admini – Page 257 – CyberSecurity Institute

Hot Topics in Tech Security

Posted on February 17, 2006December 30, 2021 by admini

Richard Palmer of Cisco Systems’s security technology group said SSL-based VPNs are very hot. In the firewall space, he’s detecting deeper interest in inspection technologies The growth is spread out across many product areas and focused on innovating in these areas,” he said during a panel discussion during the RSA Security conference here.
Mike Nash, corporate vice president of the Microsoft security technology unit, said customers are responding positively to Microsoft’s progress in making Windows more secure. “The interest now is in more aspirational scenarios that require a higher level of trust, such as authentication and authorization,” he said. Nash said they include delivering security improvements in both the next version of Windows Vista and its Longhorn server suites. At the same time, we’re making sure we improve core platform capabilities, such as isolation, anti-malware technology and better network isolation, he added. “We’re doing a lot of work around making sure Kerberos (define) is a native and pervasive part of the Windows platform, and especially in depending on multi-factor authentication.”

Looking ahead at next year, Thomas Noonan, chairman and CEO of Internet Security Systems (ISS), said the next-generation approach to security is seeping into vendors’ wares. I don’t mean patches that provide new [security] signatures, but on-demand services that bring the security infrastructure to life in extensible ways that had not been capable before.”

Another big trend we’re seeing, said Cisco’s Palmer, is that security is no longer thought of in isolation terms. “We’re seeing customers trying to balance the equation between and among risk, convenience and cost: convenience in helping end-users get to an application, but also administer the app.

ISS’s Noonan added: “I personally believe that on-demand services or online services are going to play a huge role in [security] because they’re flexible, they’re extensible and the networks are reachable.”

http://www.internetnews.com/security/article.php/3586091

Secure Router Market More than Doubled in 2005

Posted on February 17, 2006December 30, 2021 by admini

Secure router revenues on a year-over-year basis grew by 121 percent to $803 million in 2005; shipments nearly tripled.

Matthias Machowinski, directing analyst for enterprise voice and data at Infonetics, said the difference between a secure and insecure router is that the former has some form of included firewall or encryption capability built in.

http://www.internetnews.com/infra/article.php/3586186

Firms: Don’t expect federated IDs soon

Posted on February 17, 2006December 30, 2021 by admini

An E*TRADE Bank executive said that the company had more than $700 million in accounts protected by two-factor authentication and that customers that use a second factor have tripled the money in the accounts compared with a control group that only uses passwords.

Some security and e-commerce companies have touted a future where consumers can sign in once and use that federated authentication throughout the commercial Web.

In the past, Microsoft has tried to turn its Passport online identity system into the backend authentication system for e-commerce providers, but privacy experts worried that the move would give a single company too much power in managing consumer information.

http://www.securityfocus.com/brief/141

Leading mobile communications companies found initiative against mobile spam

Posted on February 17, 2006December 30, 2021 by admini

The carriers are optimistic that they can keep the level of spam on mobile communications networks below the level of fixed Internet. Among other things, they believe that it makes a difference that text messages and MMS cost money. In addition, mobile network operators claim that they can keep much better control of their networks than the public Internet. At the same time, mobile communications companies realize the need to work together across networks to put an end to international spammers. They plan to have anti-spam passages put into contracts signed with commercial senders of mass text messages. But the initiative’s call to have laws that “hamper” the fight against spam repealed seems more problematic. Among other things, the carrier would like to do away with the regulations on data protection, such as the privacy of telecommunications. (Craig Morris) / (jk/c’t)

http://www.heise.de/english/newsticker/news/69684

Accountants reject email monitoring

Posted on February 17, 2006December 30, 2021 by admini

Many UK accounting organisations, however, have no current plans to watch over client-related emails sent from staff.

PKF IT director Jim Greenfield said the firm did not attempt to monitor or restrict emails in terms of client information, as it tried to ‘strike a balance’ to allow communication with clients. But he would not rule out the possibility that a similar type of system being implemented by Deutsche Bank could be used by accounting firms in the future.

A PricewaterhouseCooper’s spokeswoman added the firm’s staff undertook market abuse training and were aware that communications could be monitored. ‘It may seem to be another example of staff freedom being chopped, but better management is essential for professional firms,’ said Reynolds.

‘One problem is that email has grown exponentially from something that was “nice to have” to representing 80% of business communications.’Deutsche Bank head of compliance for Britain and Western Europe, Andrew Proctor, said that the bank was in discussion with software vendors about implementing a new system over the next two months. Although Proctor said the policy was not linked to any events at the bank, he highlighted an ongoing investigation by the Financial Services Authority into a Deutsche Bank official who was suspected of using email to give a misleading impression of how well a sale of shares had gone.

Information commissioner Richard Thomas has launched a code of practice setting out that employees must be made aware of any monitoring of their email and internet usage, apart from the most ‘exceptional circumstances’.

http://www.accountancyage.com/accountancyage/news/2150523/email-monitoring-rejected

U.S. Warns of Coming Online Threats

Posted on February 16, 2006December 30, 2021 by admini

Precautions should be taken to protect mobile devices, the organization said.

Although the threats detailed by the NCSA and the report’s coverage in the media likely will cause consumers to take more action to protect themselves against the highlighted risks, enterprises also should take note of the potential for attacks.

http://www.cio-today.com/story.xhtml?story_id=100000BN8R9W