RSA releases delayed single sign-on product
678895
RSA Security Inc. on Monday plans to announce availability of its new RSA Sign-On Manager, a product it says will make it easier for users to log-in to multiple applications and simplify password management for organizations.
87414
A few of my previous columns discussed my vision of creating a more secure Internet. It involved replacing the Internet's default anonymity with pervasive authentication, from the hardware initialization, through the OS and all applications, the user, and ending with a verifiable network stream. It is my strong belief that without a complete overhaul of default authentication, malicious hacking is going to continue indefinitely.
455474
At the RSA Conference in Barcelona, Microsoft announced beta availability of Windows Rights Management Services (RMS) Service Pack 1. RMS, which drew concern after its 2003 debut, is designed to lock down sensitive documents such as e-mails from prying eyes.
39088
Exclusive A CD lock-in tech that only annoys P2P traders?
295779
Blog: Low ransom request and a self-termination date on the code suggest this is a test attack.
425039
Mozilla earlier this week issued a public beta of the next version of its Thunderbird e-mail client. In addition, it said it was delaying a planned security update to Firefox for unspecified reasons.
28239
A new attack against implementations of the popular RSA encryption scheme demonstrates how hard it is to protect information when someone else has control of the computer on which it resides.  Commentary by Bruce Schneier.
51482
Also: Tactile passwords could stop ATM 'shoulder-surfing'
34766
(InfoWorld) - Cisco Systems used the RSA Security Conference in San Francisco to trumpet its transformation from "packet pusher" to "infrastructure" company, unveiling a string of product updates that unify its diverse security portfolio on Monday. However, the company still has work to do to make that transformation complete and will need to ramp up its outreach to third-party vendors to make initiatives like its SONA (Service Oriented Networking Architecture) and Network Admission Control a reality, analysts and customers say. Cisco announced releases to its ASA (Adaptive Security Appliance) product, IPS, CSA (Cisco Security Agent), CSM (Cisco Security Manager), and MARS (Mitigation Analysis and Response System) products. The enhancements will give enterprises better protection against a new generation of sophisticated and targeted attacks and an evolving "human network" of mobile and Web based technologies, Jeff Platon, Cisco's vice president of security marketing told a room full of reporters and analysts on Monday. "When you think about our role and how it's evolved, we've moved from being a packet pusher to an infrastructure company," Platon said. "And if you look at the trends, Cisco's not going to be a network vendor. Whether its voice or video in the consumer space, those requirements are going to change what Cisco becomes to the marketplace." But key elements of the company's transformation are very much works in progress that will require Cisco to forge close ties with other vendors before they bear fruit. SONA, an effort to create a service-oriented architectural framework that unifies network-based services like security, mobility, and location on virtualized platforms, will require close cooperation with third-party vendors that may be Cisco competitors in some areas, said Richard Palmer, senior vice president of Cisco's Security Technology Unit. "If we allow third-party applications to operate on our platforms like ASA and ISR, it will make for a tighter set of partners and more longevity," Palmer said. Currently, Cisco has a number of teams across the company developing SONA components for functions like authentication and control plane and data plane integration for third-party products to work on platforms like Cisco' ASA, Palmer said.Â  To promote SONA, Cisco will strike more deals like the joint marketing initiative with SAP on governance, risk, and compliance solutions, which it announced in September. Similarly, the company will need to work closely with firms like Microsoft and other third-party vendors on issues like security. Cisco and Microsoft have been hammering out an integration of their two competing NAC frameworks for more than two years, largely at the urging of enterprise customers. Palmer allowed that many enterprise customers may prefer to use features built into Windows Vista in lieu of Cisco's own CSA client software. "Clearly, what we do is driven by customer choice. Customers are saying, 'Look, we're committed to Vista, and we want you to work more closely," he said. However, Palmer said that some customers may still prefer the CSA client for endpoint security. But for Cisco's enterprise customers, choice and integration with other vendors remains a pressing issue. Patricia M. Lawicki, vice president and CIO at Pacific Gas and Electric Company (PG&E), a Cisco customer since 1987, said that the company's technology plays a key part in helping PG&E restructure its IT operations after the California electricity crisis of 2000 and 2001 forced the company into bankruptcy. Cisco's technology is helping PG&E with a major business transformation, including the phasing out of mainframe and first-generation client-server applications, a major deployment of technology from SAP, and overhauls of supply chain and customer service systems. While PG&E is using the company's NAC appliance, Cisco's full NAC solution, which requires wholesale upgrades to its networking infrastructure, remains too expensive for PG&E to adopt, especially with the wealth of legacy Cisco hardware that would need to be replaced, Lawicki said. A committed Cisco customer, PG&E still wants to be able to choose best-of-breed solutions -- particularly in areas like security -- and is pushing Cisco and its other suppliers to make that possible, she said.
204601
Ping Identity Corporation today announced that Version 2 of its consumer  authentication framework, PingLogin, is now available for download from  its Web site, www.pingidentity.com.
733265
RSA Security and America Online hope to encourage AOL customers to better protect account information. And VeriSign is announcing a new service called Unified Authentication to reduce the cost of using one-time passwords or hardware smart cards.
153432
rPath linux has issued an update to their packages for PHP, PHP-MySQL and PHP-PGSql to correct issues that could make it possible for a remote user to gain unauthorized access.   his fixes some vulnerabilities, where some have unknown impacts and others can be exploited by malicious users to bypass certain security restrictions or by malicious people to potentially compromise a vulnerable system.   References and links to the update information can be found in their original advisory.
405148
Passwords are out and tokens are the authentication wave of the future, right? Not so fast, says Jon Espenschied. The next next thing is both stranger and more familiar.
762764
Latest PECL Releases:sam 1.1.0phar 1.0.0RC1phar 1.0.0RC2SCA_SDO 1.1.2mcve 5.2.2swish 0.1pecl_http 1.5.0RC1pecl_http 1.5.0RC2ibm_db2 1.6.0timezonedb 2007.2
324769
RSA fully on board too EMC today finished off one security acquisition and then made another one.â¦
76513
Cisco plans to introduce a range of new, better-integrated security products at the RSA Conference this week.
105605
A DIRECTOR of technology for security outfit RSA Security has warned online customers are not &quot;authenticated enough&quot; and there needs to be moves towards toward a mandated identity policy.