Security News


Pervasive tightens data security

New versions of three products address data availability, accountability and integrity without having to write additional code.

BEA launches third phase of security plan

Launch of BEA WebLogic Enterprise Security (WLES) first new product resulting from February acquisition of CrossLogix.

CEO complacency blamed for bug incursion

Analysis of the recent wave of virus attacks.

Architecting Security for Web Services

Ponder the security challenges posed by Web services, how to address them with security architecture, and what security architecture can offer going forward when XML traverses firewalls.

Managing for Security

For many reasons, enterprise application security is an inefficient and expensive model. Obviously there''s no such thing as a completely secure application, but enterprises must target an acceptable level of risk.

Microsoft, IBM and others unveil new security specs

New standards rolled out at the Catalyst conference.

CA expert says security model is changing

Company says content management, not content blocking, is the future.

WSDL rolls along

A cornerstone of Web services, the WSDL spec continues to evolve; experts hope upcoming versions can bring it to a new level; a look at today’s WSDL tools.

CA, Pinkerton take on security cases

Venerable security takes on high-tech crime.

Blueprinting Your Database Landscape

Crafting a map of your database servers can help you build better systems, from increased security to solid disaster-recovery plans. Take these steps to get your server network in order.

Pervasive buys security software firm

Database maker adds security function to its BI software.

RSA integrates ID management; discloses 'Nightingale'

Company offers new way to use its security product, and unveils a defense against attacks from inside and out.

Rule of secure coding: 'See input as evil'

We recently asked security maven Steve Orrin to tell us some of the tenets of secure coding today.

PKZip adds security, ports to new platforms

Maker of compression utility adds features to flagship product.

Tool for .NET developers takes drudgery out of security

At this week's VSLive in San Francisco, security specialist Sanctum Inc. announced an automated security testing suite for application developers -- AppScan Developer Edition (DE) 1.5 -- that can integrate with Microsoft's Visual Studio .NET.

Immune to attacks: Start-up has new medicine

The application and operating system levels are the places to focus on when detecting and blocking hacker attacks, said the founder of Sana Security Inc., a new technology company pledged to provide better computer security.

Tips for developing secure Microsoft apps

Microsoft's in-house development groups last year took a well-publicized sabbatical to try to better ensure the security of the company's software. Best practices developed during and since that "trip to the woodshed" have now led to guides and suggestions the company offers to all developers working on its Windows -- now .NET -- platform.

What to do before hackers attack your program

According to Gary McGraw, CTO at Cigital, the greatest threat to computer system security is "the software you wrote yourself without thinking about security when you were writing it." He offers some tips on avoiding hackers and script kiddies.

Standardization key to Web services security

It is time to move beyond the pre-Web services model for security systems, contends Kerry Champion, president of Westbridge Technology Inc., a Mountain View, Calif.-based start-up builder of XML firewalls.