SEARCH RESULTS
 
Showing 1-4 of 4 records
1
 
Expand article

Speaking of Security Podcast #71

2007-08-06 00:00:00 by Podcast Producers in Speaking of Security, the RSA Blog and Podcast
 
...FFIEC guidance for providing multi-factor authentication to help further protect bank customers, their funds and personal information when banking online. The combination of deploying behind-the-scenes protection as well as visible site-to-user authentication is designed to provide strong security that involves bank customers in a...
 
Tags: protect bank customers, bank, involves bank customers, cio donald duggan, provide strong security, bank based, paul joyal talks, visible site-to-user authentication, online
 
 
 
 
Expand article

Links for 2008-01-21 [del.icio.us]

2008-01-22 00:00:00 by Editor in Anton Chuvakin Blog -
 
...FFIEC InfoSec Handbook on Security Monitoring and Logging
 
Tags: information security knowledge, security, ffiec infosec handbook, soa world magazine, barcampesm session, socioeconomic factors, dancho danchev, mind streams, cybersecurity challenges
 
 
 
 
Expand article

End user security psychology, part II: Can knowledge-based authentication be effective?

2008-04-02 11:11:25 by Bill Nagel in Security & Risk Management
 
...FFIEC guidelines for additional risk mitigation measures that address the inadequacies of single-factor authentication. The concept of layered authentication -- the riskier the transaction, the more stringent the authentication measures -- is related to this, and KBA can be readily (and simplistically) adapted to layered authentication by...
 
Tags: authentication, authentication measures, authentication process drags, kba, security, single-factor authentication, implement kba, users, users perceive
 
 
 
 
Expand article

The Case For Information Security

The Article has images
2008-03-21 14:08:00 by Random InfoSec Guy in Security Coin
...FFIEC/FDIC begin requiring Application Security integrated into the SDLC of a company and quarterly validation by different independent 3rd parties would be nice :) )and stricter enforcement - with real hefty fines - Wall St. may just continue to look the other way ..and we all know that Wall St is what matters
 
Tags: attack, mdac attack, sql injection attack, card, card data, sql injection, million card, loss, pci
 
 
 
 
 
Showing 1-4 of 4 records
1
 
SecurityRatty FAQ
Sergey Zarubin, 31yo
CISSP, CCSP
Moscow, Russia