Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Category: Trends

Government Looking To Improve Security Through 3-D Biometrics

Posted on December 10, 2004December 30, 2021 by admini

The Department of Defense hopes that by the middle of next year it will be able to test at the nation’s boarders wireless mobile identification technology that can snap three-dimensional images of people moving into and out of the United States and check those images against a database of 3-D mug shots.

The government already has invested $700,000 in the project, which is being run by Unisys Corp. and A4Vision Inc., a provider of 3-D facial-imaging and recognition systems.

Together, Unisys and A4Vision are working to make 3-D biometrics more commonplace as a tool to improve national security and guard against identity theft. “The aftereffects of 9/11 have accelerated demand for and development of biometric technology for security purposes,” says Ed Schaffner, director of positive-identification and access-control programs for Unisys’ worldwide global public-sector group.

Research firm IDC expects the market for biometric technology will be $887 million next year, while research firm Frost & Sullivan predicts the market will more than double by 2006 to $2.05 billion.

Three-dimensional facial images are captured either using a number of digital cameras positioned around the subject’s face or by using a structured light grid that captures facial-structure data. This data is then stored in a back-end database, where it can be retrieved and compared against new facial images. Although two-dimensional images can be compared today, the accuracy of this process is hindered by lighting and the subject’s pose, as well as the effects of aging, weight fluctuation, and use of facial ornamentation such as eyeglasses, Schaffner says.

The companies are creating 3-D biometric image standards.

http://www.informationweek.com/showArticle.jhtml;jsessionid=W1V2TLCAWMPHIQSNDBNCKHSCJUMEKJVN?articleID=55301179

Read more

Linux server market to be ‘worth $9bn by 2008’

Posted on December 7, 2004December 30, 2021 by admini

Revenue from Linux servers is expected to grow annually at 22.8 percent, compared to 3.8 percent for the overall server market, IDC said. In addition, Linux servers should account for 25.7 percent of server unit shipments in 2008, up from 15.6 percent in 2003, IDC said.

The results highlight the spread of the operating system, a relatively new competitor to Unix versions such as Sun’s Solaris and to Microsoft Windows. The top four server sellers — IBM, HP, Sun and Dell — all support Linux, though Sun steers customers to Solaris. The top sellers of Linux and accompanying software are Red Hat and Novell.

IDC also said Linux is disproportionately popular for blade servers — thin systems that plug into a chassis with shared networking and power infrastructure, and a fast-growing part of the overall server market. Linux is used on about half of blade servers today, compared to 20 percent of rack-mounted servers and 11 percent of free-standing servers.

IDC also said Linux has is now most often used on dual-processor servers instead of single-processor machines, an indication that it’s running more important tasks on more powerful machines. Single-processor machines are the second most widely used option, followed by four-processor systems.

Linux also can be run as a partition on powerful machines such as IBM mainframes and Power processor-based servers and on HP’s Superdome servers.

http://news.zdnet.co.uk/software/linuxunix/0,39020390,39179180,00.htm

Read more

Security Sells

Posted on December 6, 2004December 30, 2021 by admini

Translation: They advertise security or otherwise make it part of the message they present to customers and business partners.

Look closely, though, and you’ll find that these companies share a common goal: to create a sense of trust for their customers—while being careful not to overpromise.

In February 2003, Derek Bond, a 72-year-old retiree from Bristol, England, spent three weeks sleeping on the concrete floor of a South African jail after his name and passport number showed up on an FBI wanted list as he arrived in the country for a vacation. In vain, he protested that not only was he ignorant of any supposed crimes he’d committed in America, but he’d never even been to the country. Release didn’t come until the publicity surrounding his fate prompted an informant to point the FBI to the “Derek Bond” whom they did want to talk to—comfortably holed up in Las Vegas, after purloining the identity of the real Mr. Bond some 14 years before.

Bond’s misfortune illustrates—to the extreme—the menace of identity theft. Armed with just a few pieces of information—information readily available from trash or stolen documents—identity thieves can take advantage of lax security at financial institutions to enrich themselves.

Not if Citigroup can help it, says Ronni Burns, director of business practices for Citi Cards, the group’s credit card arm. In 1991, she says, Citi was among the first card issuers to offer its customers early warning of fraud, by programming computers to spot suspicious transactions. And in 1992, Citi followed this by being the first major card issuer to include customers’ photographs on cards. Most recently, Citi has bolstered its identity-theft prevention offerings with a personalized solution that involves trained counselors providing support to victims. In the event that a customer’s identity is stolen, explains Burns, a single Citi representative is assigned to the case to help customers identify the fraudulent transactions, fill in the various police forms, notify credit bureaus and generally get their lives back on track.

Microsoft Aims for Trustworthiness Curiously, one of the biggest developments in Microsoft’s history—and certainly one that is intended to have an enormous impact on its customers—isn’t being marketed yet. Or at least not in the direct manner that Citigroup is using.

While Microsoft does actively promote some security-related products (including through advertisements in CSO), “Trustworthy Computing,” as the company christens it, deliberately isn’t mentioned in the company’s advertising. “There is no advertising around Trustworthy Computing at all,” insists Microsoft spokeswoman Nicole Miller. The company does, of course, provide a website that explains the initiative, and a quick Google search will turn up plenty of Microsoft quotes discussing the initiative in the media.

But Trustworthy Computing itself is still a long way from victory. In fact, says Chief Security Strategist Scott Charney, who describes the initiative as “very much a work in progress,” Microsoft has had to apply strong-arm tactics to software vendors who have built Microsoft technologies into their products: They are not to make claims that aren’t yet matched by the reality that Gates wants to see.

OnStar Sells Peace of Mind If you’re going to set up in business as a guardian angel, you’d better be a guardian angel that people trust. When you’re lost, for example, two critical pieces of information are (1) where you are and (2) the directions for getting back on course. Minutes can be lost while the emergency services try to locate you—which in the event of a serious accident can literally make the difference between life and death.

“Key to the promise of the brand is that a real, live person will share your problem and help resolve it,” says Andrew Young, director of marketing at Detroit-based OnStar, who’s been with the business since its inception in 1996. “They’ll make connections, find information and help you. The help depends on the nature of the problem. OnStar is careful to avoid overpromising, says Young, and tries hard to make sure that subscribers understand the limitations of the service. “We’ve tried to be very honest in how we market the service and build the brand,” he says.

For the past two years, OnStar has been running a radio advertisement campaign featuring the voices of real callers.

http://www.csoonline.com/read/120104/sells.html

Read more

New Threats Ahead

Posted on December 5, 2004December 30, 2021 by admini

Web services and ubiquitous wireless access will continue to add new security threats.

“Businesses battened down their network years ago and hackers moved up to applications,” says John Pescatore, a security analyst with research firm Gartner. “As certain areas of security improve and technology grows, hackers will move to new weaknesses.” To confront the threats more effectively, antivirus and firewall software will become more commonplace for smart devices, as will Web-services firewalls.

Embedded-chip maker Phoenix Technologies Ltd. has built device authentication with public key infrastructure and secure crypto-key storage into its hardware so companies can identify trusted systems before they’re allowed to log on to their networks.

“The large [software vendors] got caught with their pants down, and they’re now putting more money into their development processes,” says Lloyd Hession, chief security officer at Radianz, a provider of financial-services networks.

“My worst fear is someone is going to whack our customers, and I do everything to avoid that,” says Mary Ann Davidson, chief security officer at Oracle. Software quality “is a systemic industry problem,” she says. Oracle conducts secure coding training and has 100 pages of formal design specifications its developers use to engineer reliability and safety into applications.

IBM Tivoli continuously improves software development by conducting design-code reviews, and it has stepped up the number of applications it runs through the Common Criteria certification process, an international security evaluation standard, says Bob Blakley, chief scientist of security and privacy. “If there’s a perception out there that software is more fragile, that’s because it’s subject to more hostile attacks today than in the past. It’s fair to say that software quality is improving but that the threat environment is worsening.”

And that’s one trend business-technologists can expect will continue for some time to come.

Government surveillance helps keep us secure, and better corporate information makes the economy more productive.

http://www.securitypipeline.com/news/54202035;jsessionid=XF2C5R4SIDHHWQSNDBCSKH0CJUMEKJVN

Read more

CIOs and IT Managers prefer Linux for e-mail

Posted on December 1, 2004December 30, 2021 by admini

The research also revealed that 21 percent of executives would prefer Linux for their entire email infrastructure if they could scrap their current email infrastructure, and over 40 percent said they would replace their backend messaging infrastructure for one with better performance and lower costs.

“The survey shows that Linux is a key platform for messaging and its market share is increasing,” said Michael Osterman, head of Osterman Research.

The study is part of Linux related research reports, which were published in a whitepaper entitled “”Linux and eMail Infrastructure: A Business and Technology Perspective”. The whitepaper was released by Scalix, a Linux email software company, to help IT managers extend the technology benefits of Linux to their email infrastructure.

http://www.ebcvg.com/articles.php?id=427

Read more

The Threats To Come

Posted on November 30, 2004December 30, 2021 by admini

As security pros protect their applications and networks from today’s most common attacks, hackers are preparing to wage new wars. As new technologies such as Web services, radio-frequency identification, and smart phones loaded with complex operating systems become prevalent, new attack techniques against business-technology systems will follow.

The days of the hacker interested in intruding upon networks, cracking systems, and writing viruses and worms for the joy of the challenge or the mischievous thrill are turning into the days of the hacker as profit-motivated mercenary. The profit to be made through identity theft, corporate espionage, or using hacker skills to attack business competitors will continue to rise (see Extortion Online).

“It’s common for security professionals to continue to focus on fighting their most previous battles,” says Pete Lindstrom, research director with Spire Security. “But it’s important to prepare for the next front line.”

Last month one of the most complex attacks to strike the Internet targeted unsuspecting Web surfers who visited certain Web pages. Attackers infiltrated an Internet marketing company’s server and redirected Web surfers who visited sites displaying banner ads transmitted via the infected ad network to sites containing malicious code. Earlier this year, hackers attacked Web surfers via another Internet Explorer flaw by infecting Web sites and attaching malicious code to JPG image files.

As more companies deploy Web services, security experts predict hackers will find weaknesses in both Web-services security standards and companies’ implementation of these relatively new standards. Expect attackers to attempt to tamper with Web-services transaction data, deploy transactions that could contain potentially malicious payloads, and launch denial-of-service attacks (see Motorola Secures Web Services).

Spyware is one of the fastest-growing Internet threats. Unlike worms, viruses, and denial-of-service attacks, which are obvious when they strike, the crafters of spyware don’t want their work to be discovered.

Virus authors have written applications such as the Cabir virus, which spread via Bluetooth, and the Skulls Trojan, which disguised itself as a cell-phone wallpaper or ring tone but actually disabled some cell-phone functionality and turned icons on the screen into images of skulls (see Worm Is First To Target Mobile Phones).

Expect hackers to exploit weaknesses in RFID tags to attempt to wreck havoc on supply-chain systems by changing details stored on the tags, including pricing and the actual product.

http://www.informationweek.com/showArticle.jhtml;jsessionid=E3MTPP5V3IO0OQSNDBCCKHSCJUMEKJVN?articleID=54201336

Read more

Posts navigation

  • Previous
  • 1
  • …
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • …
  • 52
  • Next

Recent Posts

  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15
  • IT Security News – 2023-09-25
  • IT Security News – 2023-09-20

Archives

  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme