SEARCH RESULTS
 
Showing 1-10 of 230 records
 
Expand article

Changes to PCI standard not expected to up the ante

2008-08-20 00:00:00 by HASH0x8b1509c in Network World on Security
 
The group that administers the Payment Card Industry Data Security Standard -- or PCI, for short -- this week released a summary of the changes that are being made to the requirements in a revision scheduled to be published in October
 
Tags: pci, october, week, requirements, short, revision, summary, administers
 
 
 
 
Expand article

Prospects Brightening for a Common Event Standard

2008-02-25 08:38:57 by Burton Group in Security and Risk Management Strategies Blog
 
...standard that allows event logs and audit records to be shared and understood across many products, and the good news is that theyre talking to each other Common Event Expression (CEE) language, by Mitre X/Open Distributed Audit Standard (XDAS), by Open Group The business benefits of creating a common event standard would be considerable ...
 
Tags: common event standard, standard, event standards space, space, standards, common event standards, standards deliberation, cee, cee web site
 
 
 
 
Expand article

Prospects Brightening for a Common Event Standard

2008-02-25 08:38:57 by Burton Group in Security and Risk Management Strategies Blog
 
...standard that allows event logs and audit records to be shared and understood across many products, and the good news is that they???re talking to each other Common Event Expression (CEE) language, by Mitre X/Open Distributed Audit Standard (XDAS), by Open Group The business benefits of creating a common event standard would be...
 
Tags: common event standard, standard, event standards space, space, standards, common event standards, standards deliberation, cee, cee web site
 
 
 
 
Expand article

CEE Log Standard Update

2008-02-12 15:02:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...Standard: Today and Tomorrow" presentation given at Security Forum & Identity Management Forum meeting at 17th Enterprise Architecture Practitioners Conference by OpenGroup in San Francisco (Feb 2008 In this presentation I explained the CEE logging standard to the OpenGroup folks and also shared where the standard effort currently is ...
 
Tags: cee, standard, cee standard, standard effort, opengroup, list archives, opengroup folks, list, identity management forum
 
 
 
 
Expand article

Wee-Fi: Meraki Modifies, Drops Standard; Tempe's Phoenix?; Remote Wake, Wi-Fi Need Not Apply

The Article has images
2008-08-14 10:32:51 by Glennf in Wi-Fi Networking News
...Standard level nodes for networks that required ads and had other limits. As of a few days ago, Standard is dead, and the Meraki mini has been upgraded to the Meraki Indoor ($150). The Indoor has signal strength LEDs on the side for better help in placing units, an internal antenna, and better resilience against power fluctuations. The...
 
Tags: meraki, network, network address translation, dead tempe network, dead, tempe, standard, meraki indoor, meraki mini
 
 
 
 
Expand article

RBAC Standard Rationale: Comments on "A Critique of the ANSI Standard on Role-Based Access Control"

2008-01-07 09:15:52 by Editor in IEEE Security and Privacy
 
As the authors of the original proposal for the role-based access control (RBAC) standard and developers of the models from which it derives, the authors respond here to Ninghui Li, Ji-Won Byun, and Elisa Bertino's critique, which also appears in this issue. This is an opportune time in the revision cycle to introduce proposals for changes to...
 
Tags: standard, access control, authors respond, authors, revision cycle, critique, rbac, introduce proposals, ji-won byun
 
 
 
 
Expand article

Why would anyone use standard WEP? Isn't it super easy to crack & sniff?

2007-01-19 16:01:12 by Editor in Endpoint Security: Translating Policy Into Reality
 
Using standard WEP is akin to using a pad-lock & chain for securing a bicycle. It keeps the honest people honest. The argument given that WEP is so weak that it's not worth using, isn't completely valid. Using the bike analogy, would you stop using a lock & chain simply because anyone with a set of bolt cutters can defeat them in a second?...
 
Tags: wep, standard wep, chain simply, chain, bike analogy, pad-lock, lock, completely valid, bolt cutters
 
 
 
 
Expand article

A Critique of the ANSI Standard on Role-Based Access Control

2008-01-07 09:15:52 by Editor in IEEE Security and Privacy
 
Vendors have widely adopted RBAC to manage user access to computer resources in various products, including database management systems. However, as this analysis shows, the standard is hindered by limitations, errors, and design flaws
 
Tags: manage user access, database management systems, standard, computer resources, design flaws, errors, limitations, widely, vendors
 
 
 
 
Expand article

Payment industry receives first version of application security standard

2008-04-16 13:00:00 by Editor in Computerworld Security News
 
The PCI Security Standards Council announced the first version of its standard relating to payment applications used by retailers and other companies that accept credit card transactions
 
Tags: payment applications, standard, version, retailers, companies