2008-02-07 22:25:32 by Steve Riley in Steve Riley on Security
 
...compare the results against what the state should be, and show where we are out of compliance. Essentially, audits help us know that we are indeed doing what we say we're doing Audits are the natural outcomes of implementing good policies and following effective procedures. It makes no sense to spend time developing policies and without...
 
Tags: information, information assets, information security, alignment folk, security alignment folk, information security department, alignment, security department, security
 
 
 
 
Expand article

The Economics of Finding and Fixing Vulnerabilities in Distributed Systems

2008-11-18 22:47:55 by Gunnar Peterson in 1 Raindrop
 
...compare the software security countermeasures against other security mechanisms. Gary McGraw's estimate shows the software security space coming in at $150 Million total, yet we see a company like Checkpoint that won the network security war in 1995 with earnings of around $900 Million! One single network security vendor is 6 times bigger...
 
Tags: information security, information, information security spends, safety information security, versus information security, information security budgets, information security budget, software security, software security space
 
 
 
 
Expand article

Symantec + Vontu: A Marriage Made In Heaven?

2007-11-13 08:55:35 by Thomas Raschke in Security & Risk Management
 
...compare please tune into our ILP Wave Update which will become available in mid-Q1 2008 Thomas Raschke
 
Tags: ilp, ilp awareness, ilp wave, ilp vendors compare, ilp leader, ilp functionality, loss, data loss prevention, blown ilp functionality
 
 
 
 
Expand article

Ask the Auditor: Who is Responsible for Information Security?

2007-12-29 06:24:50 by Editor in Security Links
 
...compare current organizational practices with industry practices to discern whether their organization is operating comparable to others Ensuring that information security systems and management are subject to audit and review by qualified professional reviews and audits, corporate leaders advance the goal of overseeing the organizations...
 
Tags: information, information security, information policy, information security risks, information assurance, information security governance, information security managers, information security management, assign information security
 
 
 
 
Expand article

How effective is the wisdom of crowds as a security mechanism?

2007-12-21 15:26:10 by Tyler Moore in Light Blue Touchpaper
 
...compare to the feeds maintained by specialist website take-down companies hired by the banks? Well, we compared PhishTanks feed to a feed from one such company, and found the companys feed to be slightly more complete and significantly faster in confirming phishing websites. This is because companies can afford employees to verify their...
 
Tags: phishtank, phishtank compare, leaves phishtank, users, phishtanks users, vote maliciously, vote, active users, urls
 
 
 
 
Expand article

What Does SHA1 is Broken Mean?

2007-12-12 07:35:00 by Eric Marvets in The Security Samurai
 
...compare against our stored value Its also useful for ensuring the integrity of data. When a message is sent over an unsecured channel, a hash of the message can also be used to check the message once it reaches its destination. If the message does not match the hash, then we assume it was modified in transit Designed Strength of SHA1 When...
 
Tags: sha1, choose sha1, sha1 protects, hash data, data, sha1 drops, hash function, hash, function
 
 
 
 
Expand article

Locked Call Boxes and Banned Geiger Counters

2008-01-18 07:44:31 by schneier in Schneier on Security
 
...Compare this with a proposed law in New York City that will require people to get a license before they can buy chemical, biological, or radiological attack detectors: The legislation which was proposed by the Bloomberg administration and would be the first of its kind in the nation would empower the police commissioner to decide whether to...
 
Tags: boxes, false fire alarms, fire, fire alarms, false alarms, prevent false alarms, alarm boxes, alarm, chicago fire
 
 
 
 
Expand article

The Authorities Have Your Skeleton On File

2008-02-12 00:30:03 by Editor in Digg / Security
 
A new patent, issued on Friday, covers a system that would scan some, or all, of your skeleton and compare it with a database of skeletons. The database would also pull up data such as your name, address, social security number, and passport number. Worst of all, you might not even know your skeleton is being scanned from a distance
 
Tags: skeleton, social security, database, compare, skeletons, distance, system, worst, covers
 
 
 
 
Expand article

The First Step on the Road to More Secure Software is admitting you have a Problem