Access Control
Access Control news, information, and how-to advice
How the private sector can learn from government cybersecurity guidance
The National Institute of Standards and Technology (NIST) has been the voice of consensus and reference material in identity management cybersecurity best practices by outlining the requirements and providing insightful reference...
Department of Defense contractors must implement IT security controls by December 31
Organizations doing business with the U.S. Department of Defense (DOD) must demonstrate their ability meet higher levels IT security for their corporate network and systems by Dec. 31, 2017 or risk losing business.
Redefining perimeter network security: The future is a hybrid
As information pushes further into the cloud, the role of perimeter security is changing. It will become part of a multifaceted solution for network security.
Top secret government files stored without password protection on Amazon server
Classified U.S. Army and NSA files about an intelligence platform were left exposed on an Amazon S3 server by a contractor.
White Paper
UC&C in the Public Sector: Time to Make the Right Call
Unified Communications and Collaboration has moved to the top of the agenda across most government and education networks. With the ability to power enhanced productivity and greater cost savings, adoption and integration of these
Big picture security
Context and risk aware access control promises to make our industry more likeable.
Google Advanced Protection Program protects high-risk users from hacks
Google Advanced Protection Program requires physical keys to access a Google account, protects against phishing, and blocks fraudulent.
Authenticating your customers: the tripartite of consumer authentication
Things to consider when choosing which authentication options to offer in identity systems for wide demographics. How the mix of security, usability, and customer attitude affects that choice.
How China got its hand on U.S. nuclear technology materials
Allen Ho infiltrated the U.S. nuclear power program over a period of 20 years and helped advance the Chinese nuclear program.
Identity data in the world of GDPR
The GDPR says that “The processing of personal data should be designed to serve mankind.“ How CIAM identity systems can help serve some of the privacy requirements of GDPR.
Enhancing API security: dynamic authorization to protect sensitive data
APIs that handle sensitive data pose security and data access control threats, require advanced security solutions. API Gateways effectively manage the authentication of the user and provide service orchestration capabilities. But if...
How to protect your email account from Equifax hackers in 5 minutes
Use two-step verification to protect your email accounts from the Equifax hackers.
Using identity to protect the mobile perimeter
It’s the biggest threat surface and best enforcement point for enterprise security
Abandoned mobile apps, domain names raise information security risks
When app creators abandon domains for bigger, better deals, what happens to all the app-specific data?
When identity data eclipses digital identity
Digital identity needs to be redefined as verified identity data. Identity data, using the right tools, can be used to carry out online jobs on behalf of the real me. But the right technology, aka personal data stores, need to be in...
Top 5 container mistakes that cause security problems
As enterprises increase their adoption of containers, they are also increasing the number of security mistakes they make with the technology.
Hacking the GDPR
Using anonymization and pseudonymization to reduce the overhead of GDPR compliance.
Cylance blamed for DirectDefense’s ‘botnet’ disclosure
Twenty-four hours after Carbon Black responded to a report from DirectDefense that their Cb Response product was leaking customer information (it doesn't), one company executive is pointing the finger at Cylance as the source of the...
Pentest firm calls Carbon Black "world’s largest pay-for-play data exfiltration botnet"
On Wednesday, DirectDefense, Inc. disclosed that they've discovered hundreds of thousands of files from Carbon Black customers. The discovery is said to pose a significant risk to Carbon Black's clients, because of the company's...
Engineering firm exposes SCIF plans and power vulnerability reports
Chris Vickery, director of cyber risk research at UpGuard, Inc., says that a misconfigured Rsync server maintained by Power Quality Engineering, Inc. (PQE) exposed client information pertaining to critical infrastructure for the City...
What's the ROI on attribute-based access control?
Despite the predicted growth of attribute-based access control (ABAC), misconceptions about it leave decision makers concerned about ROI
Sponsored Links