Using Data Auditing & Data Encryption to Achieve PCI Compliance
562774
(Source: Tizor)  With the severity of recent data breaches affecting brand name merchants, anxiety in the security and compliance community has reached a new high. Questions are being raised about what it means to be PCI compliant, particularly in the context of protecting sensitive data from data breaches.
428938
Company backs 128-bit encryption, support for home LANs
197741
(Source: Qualys) Consistent, ongoing execution of vulnerability management and policy compliance is difficult, if not impossible to do on a manual basis. There are simply too many "moving parts" to juggle and act on in a timely and cost-effective manner. This guide provides a step-by-step guide for automating the vulnerability and compliance workflow process.
550836
Computer shoppers who want and can afford the fastest machines face a dilemma as they decide just how to spend all that cash. Desktop PCs using the new PCI Express design - a faster way
486976
In the third article in his "Age of Compliance" series, Dr. Anton Chuvakin looks at how intrusion detection is specified -- or not -- by three major standards: FISMA, HIPAA and PCI-DSS.
194775
Another data security bill in the works &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
185104
Multiple laws and regulations exist to protect customer data. The unfortunate consequence of multiple laws governing confidential data and encryption is that none offers prescriptive guidance. Whether encryption solutions and strategies satisfy a particular law is left up to the auditors and lawyers. Still, there are several legal requirements that address confidential data.
386604
This article discusses the discovery of compromised machines in large enterprise environments, and offers some suggestions on correlating NIDS and HIPS logs to avoid false positives.
685106
Someday, encryption features built into a wide range of IT products -- from operating systems and messaging gateways to hard drives and storage systems -- may work in concert to offer central policy enforcement across different types of network assets and devices.
133399
Weakness in open-source GnuPG cryptography technology could let miscreants tamper with digitally signed, "secure" messages.
59274
As important as a physical supply chain Readers may recall that I wrote last year about Silver Creek SystemsÂ®. At that time I extolled its capabilities for product data quality (matching, cleansing and classification) through the use of semantically-based content profiling and attribute identification. This is particularly relevant when information comes into the organization in unstructured formats as most conventional data quality tools have historically been limited to support for structured information.â¦
462273
National Semiconductor has released its Safekeeper Trusted Input/Output chip, which stores passwords, digital certificates and encryption keys on PCs.
35985
Virtualized rootkits - Part 1 &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
686172
Ryan Malesevich is taking a break from his look at some handy WordPress packages to share a small series on how to move from using MD5 hashes out to SHA-1 hashes for passwords in a MySQL database. He's posted part one today.   What if you're using MD5 in your web application and want to switch over to another encryption method. It's actually not that hard and I plan to cover them in this multi-part tutorial (I know I planned on writing this months ago, but it's better late then never). In this first part I plan on going over updating the database structure and a 'pseudo-code' of what will need to be done.   As mentioned, he gives the outline (pseudo-code) of how the process will work - basically, creating an SHA1 hash of the MD5 and the username in a "newpassword" column added to your database.
691149
(Source: IDC) Encrypting data in transit is a start - but encrypting data in storage is widely recognized as the next frontier in security. Find out how you can mitigate financial risk, prevent identity theft, block internal leaks and more - while keeping your vital information accessible and manageable.
28239
A new attack against implementations of the popular RSA encryption scheme demonstrates how hard it is to protect information when someone else has control of the computer on which it resides.  Commentary by Bruce Schneier.
88257
InfoWorld - Sun Microsystems this week introduced identity audit and compliance software designed to give IT departments visibility into employee identity and system-access activities.