SEARCH RESULTS
 
Showing 1-10 of 20 records
 
Expand article

Wrapping up Threat Modeling

2008-02-14 22:51:35 by sdl in The Security Development Lifecycle
 
...Specification versus Analysis When Larry Osterman was writing about threat modeling , he casually tossed out A threat model is a specification, just like your functional specification (a Program Management spec that defines the functional requirements of your component), your design specification (a development spec that defines the...
 
Tags: threat, threat modelers, threat models, threat model, design, design specification, specification, set, challenges set people
 
 
 
 
Expand article

Myth vs. reality: Wireless SSIDs

2007-10-16 07:08:58 by Steve Riley in Steve Riley on Security
 
...specification to keep your SSID hidden; the 802.11i specification amendment (which defines WPA2, discussed later) even states that a computer can refuse to communicate with an access point that doesn't broadcast its SSID. And, even if you think your SSID is hidden, it really isn't. Let me explain All 802.11 wireless networks, regardless of...
 
Tags: simple ssid discovery, network, ssid, wireless network, networks, enterprise networks, wireless networks, mac, secure networks
 
 
 
 
Expand article

Prospects Brightening for a Common Event Standard

2008-02-25 08:38:57 by Burton Group in Security and Risk Management Strategies Blog
 
...Specification Request (JSR) 47 Logging API, WS-Management subscribe/publish APIs and so on. Any comprehensive standard released in the future should work with existing technologies like these as much as possible. Also, there are a number of complexities, including mapping event semantics between different systems, synchronizing time while...
 
Tags: common event standard, standard, event standards space, space, standards, common event standards, standards deliberation, cee, cee web site
 
 
 
 
Expand article

Prospects Brightening for a Common Event Standard

2008-02-25 08:38:57 by Burton Group in Security and Risk Management Strategies Blog
 
...Specification Request (JSR) 47 Logging API, WS-Management subscribe/publish APIs and so on. Any comprehensive standard released in the future should work with existing technologies like these as much as possible. Also, there are a number of complexities, including mapping event semantics between different systems, synchronizing time while...
 
Tags: common event standard, standard, event standards space, space, standards, common event standards, standards deliberation, cee, cee web site
 
 
 
 
Expand article

Show 014 - An Interview with Peter Neumann

The Article has images
2007-05-22 17:04:03 by rmacmich in The Silver Bullet Security Podcast
...specification), why DRM is the wrong solution to the wrong problem, and who was more interesting to meet: Albert Einstein or Norah Jones Peter Neumann comp.RISKS Computer-Related Risks Multics A General-Purpose File System For Secondary Storage - Peters 1965 paper on Multics Multics History Project The Brooklyn Boogaloo Blowout
 
Tags: multics, multics history project, general-purpose file system, file system, peter neumann, wrong, risks, brooklyn boogaloo blowout, wrong solution
 
 
 
 
Expand article

Blue Box SE#022 - SIP NAT Traversal discussion with Jonathan Rosenberg

2007-12-19 18:37:35 by HASH0x89e89f4 in Blue Box: The VoIP Security Podcast
 
...specification for the SIP protocol. He is also the author of " The Hitchhiker's Guide to SIP ", a document that aims to help people find their way through all the many documents that today make up what we call "SIP For the past few years, Jonathan has been extremely involved in the whole issue of SIP and NAT traversal and has authored several...
 
Tags: sip nat traversal, sip, nat traversal, sip security, jonathan, jonathan rosenberg, sip protocol, major internet-drafts, internet
 
 
 
 
Expand article

Blue Box SE#022 - SIP NAT Traversal discussion with Jonathan Rosenberg

2007-12-19 19:37:16 by Dan York in Blue Box: The VoIP Security Podcast
 
...specification for the SIP protocol. He is also the author of " The Hitchhiker's Guide to SIP ", a document that aims to help people find their way through all the many documents that today make up what we call "SIP For the past few years, Jonathan has been extremely involved in the whole issue of SIP and NAT traversal and has authored several...
 
Tags: sip nat traversal, sip, nat traversal, sip security, jonathan, jonathan rosenberg, sip protocol, major internet-drafts, internet
 
 
 
 
Expand article

Multinational gov't agencies, vendors set electronic collaboration security plan

2008-01-11 00:00:00 by Ellen Messmer in Network World on Security
 
The Transglobal Secure Collaboration Program, an effort by British and American defense agencies and aerospace partners to develop more secure online communication, this week announced it has settled on a secure e-mail specification based on public-key infrastructure for future use
 
Tags: secure online communication, american defense agencies, public-key infrastructure, aerospace partners, effort, week, develop, future, british
 
 
 
 
Expand article

Geeks sharing recipes

2008-01-29 09:17:00 by Keith Brown in Security Briefs
 
...Specification , which talks a lot about exchanging data, but very little about how to model a recipe in XML. They refer to something called RSPML, but I can't find that documented anywhere Then there's RecipeBook XML , which has a DTD and several sample recipes. This format uses mixed content, which makes me wonder how easy it'd be to program...
 
Tags: acceptable data model, xml, data model, recipebook xml, xml schema recipe, recipes, data, recipe, xml format
 
 
 
 
Expand article

Seagate unveils self-encrypting disk drive

2008-04-07 00:00:00 by Ellen Messmer in Network World on Security