 Your new post is loading...
Security experts have proposed a simple way for websites to better secure highly sensitive databases used to store user passwords: the creation of false "honeyword" passcodes that when entered would trigger alarms that account hijacking attacks are underway. The suggestion builds on the already established practice of creating dummy accounts known as honeypot accounts. It comes as dozens of high-profile sites watched user data become jeopardized—including LivingSocial, dating site Zoosk, Evernote, Twitter, LinkedIn, and eHarmony to name just a few from the past year. Because these dummy accounts don't belong to legitimate users of the service and are normally never accessed, they can be used to send a warning to site administrators when attackers are able to log in to them. The new, complementary honeyword measure—proposed in a research paper titled "Honeywords: Making Password-Cracking Detectable—was devised by RSA Labs researcher Ari Juels and MIT cryptography professor Ronald Rivest, the latter who is the "R" in the RSA cryptography scheme.
Via HE Info Sec Council
|
Scooped by
Joerg Asma
|
|
Scooped by
Joerg Asma
|
In this period there is an intense debate on the wiretapping of every communication channel, governments are increasing the monitoring of internet, of social network platforms and VOIP conversation...
|
Scooped by
Joerg Asma
|
Law enforcement and intelligence agencies conscious of the high risks related to cyber threats have started massive monitoring campaign, everything must be controlled to avoid unpleasant surprises....
|
Scooped by
Joerg Asma
|
Read, think, share … Security is everyone's responsibility
During the often-fiery 2012 presidential debate season, a lively debate of a different sort held at Indiana University(IU) featured passionate arguments on the nature, status, and future of cloud security in and beyond the higher education environs. Moderated by Brad Wheeler, IU's vice president for IT and CIO, the debate featured two figures characterized by Wheeler as symbolic leaders of the "Cloud Now" and "Cloud How" parties... Following are highlights of the Shel Waggener–Fred Cate debate, including salient points, key quotes, and a bit of the color and passion that permeated the sometimes sprawling and always interesting discussion.A full, unabridged transcript is also available.
Via HE Info Sec Council
Cyberwar is not war in and of itself. It is not even another battlefield. Nor is it as novel as some people claim. It is just a logical conclusion and evolution of the widespread adoption of computers and technology in modern culture.
Via Red-DragonRising
|
Scooped by
Joerg Asma
|
Being a security professional is sometimes a difficult thing. Everybody expects you to be wise in terms of security, threats, knowing all different kinds of attacks and so on. Being phished yoursel...
|
Scooped by
Joerg Asma
|
Irans Regierung führt einen biometrischen Ausweis ein, der gleichzeitig als Zugangskarte zum Web fungieren soll.
|
Scooped by
Joerg Asma
|
The ways explored by malware creators are unlimited, recently Symantec has announced the discovery of a new operational mode for backdoor trojan Makadocs, the security firm has in fact reported tha...
|
Scooped by
Joerg Asma
|
Interested in a good scare this Halloween? Look no further than your own computer, mobile or tablet device!
|
Scooped by
Joerg Asma
|
|
|
Scooped by
Joerg Asma
|
Applying big data approaches to information security can help enterprises build better situational awareness capabilities, but implementation could prove to be a major challenge, security experts said at the RSA Conference 2013 being held here this...
|
Scooped by
Joerg Asma
|
Earlier this week, Dr. Web reported the discovery of a Mac OS X botnet Flashback (Flashfake). According to their information, the estimated size of this botnet is more than 500, 000 infected Mac machines.
|
Scooped by
Joerg Asma
|
The news is circulating for days, the Iranian head of the national security forces , Esmail Ahmadi Moghadam, declared that low enforcement of the country is developing a software for “smart ...
|
Scooped by
Joerg Asma
|
This Friday, 11 January 2013, will see the launch of the new European Cybercrime Centre (EC3) based at Europol headquarters in The Hague. EC3 will be...
|
Scooped by
Joerg Asma
|
Innovations in mobile and cloud computing, social technology and the use of "big data" present an emerging risk to organisations' IT security, a security agency has warned.
|
Rescooped by
Joerg Asma
from INFO SEC
|
Information sharing around cyber-security practicesIntelligent UtilityEnergySec is a community of information security, physical security, audit, disaster recovery and business continuity professionals from energy industry utilities established...
Via Red-DragonRising
|
Scooped by
Joerg Asma
|
It is something out of a Hollywood movie - hackers pooling their talents to help people handle natural disasters.
|
Scooped by
Joerg Asma
|
CSO - information security & physical security thought leadership - news, analysis, how-tos & jobs...
|
Scooped by
Joerg Asma
|
You have a secret that can ruin your life. It’s not a well-kept secret, either. Just a simple string of characters—maybe six of them if you’re careless, 16 if you’re cautious—that can reveal everything about you.
|
Scooped by
Joerg Asma
|
|
Scooped by
Joerg Asma
|
Visualize Security Daily, by Tim Youngblood: updated automatically with a curated selection of articles, blog posts, videos and photos.
Recommendations about iOS Device Management coming from NSA. I like the checklist at the end of this whitepaper.
Via Yury Chemerkin
|