How A Security Company Applies Security
By Larry Ketchersid, Chairman and CEO at MediaSourcery
Similar to security assessments, network architecture designs and other projects, a development project, such as this one involves the exchange of confidential data, including in this case, intellectual property designs, requirements documents, test plans, code fragments and road maps. We could have chose to exchange these documents over email, or printed them out and sent them next day parcel post. Instead, we ate our own dogfood and utilized IslandPKI encrypted document and message transfer…
Lest We Forget About Enterprise Security
By Shubhendu Parth, CTO Forum Team
Are CIOs spending less time on supervising what they should be doing the most—strengthening the citadel and securing the digital assets—particularly when corporate wide cyber crimes and espionage have started to show a quantum jump even in developing economies like India? Security may be a key thing that worries CIOs, but there are other things that keep him occupied these days.
Security Assurances are Challenge for CIO’s
From the CTO Forum Team
In an exclusive interview with the CTO Forum, Tom Clare, Sr. Director Product Marketing Blue Coat Systems, cautions CIO’s about the ignorance towards the growing web-based security threats and prescribes simple remedies to prevent from damages.
Optimizing Multiple Enterprise Applications
From the CTO Forum Team
Enterprise applications choke the corporate IT networks, and the blame invariably falls on bandwidth scarcity. Jeff Barker, VP solutions and Technical Marketing at Blue Coat Systems, talks exclusively to Rahul Neel Mani about application optimization and secured delivery.
Strategies for Secure Storage Initiatives
From the CTO Forum Team
As part of their storage security strategy, enterprises must understand the value of such intellectual property in combination with the risk tolerance of the organization before they can address how to appropriately secure it and store it. Moreover, because the value of information changes over its lifetime, so should its storage.
You Know Who’s Tapping Your Cell Phone?
By Greg George, Managing Partner of GTI Advisors
The first recommendation I make to anyone about to discuss sensitive information, remove the battery from your cell phone at every meeting, or leave the damn phone in the car – The protections you think you have doesn’t matter, anything, ANYTHING wireless, can be hacked and monitored, and quite easily…
Wozniak, et al Discuss Ripcord VoIP Security
By Kevin M. Nixon, Information-Security-Resources.com Security Editor
I recently had the opportunity to talk to some of best known innovators of our time, including Steve Wozniak, John McAfee, Alex Fielding, Phil Zimmermann, Jon Callas and Marc Hodosh. They discuss the fatal flaw in VoIP which create the ability to perform warrantless wiretaps and what they have done to lead the industry toward more trusted and secure Cyberspace.
Interviews with Wozniak, McAfee, more…
By Kevin M. Nixon, Information-Security-Resources.com Security Editor
I recently had the opportunity to talk to some of best known innovators of our time, including Steve Wozniak, John McAfee, Alex Fielding, Phil Zimmermann, Jon Callas and Marc Hodosh. They discuss the fatal flaw in VoIP which create the ability to perform warrantless wiretaps and what they have done to lead the industry toward more trusted and secure Cyberspace.
E2E Encryption Prescription Is Bad Medicine
By Kevin M. Nixon, Information-Security-Resources.com Security Editor
Encrypted traffic cannot be analyzed by a firewall unless either decrypted permissively or decrypted forcibly. The same traffic cannot be cleansed of viruses, or worm signatures, or attack characteristics (IIS URL length overflow) until the traffic is decrypted on the host. Clearly, traffic should never hit a multi-purpose operating system until after all of this happens. End-to-end encryption is what we want, but not at the price we’d have to pay. Protection of data during creation, transmission, processing and storage or End-to-End-Defense-in-Depth is what we really want, as it ensures the defense in depth best practices are not lost.
