SEARCH RESULTS
 
Showing 1-10 of 119 records
 
Expand article

PED vulnerability paper receives Most Practical Paper award at Oakland

The Article has images
2008-05-21 09:56:48 by Saar Drimer in Light Blue Touchpaper
...Practical Paper award of the conference, given to the paper most likely to immediately improve the security of current environments and systems. Thanks to everyone who supported this work
 
Tags: paper, practical paper award, pin entry devices, ieee symposium, ped, ross anderson, immediately improve, current environments, pin scheme
 
 
 
 
Expand article

Not a CISSP

The Article has images
2008-04-18 14:36:41 by Chris Eng in Zero in a bit
...practical abilities. Employers and customers often assume the guy with the five magic letters on his resume is technically superior to the guy without. In my experience, its exactly the opposite, particularly in situations where you have to sit down at a keyboard and actually DO something as opposed to talking about it. Certainly, Ive...
 
Tags: cissp, cissp certification, security, cissp button, network security, information security, security career, career, cissp title
 
 
 
 
Expand article

Links for 2008-02-25 [del.icio.us]

2008-02-26 00:00:00 by Editor in Anton Chuvakin Blog -
 
...practical risk management: Gartner IT GRC Predictions practical risk management: 2008 - The Year of IT Risk Management Spire Security Viewpoint: Another Envelope: Vulnerability Growth Rates Calculations: * [C1] Number of new lines of code created every day -- 2m * 25 = 50 million [A1]*[A2] * [C2] Number of new vulnerabilities created every...
 
Tags: log management, log, security, spire security viewpoint, risk management, practical risk management, application due care, application, security layers
 
 
 
 
Expand article

Protect Your Macintosh Copies Available

2008-05-02 11:12:49 by schneier in Schneier on Security
 
...practical value in the book. This offer should only interest collectors. And even them, not that much I also have seven copies of my third book, E-Mail Security , from 1995, which also has nothing in it of any practical value anymore. Again, $5 for postage
 
Tags: copies, book, e-mail security, postage, e-mail, practical, macintosh, protect, lonely death
 
 
 
 
Expand article

J-PAKE: From Dining Cryptographers to Jugglers

2008-05-29 20:31:05 by Feng Hao in Light Blue Touchpaper
 
...practical security problem: how to establish secure communication between two parties solely based on their shared password without requiring a Public Key Infrastructure (PKI The solution to the above problem is very useful in practice in fact, so useful that it spawns a lot fights over patents. Many techniques were patented, including the...
 
Tags: pake, past pake solutions, pake research, j-pake protocol, j-pake, protocol, protocol design inherits, security, practical security
 
 
 
 
Expand article

Art vs. Science

2008-06-20 20:56:38 by Chris Eng in Zero in a bit
 
...practical field experience A client chastised me once for making a statement that penetration testing is a mixture of art and science. He wanted to believe that it was completely scientific and could be distilled down to a checklist type approach. I explained that while much of it can be done methodically, there is a certain amount of skill...
 
Tags: security, security professionals, security professional, tssci security blog, science, test, opcp test, james, art
 
 
 
 
Expand article

On Measuring a Markets Maturity

2008-07-20 12:10:01 by Tim Bass in The Complex Event Processing Blog
 
...practical benefits and become widely accepted. According to Gartner, hype cycles aim to separate the hype from the reality, and enable CIOs and CEOs to decide whether or not a particular technology is ready for adoption. A longer-term historical perspective on such cycles can be found in the research of the economist Carlota Perez A hype...
 
Tags: hype cycles aim, hype cycles, hype, gartner hype cycle, hype cycle, maturity, markets maturity, cep blogwe ground, cep
 
 
 
 
Expand article

Finland privacy judgment

2008-07-23 15:26:48 by Ross Anderson in Light Blue Touchpaper
 
...practical and effective protection to exclude any possibility of unauthorised access occurring in the first place. (Press coverage here A practical and effective protection test in European law will bind engineering, law and policy much more tightly together. And it will have wide consequences. Privacy compaigners, for example, can now argue...
 
Tags: privacy, hospitals access controls, effective protection test, effective protection, medical privacy, access, health care staff, care, law
 
 
 
 
Expand article

Building Secure Web Applications Training in Minneapolis

2008-08-26 21:43:59 by Gunnar Peterson in 1 Raindrop
 
...practical and actionable guidelines on how to remediate against these common defects in Java/J2EE and Web Services frameworks and how to test for them in their own applications This class starts with a description of the security problems faced by today's software developer, as well as a detailed description of the Open Web Application...
 
Tags: security defects, defects, applications, secure, dangerous security defects, secure web applications, develop secure applications, secure software development, security
 
 
 
 
Expand article

Card fraud what can one do?

The Article has images
2008-12-22 14:01:37 by Saar Drimer in Light Blue Touchpaper
...practical things, some a bit over the top, I admit that cardholders can do to decrease the risk of falling victim to card fraud. (Some of these will only apply to UK issued cards, some to all smartcards, and the rest applies to all types of cards Practical 1. If you have a UK EMV card, ask the bank to send you a new card if it was issued...
 
Tags: card, card fraud, magstripe, magstripe data invalid, emv card, emv, encoder, magstripe encoder, blank magstripe card