Infosecurity

0

comments

Going Up? Safety First, then Send your Data to the Cloud

By Joe Sturonas As the proliferation of data continues to plague businesses, the pressure is on for companies to migrate away from their physical data centers. Cloud computing is being adopted at a rapid rate because it addresses not only the costs for physical space, but also rising energy costs a ...

Posted 28 March 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, compliance, encryption

0

comments

A Chat with Dimension Data: Data Centric Security, Data Breaches, and Why Old is New in Security

This week I sat down with Anna Watson, general manager of security solutions, Europe, at Dimension Data, to have a chat about the state of the information security industry. One direction that the industry seems to be moving in, commented Watson, is towards platforms. “Even the ...

Posted 27 March 2013 by Eleanor Dallaway

tags: breach, dimension data, information security , Data-centric

0

comments

How to Harden Your APIs

By Andy Thurai The market for APIs has experienced explosive growth in recent years, yet the major issues that providers still face are protection and hardening of the APIs that they expose to users. In particular, when you are exposing APIs from a cloud-based platform, this becomes very difficult ...

Posted 26 March 2013 by Cloud Security Alliance (CSA)

tags: API, cloud computing, identity, encryption, tokenization

0

comments

If Your iPhone Could Talk...

Andy Greenberg at Forbes has shown us the information that law enforcement can recover via a seized iPhone. The article is essentially in response to one published by the American Civil Liberties Union highlighting the amount of information the US Immigration and Customs Enforcement (ICE) agency was ...

Posted 25 March 2013 by David Harley

tags: Forbes, Andy Greenberg, forensics, iPhone, smartphone, ACLU, David Harley

0

comments

Three Critical Features that Define an Enterprise-Grade Cloud Service

By David Baker The line between enterprise and consumer is fading as employees work from all manner of devices to access the on-premises, cloud and even consumer applications needed to get work done. But it’s important to not confuse enterprise and consumer services from a security standpoint ...

Posted 22 March 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, encryption, CSA STAR

0

comments

Why Should I Get My Certificate of Cloud Security Knowledge (CCSK)? Or Train to be a CCSK Trainer?

“The CSA, in providing a set of goals through the CCSK, is challenging security practitioners to become the cloud thought-leaders we need today and tomorrow to ensure safe and secure cloud environments. In developing the CCSK, CSA is 'setting the bar' for security professionals and providing ...

Posted 20 March 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, certification, training, professional development, CCSK

0

comments

The Shrinking Security Model: Micro-perimeters

By Ed King As cloud and mobile computing make enterprise IT ever more extended, the traditional security model of keeping the bad guys out and allowing only the good guys in no longer works well. While the reach of the enterprise has expanded, the security perimeter may actually have to shrink to ...

Posted 20 March 2013 by Cloud Security Alliance (CSA)

tags: authentication, SSO, cloud computing, API

0

comments

My morning at CrestCon/IISP Conference

So far, I’ve listened to three talks - sadly I wasn’t allowed to attend the keynote given by CESG – and will be returning after lunch (I’m currently camped out in Café Nero regaining some charge on my laptop and iPhone) to hear some more. Information security isn&rsqu ...

Posted 20 March 2013 by Eleanor Dallaway

tags: CREST, IISP, Annonymous, CISO

0

comments

Net Neutrality: Is it Necessary?

At the moment, the US Federal Communications Commission (FCC) is fighting an on-going legal battle with the telecommunications company Verizon over their net neutrality rules, which were initially proposed in 2009, as an addition to the FCC’s 2005 Internet Policy Statement, which outlined the ...

Posted 15 March 2013 by Jean-Loup Richet

tags: net neutrality, censorship, Jean-Loup Richet, Verizon, ISP, Open Internet, US Federal Communications Commission

0

comments

I Want My Nua Mek 2...Yes, Hackers Watch TV Too

We’ve all been disappointed when a favorite show is canceled, be it Arrested Development, Freaks and Geeks or, more recently, 666 Park Avenue (err…or is that just me?). But Thailand’s National Broadcasting Commission (NBC) got more than it bargained for when it made the fateful de ...

Posted 14 March 2013 by Slack Alice

tags: hacktivist, hacktivism

0

comments

The Age of Bring-Your-Own-Identity (BYOID)

Sellers of computer security products and services sometimes fret that their messaging is too scary as they go on about risk, data loss and regulatory fines. To get around this, every so often they like to remind potential buyers that their wares are also business enablers. The case is easier to mak ...

Posted 11 March 2013 by Bob Tarzey

tags: BYOID, IAM, identity, access management

0

comments

It’s McAfee. James McAfee.

A game of high-stakes, technical espionage that targets the highest levels of government? A bevy of presumably beautiful female double agents? A nefarious foe bent on the destruction of the US, operating in the shadows under a cover of legitimacy? These are not the trappings of a new James Bond inst ...

Posted 05 March 2013 by Slack Alice

tags: James McAfee, Belize, terrorism, spyware, malware

0

comments

APTs and Oscar Wilde

“The only thing worse than being the victim of an APT is *not* being the victim of an APT.” Or, at least, that’s probably how Oscar Wilde would have seen it, had he been following the news recently. (He rather famously said something similar when told that all of London was ...

Posted 01 March 2013 by Geoff Webb

tags: APT, Fahmida Rashid, Oscar Wilde, Hacking

0

comments

The Trouble Heading for your Business in 2013

Facebook, Twitter, Apple and Microsoft: all icons of the information technology industry and all the focus of targeted attacks in Feb 2013. The bad news for us all is, that even those that should be some of the most tech-savvy companies in the world, can fall foul of targeted attacks. Micro ...

Posted 01 March 2013 by Bob Tarzey

tags: targeted attacks, hacktivism, Twitter, Facebook, Microsoft, Apple, Quocirca

0

comments

Cruising the Misinformation Superhighway

Long before there was a World Wide Web, when the internet was largely a playground for academics and the military, and most people still thought spam was a canned meat, there were already hoaxes and scams (pyramid schemes, Ponzi schemes, lures into premium rate phone services, fake friends a ...

Posted 28 February 2013 by David Harley

tags: David Harley, hoax, social media, web 2.0, ESET, Facebook, social engineering

0

comments

Censorship’s Losing Battle in China

Recently, Brad Pitt was the latest celebrity to join up to China’s foremost micro-blogging platform, Sina Weibo, joining the likes of Selena Gomez, Paris Hilton, Emma Watson, and, strangely, London mayor Boris Johnson. Sina Weibo is in Mandarin, of course, but companies such as FansTang in the ...

Posted 27 February 2013 by Jean-Loup Richet

tags: Censorship, China, Jean-Loup Richet, Sina Weibo, Center for Media and Democracy

1

comment

RSA 2013: Interview with security evangelist Stephen Cobb

I’ve just spent a fascinating 45 minutes picking the brain of ESET security evangelist, Stephen Cobb. Below are the key statements made by ESET's Cobb during the interview, and his explanation for each: The theme of this year’s RSA is Big Data Sharing “We’ve been ...

Posted 27 February 2013 by Eleanor Dallaway

tags: ESET, RSA, Stephen Cobb

0

comments

Language is a Virus (Editorial from Q1 issue)

This year we are scaling back on the quantity of issues produced (the magazine will now be published quarterly) in order to allow the editorial team to increase the output of online content. Not only will we be producing more daily news stories, but we will be publishing features, interv ...

Posted 25 February 2013 by Eleanor Dallaway

tags: The Guardian, CEO, Information Security

0

comments

Finally, a Step Forward in Cybersecurity

0 0 1 502 2784 Extension Group 48 7 3279 14.0 Normal 0 false false false EN-US JA X-NONE ...

Posted 21 February 2013 by (ISC)² U.S. Government Advisory Board Executive Writers Bureau (EWB)

tags: cybersecurity, executive order, Obama, education

2

comments

When Good Is Not Good Enough: NIST Raises the Bar for Cloud Data Protection Vendors

By David Stott Earlier this year, the US National Institute of Standards and Technology (NIST) released a publication titled Cloud Computing Synopsis & Recommendations (Special Publication 800-146) describing in detail the current cloud computing environment, explaining the economic opport ...

Posted 21 February 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, NIST, encryption, SaaS, FIPS 140-2, tokenization

Tag Cloud

Bloggers

Blog

Members' Login

Not a member?