Security News


Sendmail and PGP Partner to Meet Compliance-driven Demand for E-mail Encryption

E-mail encryption is now one of the fastest-growing categories in the e-mail security market, concludes a recent study by Osterman Research, and it’s likely to grow by more than 100 percent over the next 12 months. One of the key drivers of this warp-speed growth spurt, the analysts found, is corporate anxiety about regulatory compliance.

Web Services: Careful, It’s a Circus Out There...

Tricky security requirements and a lack of clear-cut standards make exposing applications as Web services a high-wire act.

PreEmptive Solutions bolsters Dotfuscator and DashO

In an effort to help companies develop secure applications for Microsoft .NET and Java, PreEmptive Solutions released Dotfuscator Professional Edition 3.0 and DashO 3.2.

Windows XP SP2 Deadline: Are Your Systems Ready?

It’s April 12, and do you know where your Windows XP systems stand? The mechanism to temporarily disable delivery of Windows XP Service Pack 2 (SP2) expires today. Microsoft allowed temporary disablement through Windows Update and automatic updates for a period of eight months, starting August 16, 2004, to give customers more time for validation and testing of the update. But now, time’s up.

Congress Looks at Enterprise ID Management

If you're not nervous about identity management and security in your organization, you're just not paying attention. Recent ID heists at ChoicePoint and Bank of America lit a veritable bonfire under Congressional behinds, and lawmakers are set to put the onus for safeguarding customer info squarely on the shoulders of the enterprise.

ZigBee Alliance Opens Membership to Adopter Class

The ZigBee Alliance has begun promoting a new adopter class level of membership, which the group hopes will appeal to companies that want to develop ZigBee-based products, but don't care about extensive participation in the organization promoting them.

Want Better Security? Bridge the Gap Between Dev and Ops

Computer security guru Gary McGraw is famous for pushing developers to take responsibility for building secure software. The operations side can only do so much with buggy applications and flawed systems, he has said. It's up to "the guys who build stuff for a living" to stop thinking about security as a feature, and to begin seeing it as an emergent property of a whole system.

RSA Panelists Clash in Cybersecurity Regulation Debate

To regulate or not to regulate; that was the question for a panel of IT industry notables at last week's RSA security conference in San Francisco. In an on-stage debate that sparked some heated exchanges, the panel--which included former White House cybersecurity czar Richard Clarke, Information Technology Association of America (ITAA) president Harris Miller, TechNet president Rick White, and IT security expert and author Bruce Schneier--took on the issue of software liability and whether there should be more government regulation of the private sector, including the technology industry.

RSA Security and Rivals VeriSign and TriCipher Launch Competing Security Offerings at RSA Conference

The 14th annual RSA 2005 Security Conference and Expo, under way this week in San Francisco, saw an upstart and an old rival announce products and initiatives aimed at taking market share from the event's namesake.

Gates at RSA: Better Security, New Version of IE

Bill Gates, Microsoft chairman and chief software architect, made two big announcements during his conference-opening keynote at this week's RSA security conference in San Francisco. He told attendees that his company was on track to deliver the first version of "the ultimate mail virus protection" for Windows users by the end of this year. He also revealed that Microsoft will be releasing a new version of the Internet Explorer browser with strong, built-in security features.

Liberty Alliance Releases First Phase of Web Services Framework

Because the importance of identity has been elevated across the board, Liberty Alliance, a global consortium for open federated identity standards and identity-based Web services, has released ID-WSF 2.0, the second version of its Web services framework specifications.

Sun Delivers Security Announcements

Sun Microsystems is coming to this year's RSA 2005 security conference, under way this week in San Francisco, with several "love for the customer" Valentine's Day announcements. And after years of preaching that "the network is the computer," there's a bit of I-told-you-so swagger in the Santa Clara, CA-based systems company.

Make an ESB Secure

Discover the many security services built into the ESB technology.

Managing to Cope with Patches

Keeping up with a steady stream of patches to close security loopholes and upgrade apps has become time consuming and costly.

News bits

A few tidbits of news: VMware launches a new product for secure provisioning of computers outside the enterprise, StrikeIron adds to its stable of Web services, NS-BASIC moves to the desktop.

Review: Microsoft Windows AntiSpyware (Beta)

Microsoft's latest tool for fighting malware is a credible entrant in a market that they helped create. I've taken it for a spin and like most of what I see, despite some rough edges in the beta version.

Review: DevPartner SecurityChecker

These days all developers need to be security experts - but it doesn't hurt to have some help. That's where DevPartner Security Checker comes in, helping you keep an eye on the security issues in an ASP.NET application from start to finish. With an extensive knowledge of secure coding practices, it can help almost any ASP.NET developer do a more secure job.

Book Review: The .NET Developer's Guide to Windows Security

It's pretty hard to be a developer these days and not think about security. But many of us are having to catch up all of a sudden on the intricate and confusing details of the Windows security infrastructure. Keith Brown's new book makes learning what you need to know much, much easier.