SEARCH RESULTS
 
Showing 1-10 of 55 records
 
Expand article

New Privacy Policy Wrinkles: Online Behavioral Advertising; and Potential new EU Data Protection Policy

2008-01-31 11:24:31 by Geoffrey Turner in Security & Risk Management
 
...implications for consumer privacy of a merger of the leading Web search engine and leading behavioral advertising provider The discussion led the FTC to suggest last month that Web advertisers using behavioral targeting consider adopting several privacy principles, called " Governing Principles For Online Behavioral Advertising " (The...
 
Tags: consumer, consumer protection, privacy policy, consumer choice, consumer data, constitutes sensitive data, sensitive data, protection, ftc staff
 
 
 
 
Expand article

Homeland Security Cost-Benefit Analysis

2008-07-17 06:43:25 by schneier in Schneier on Security
 
...implications. The premises: 1. The number of potential terrorist targets is essentially infinite. 2. The probability that any individual target will be attacked is essentially zero. 3. If one potential target happens to enjoy a degree of protection, the agile terrorist usually can readily move on to another one. 4. Most targets are...
 
Tags: potential targets invulnerable, potential targets, targets, protection, invulnerable, protection measures, paper, paper attempts, potential terrorist targets
 
 
 
 
Expand article

A Security Assessment of the Internet Protocol

2008-08-20 07:48:56 by schneier in Schneier on Security
 
...implications Though Internet technology has evolved, the building blocks are basically the same core protocols adopted by the ARPANET more than two decades ago. During the last twenty years many vulnerabilities have been identified in the TCP/IP stacks of a number of systems. Some were flaws in protocol implementations which affect only a...
 
Tags: internet, assessment, security assessment, security, security flaws, flaws, internet technology, internet operations community, protocols
 
 
 
 
Expand article

ISO 17799:2005 - Security Policy Implications For Business

2007-12-27 08:56:05 by Editor in Information Security Policy Whitepapers
 
This whitepaper discusses the importance of information security policies within an information security management system, including the benefits of using Information Shield publications in obtaining certification against the new standard
 
Tags: information security policies, information shield publications, whitepaper discusses, standard, benefits, importance, certification
 
 
 
 
Expand article

Show 013 - An Interview with Ross Anderson

The Article has images
2007-04-13 20:33:21 by rmacmich in The Silver Bullet Security Podcast
...implications of wearing a kilt Ross Anderson Light Blue Touchpaper - A security blog by Cambridge computer scientists Security Engineering - Ross groundbreaking book in print and online WEIS 2007 - Sixth Workshop on the Economics of Information Security RFID and the Middleman [PDF The Clan Anderson Society Ross playing the bagpipes
 
Tags: ross, security, information security, ross anderson, address security, security blog, ross discuss, excellent book, book
 
 
 
 
Expand article

Fuzz Testing at Microsoft and the Triage Process

2007-09-20 18:52:00 by sdl in The Security Development Lifecycle
 
...implications As Michael Howard has pointed out before , we do our best to ensure that the SDL incorporates lessons learned from vulnerabilities that required us to release security updates. It turns out that the animated cursor bug patched in MS07-017 had a positive impact on the automatic triaging our fuzz testing tools perform. In this...
 
Tags: chance exceptions, exceptions, exception handler, exception, divide-by-zero exception, exception code, triage process, process, first-chance exceptions
 
 
 
 
Expand article

My 2008 Security Predictions!

2008-01-09 15:42:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...implications of this are pretty horrifying Major utility/SCADA hack = no (not yet). Everybody predicts this one forever (as Rich mentions ), but I am guessing we would need to wait another year or so for this Cyber-terrorism = no (again, not yet!) Will it be a reality in the future? You bet! Just not now A massive data theft to dwarf TJX =...
 
Tags: security, security predictions, broader information security, information security, smb security, virtual security appliances, security market, security solutions, security software
 
 
 
 
Expand article

Show 004 - An Interview with Dana Epp

The Article has images The Article has audio podcast
2006-07-31 21:30:23 by rmacmich in The Silver Bullet Security Podcast
...implications of systems with ever-increasing complexity, suggestions for new developers interested in learning about software security, regulations role in information security, and Miles Davis SilverStrs blog - Danas blog Its Pat RemoteAccess BBS The 5 Rules of the Regulatory Process Chris Botti SC-L List Bitches Brew Subscribe to IEEE...
 
Tags: dana epp, dana, code lives forever, silverstrs blog, fourth episode, regulatory process, security implications, sc-l list, garys guest
 
 
 
 
Expand article

On Guanxi

2008-01-16 18:50:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...implications ... especially this part of the Stratfor piece : "Chinese business ethics, however, are built on the basis of guanxi, which places relationships above other considerations, including an employers code of conduct and even the law. The idea that taking a job with a company, particularly a non-Chinese company, cancels obligations...
 
Tags: guanxi, simply regard guanxi, stratfor, stratfor piece, long-term relationships, non-chinese company, chinese business ethics, relationships, company
 
 
 
 
Expand article

Scary World Ahead?!

2008-01-16 19:54:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -