Search

The article discusses various emerging technologies that gained popularity during 2007, innovations that will help enhance business process, and technologies that have failed. The technologies include, open social networks, next generation smart phones, web-based applications, data encryption, network connectiveness, green technology, semantic Web, and low-cost laptops. The author believes that technological innovations will greatly affect the working process in the technology industry. He suggests that it's up to the information technology workers to act effectively against disruptive technologies to provide a competitive boost. INSET: TECH ON THE CUTTING EDGE.

The article offers insights relevant to laptop security. It discusses the threats that a stolen laptop poses to corporations. According to the author, a lost laptop exposes critical data of companies to the hands of thieves. Laptop hard drive encryption, a response by information technology professionals to the problem of laptop data security, is discussed. Industry analysts John Girard states that multiple encryption entails broader management tools. The author emphasizes that user education is still the key component to laptop security problem.

The article provides information on the security features of the operating system Windows Vista, from Microsoft Corp. The security features of the operating system include strengthened firewall, improved anti-spyware guarantees, Bitlocker encryption drive. These new security features would be more beneficial for the customers rather than the corporations. Data can be protected from offline attacks from other boots, by configuring the Bitlocker in such a way to need a user-entered PIN. To support Vista, the boot manager and boot images should be separated in the hard drive from the remaining operating system, applications and data files.

The article reports that intrusion prevention systems have taken significant steps forward in terms of performance, accuracy and ease of management, but not to the point where they can replace firewalls or other security products. They are, however, becoming an important piece of the network security puzzle. Networks Inc.'s newest IPS: the Attack Mitigator IPS 5500 Version 3.2 appliance. The tests show that the product now matches competing systems by offering a highavailability configuration. Using this feature, we were able to seamlessly track network traffic coming to a single internal device from two separate, redundant network connections. Network IPS hardware devices can augment perimeter firewalls and antivirus tools and provide internal security by controlling traffic between enterprise network segments. The Attack Mitigator should be seen as another layer of the security onion. Indeed, you can feel pretty well protected with network security devices behind the Attack Mitigator, such as IDSes inside the network and firewalls at the perimeter. INSETS: SAMPLE RFP;Tips for testing an intrusion prevention system.

The article focuses on the complexity factor and security issues of remote access confronting information technology (IT) professionals. According to Intel's director of Security Technology and Initiatives Tom Quillin, data encryption should be integrated in the primary end-user machines to address security issues of remote access. It says that cloud computing can be the solution for the complexity issues relative to remote access making workers more flexible while reducing the company's costs.

The article reports that business continuity and data preservation mandates require that IT managers not only create backups but also be able to recover data in a timely fashion. Because of new regulations and compliance measures, among other things, backup is one of the few applications that virtually every company either has or needs to implement. The security of removable media and WORM storage has become an important issue, along with basic backup features. This year's rash of embarrassing headlines about tape thefts and losses has made encryption a requirement for virtually every company that needs to transport tapes offsite to a data vault. Although tapes can be encrypted using a stand-alone encryption device such as one from Decru Inc. or NeoScale Systems Inc., most backup solutions do have basic encryption capabilities. The level of encryption and the key management of these bundled solutions may not be acceptable for larger companies with strict compliance requirements, but smaller businesses may find that the basic bundled functions ably meet their needs. INSETS: RFP BACKUP SOLUTION.;Unitrends' DPU solution provides fast backup..

The article focuses on the new products related to database security in an organization. New products from Pointsec Mobile Technologies AB and WinMagic Inc. provide data encryption and tightened authentication on Microsoft Corp. Windows desktops and notebooks, as well as on Pocket personal computer (PC)-based devices. These products and others like them increase the management and performance overhead of the mobile systems on which they're installed, but organizations that allow employees to carry sensitive data out of the relative protection of their campus walls can't afford to be without the protections they afford. With Pointsec' software, a dynamic password or a USB or smart-card token can be used for boot-time authentication. The Pointsec and Securedoc products encrypt and decrypt data as it's written to and read from the hard disk without user intervention. Pointsec for PC ships with an administration utility that let us create profiles to control the installation, update and uninstall of the Pointsec software on individual clients.

This article presents information on secure mail and data protection in the U.S. For companies that want to encrypt outbound e-mail without burdening recipients with client requirements, both PostX Corp.'s PostX Trusted Enterprise and Voltage Security Inc.'s Secure Mail do a good job of providing simple-to-use solutions. Trusted Enterprise is priced at $35,000 for a redundant server implementation. Secure Mail starts at $75,000 for 250 client licenses and an unlimited number of recipient licenses. Secure-Mail's license scenario allows 250 internal users to generate encrypted messages that can be read by an unlimited number of external recipients through the Voltage Zero Download Messenger client. Both applications, which shipped in August, can encrypt e-mail messages inside the firewall and point the recipient to a Web server that delivers the encrypted message to the recipient. In addition, Trusted Enterprise can deliver an encrypted envelope that can be decrypted and viewed offline without additional client software.

Focuses on the right time to decide the need for public-key infrastructure (PKI) encryption system in an information technology company in the United States. Benefits of incorporating PKI in the company; Reason for the failure of the initial implementation of PKI system; Details on system operation.

CipherTrust Inc. on Monday announced a new architecture for its IronMail solution that is designed to protect users' privacy through the use of a diverse set of encryption capabilities. The […]

NEWS ANALYSIS: Overcoming enormous pre-show hurdles, asset management vendor Axonius won the RSA Conference 2019's Innovation Sandbox. Duality's collaboration platform rides homomorphic encryption to a second-place finish. [ABSTRACT FROM AUTHOR]

NEWS ANALYSIS: Senior White House staff members are only the latest folks to confuse encrypted communications with something that's safe. [ABSTRACT FROM AUTHOR]

Slack's latest addition to its Enterprise Grid is an add-on that gives customers the ability to use their own encryption keys, giving them greater control and visibility to their data. [ABSTRACT FROM AUTHOR]

NEWS ANALYSIS: Mark Zuckerberg says he wants Facebook to move toward personal, secure messaging and away from open broadcasting, but is this really about something else? [ABSTRACT FROM AUTHOR]

Among the features in the Linux 5.0 kernel is support for encryption technology for low-power devices, as well as an improved filtering mechanism to enhance container security. [ABSTRACT FROM AUTHOR]

LinkedIn updates Sales Navigator and gets closer to Salesforce, and Baffle extends its Data Protection Service to AWS Lambda serverless. [ABSTRACT FROM AUTHOR]

EXCLUSIVE: Imperva is building out Runtime Application Self Protection (RASP) technology that it gained via the 2018 acquisition of Prevoty to help organizations detect network activity threats and weak cryptography at application runtime. [ABSTRACT FROM AUTHOR]

A new capability from Baffle will enable better protection and encryption for data that is being read or written from a data source by an AWS Lamdba serverless function. [ABSTRACT FROM AUTHOR]

SECURITY ANALYSIS: While the term "quantum proof" in regard to encryption has been bandied about for years, the reality is that you need more than that; you also need really secure key distribution. [ABSTRACT FROM AUTHOR]

eWEEK is creating a new series of articles which examine all sectors of IT and present up-to-date research and analysis on the leading companies in each space. It's all designed for enterprise buyers of hardware, software, services and cloud products to have more and better information in hand when the time comes to make an investment. [ABSTRACT FROM AUTHOR]

A security researcher who recently identified some vulnerabilities in Lotus Software's Sametime instant messaging client says the company is being disingenuous about the extent of the flaws and whether they're […]

A New York-based startup on Monday announced that it has a working prototype of a device capable of employing quantum cryptography to encode keys on existing high-speed networks. However, cryptographers […]

Ntru Cryptosystems Inc. next week will roll out a new public-key toolkit designed specifically for wireless devices running Java applications. Known as Neo Java, the new product encrypts data during […]

America Online Inc. this month will begin beta testing an encrypted version of its AOL Instant Messenger targeted at enterprises. The service, to be called Enterprise AIM, will be sold […]

PKI Products have a reputation for being expensive, tortuous to implement and lacking in applications. But an Ottawa developer is hoping to change that with a public-key infrastructure plug-in for […]

It's easy to list the tools that were used in horrific acts and to argue that depriving ourselves of those tools will prevent future similar incidents. It's easy, but it's […]

The advanced encryption standard is still more than two months away from government approval, but some vendors and cryptographers are already pouring over the spec, calling attention to it's promise […]

Cell phone browser maker Phone.com Inc. this week will introduce a product that patches a security hole in WAP, which is used for data transmission to handheld devices, according to […]

This, the year of the secu- rity breach, has brought unprecedented acceptance of security products. All but one. PKI (public-key infrastructure) two years ago held the title of most promising […]

Making a serious move toward bringing IM to the enterprise market, Novell Inc. last week released instantme 2.0. Novell is billing instantme 2.0-which was developed in conjunction with America Online […]

Since many e-mail hosts and their systems are inherently insecure, one software vendor is letting users take security into their own hands. HushPOP, the latest offering from Hush Communications Corp., […]

The article focuses on American technology company Cloudfare. Topics discussed include efforts of the company for growth and improve internet security, by announcing various services such as Encrypted Server Name Indication (ESNI) to increase internet privacy, content delivery network to support Quick User Datagram Protocol (UDP) Internet Connection (QUIC), and Bandwidth Alliance .

The article reports on American technology company Google Inc.'s release of a whitepaper which details its cloud data deletion process. Topics discussed include the safe deletion of data requested by enterprises that are using Google's cloud services, the use of cryptographic erasure or a mark-and-sweep garbage collection process to overwrite the deleted data over time, and Google's decommissioning of physical storage media.

The article offers information about the move of Enveil to launch its ZeroReveal Computer Fabric technology, which aims to provide organizations with an encrypted data in-use platform that can protect against nation-state level data threats. Other information about the homomorphic encryption technology, which was developed by the National Security Agency, is presented.

DAILY VIDEO: Red Hat Launches Fuse 7 and Buildah 1.0 to Advance App Development; Proposed ENCRYPT Bill to Create National Data Encryption Rules. [ABSTRACT FROM AUTHOR]

The article informs that cyber-security vendor Baffle has revealed an update to its Advanced Data Protection Service on June 4, 2018 by which users can search encrypted data. It is noted that technology of Baffle encrypts data before it goes into a database. According to Harold Byun, vice president of products and marketing at Baffle, the technology enables firms to use their own encryption keys to interoperate with the database tier.

The article offers information on the General Data Protection Regulation of the European Union and failure of services such as blockchain and "WHOIS" internet domain to meet its requirements. Topics discussed include the impact of data encryption on transparency with blockchain, need of the Data Protection Officer for using blockchain and problem in processing personal information.

The article evaluates the Google Pixel 2 smartphone from Google Inc., which has an encryption feature that ensures even an attacker with highly-privileged access to a mobile device won't be able to access data.

The article focuses on secrets about using firewalls in enterprise security and unauthorized access while permitting outward communication. It mentions study from Sophos on updating the state of firewalls in the world with the lot of chief information security officers and lack of visibility creates significant security challenges and impacts effective network management. It also mentions factors such as the increasing use of encryption, browser emulation and evasion techniques.

The article discusses the issues regarding data breach at Panera Bread as its executives ignored the warnings from a cyber-security researcher that customer data was exposed on its network. It mentions Panera tried to accuse the security professional of running a scam, of trying to drum up business and of looking for some kind of compensation. It also mentions need to encrypt data resources to ensure if attackers succeed in breaking into network.

The article presents results of the 2018 Annual Cybersecurity Report conducted by software networking manufacturer Cisco Systems Inc., which revealed the increase in number on use of malware authors and data traffic. The report examines the factors of the global web traffic due to the rapid increase in malware authors and number of cybersecurity vendors. It also notes on the damages of cyber-crime attacks to the industry.

The article offers information on the complaint of the Google Chrome users who use HTTP. Topics discussed include websites use encryption to better protect Internet communications and transaction against snooping; announcement of plan for the transition by Google; and Chrome traffic on Windows and Android systems.

The article discusses the key adaptive networking mandates for network operators. Among the mandates include the need to integrate the 5G technology, adoption of in-flight encryption to keep networks secure, supporting the green networking technology to reduce costs and the importance to be open to more opportunities that will leverage commodity hardware and application programming interface.

The article reports on the use of machine learning by networking hardware company Cisco Systems Inc. for its Encrypted Traffic Analytics (ETA) offering, which is part of its effort to respect privacy whule helping organizations remain secure. It presents the view of T. K. Keanini, principal engineer and product line chief technology officer (CTO) for analytics at Cisco on the development of threat telemetry for major community users and the capabilities offered by ETA for malware detection.

The article focuses on the statement of Amazon Web Services (AWS) chief technology officer (CTO) Werner Vogels during the AWS re:Invent conference in Las Vegas, Nevada on November 30, 2017 concerning the relevance of cloud development security. Vogels details the importance of the best practices of cloud security to enable a well-architected cloud architecture. He also shares the need to use encryption technologies and automation to protect data and prevent human omissions and errors.

The article discusses the importance of the employee's loyalty to the businesses wherein the companies and government agencies are vulnerable to the insider threats. Topics mentioned include the security risks of the devices with access to sensitive data of the company, the increase number of organizations monitoring their user behavior and the unintentional data breaches due to user carelessness or negligence.

The article reports that Amazon Web Service (AWS) announced a series of new security features for its cloud platform which provide users with enhanced capabilities to help protect S3 storage buckets and virtual private cloud (VPC) endpoint connections. It mentions AWS is adding five new encryption and security features to S3 to help protect cloud storage, including default encryption, permission check and Key Management Service.

The article reports on the Key Reinstallation Attacks (KRACK) that was disclosed on October 16, 2017 by researchers Frank Piessens and Mathy Vanhoef. Topics mentioned include the risk on Wi-Fi Protected Access 2 (WPA2) protocol that is used for WiFi security, the attack that reads information that was assumed to be encrypted, and the plan to discuss the details of the attack at the Black Hat Europe conference.

The article offers tips on how to keep the organization's network safe from theft and intrusion. It highlights the importance to establish trust between the organization and its information technology infrastructure to protect all valuable data. Among the suggestions mentioned include the need to ensure the reliability of the software and hardware systems, must consider the core factor of trust and incorporate the combined elements of encryption, intrusion protection and other platforms.

The article discusses the release of the fourth version of the computer operating system Linux kernel by Linux creator Linus Torvalds on American labour Day. It talks about its features like Kernel Transport Layer Security (KLTS), improved Common Internet File System (CIFS) for cross platform file sharing, and data improved encryption performance.