05/17/2012 | Identity & Access Management
Passwords are a controversial topic within the information security community. One side argues that passwords are “broken” and need a serious overhaul. The reasons are myriad; users hate remembering them, they can be lost or easily forgotten, users tend to share them or write them down (especially when complex), etc. The other side of the community points out that there’s a time
05/17/2012 | Identity & Access Management
The Identity and Access Management (IAM) track at the IANS New York Metro Forum was a new addition to IANS’ curriculum. Historically a very popular topic with IANS clients, Faculty members Diana Kelley and Ed Moyle morphed their previous Application Security sessions to reflect what’s being requested by clients. This document outlines some of the key insights from the IAM track
04/18/2012 | Identity & Access Management
Identity and Access Management continues to be a pressing topic for IANS clients. As news of fresh breaches and new threats comes to bare, security professionals are increasingly turning to authentication and access control as means to harness users’ network availability. To help clients organize their thoughts and learn additional ways of managing IDAM, IANS brought together 25+
12/22/2011 | Identity & Access Management
Cloud applications hold undeniable appeal for enterprises looking for scale and cost advantages. For most enterprises it’s not a question of whether to move to the cloud, but rather how much and what type of applications or data to move to the cloud. And, of course, in the information security world: how to move to the cloud securely. In this paper, Gunnar Peterson helps
08/29/2011 | Strong Authentication
There has been no shortage of coverage in the industry press of the recent attack against RSA. This well-publicized event has generated a great deal of discussion about whether or not the security of the underlying RSA SecurID authentication platform was impacted. Whether you believe that the attack has or has not impacted the security of RSA’s hardware one-time password tokens,
07/27/2011 | Strong Authentication
Historically, hardware one-time password generators have dominated the two factor authentication marketplace. Recently, however, organizations are looking for alternatives. There are quite literally hundreds of two-factor systems, though, and understanding how they all work - and how much they're all going to cost - can be quite daunting. This discussion will provide an overview
07/27/2011 | Strong Authentication
Historically, hardware one-time password generators have dominated the two factor authentication marketplace. Recently, however, organizations are looking for alternatives. There are quite literally hundreds of two-factor systems, though, and understanding how they all work - and how much they're all going to cost - can be quite daunting. This discussion will provide an overview
06/14/2011 | Passwords
In the wake of news of breaches at defense contractor Lockheed Martin, RSA, The Security Division of EMC acknowledged the link between information compromised in a widely publicized breach in early 2011 and the SecurID hard tokens used to secure access to Lockheed systems. Client is looking to evaluate the need to replace a fleet of SecurID tokens, what alternatives exist, and
09/17/2010 | Enterprise Single Sign-On
While the fear of leakage of sensitive data is on the minds of all IT security professionals and executives, there are no easy solutions for this enormous problem. Recommendations include developing a data security plan (which few have), and focusing first on protecting the structured data in one (or a few) key databases. Before buying add-on security solutions, delegates are
09/16/2010 | Identity & Access Management
Log management and SIEM products provide data collection, normalization, and analysis. They enable compliance and provide enhanced network visibility. Most importantly, when business-driven use cases are used, these products can deliver business value. This webinar is underwritten by Q1 Labs.