Search

The article elaborates on four network-edge protection strategies being deployed in today's information technology (IT) networks. Topics discussed include protecting application-layer by developing one's own custom network access software that works with firewalls and intrusion detection systems as well as making proper use of encryption and digital certificates. Also mentioned are using a cloud-based single sign-on (SSO) tool as well as considering making legacy applications Web-based.

The article focuses on the importance of the Secure Shell (SSH) security tool in protecting the network transmission with high-quality encryption and private-key authentication. It notes that the said tool provides access to others computer. It also notes that SSH tool is constituted with tools for interactive logons, file transfer, tunneling, and remote command execution and does all cryptography and authentication. INSETS: Find Out More;Lively Forum Discussions!.

The article offers an overview of the options for protecting data on enterprise storage devices, computers and other mobile platforms. Software-based encryption generally encrypt data on the personal computers (PC) or servers that created it, then they transfer data across the network and store it on tape in an encrypted format. According to Bill Hartman, vice president of technology and architecture at Sanz, stand-alone encryption appliances offer a speed advantage over tape and tend to be the best choice for consolidated storage settings, however customers who wish to encrypt every tape device in a highly decentralized environment may find software a less expensive option that is easier to manage.

The article presents a case study on the extension of Microsoft's internal software Security Development Lifecycle (SDL). The author argues that SDL is not a compliance artifact but rather a set of key features that can and should be documented, evaluated and used when making purchasing decisions. Security guarantees of the software are enumerated. Due to improper implementation of backup encryption schemes including weak cryptography and incorrect and inconsistent use of cryptography that causes potential problems, the solution called top-down security design extension to SDL is recommended.

The article presents step-by-step instructions on protecting sensitive information from human errors and cites software for data protection. The first step towards protecting data from potential human error is the creation of an appropriate security policy. Next, encrypt data to ensure that even if it was stolen, it would be of no use to the thief. Then, trace a stolen laptop using a tracking software. The fourth step is to clear data from the machine by using software like Absolute Software's Computrace, Stealth Signal's XTool and Credant Technologies' Mobile Guardian. Finally, minimize the chance of losing critical and protected data by setting up remote access.

The article explains the application of Cryptographic Services application programming interface (API) from report program generator (RPG) in V5R2. The API implements Data Encryption Standard (DES), Triple DES and Advanced Encryption Standard. Free software feature 5722 AC3, Cryptographic Access Provider 128-bit for iSeries, should be installed for the API use. The access to an encryption in RPG is significant to data protection.

This article discusses the process of developing strong encryption for software applications using the CryptoUtility component. The article presents information on CryptoUtility architecture and cryptographic decisions. Options for symmetric algorithms are likewise discussed. It is noted that while there is no such thing as perfect security, it is possible to use cryptography in a secure manner in a real-world application. A large part of successful architecture and software designs lies in understanding trade-offs and choosing wisely.

The article examines the effectiveness of the Blowfish and the Pretty Good Privacy (PGP)/GnuPG software in providing security during information transfers. Local area networks are inherently insecure in most corporate, academic, even broadband cable environments, especially with regards to e-mail. Today, there are all sorts of tools to protect information transfers: secure sockets layer (SSL) for Web, secure shells (SSH) for telnet, virtual private networks (VPN) for remote access, and smart cards that provide one-time password for network access. The Blowfish and PGP ciphers can encrypt e-mail or files, but only PGP has the ability to digitally sign information without revealing the pass-phrase. Neither is a solution for everyday messages, but both can competently secure vital and confidential communications. Blowfish is a popular and secure symmetric key cipher. However, it is much more advanced and secure than standard password protection. Technically speaking, Blowfish is a 64-bit block cipher; data encrypts and decrypts in 64-bit chunks. The encryption algorithm is then executed for at least 16 rounds or iterations. Pretty Good Privacy (PGP) is the most popular public key-based encryption scheme, first created by Phil Zimmermann in 1991 as freeware software. PGP and OpenPGP are more useful when a group of users need to communicate, but the learning curve is higher. Both ciphers can encrypt local files for temporary or archival purposes.

The article presents information on how businesses can protect their electronic mail messages from hackers. One way to protect private data is to use encryption programs. These programs convert e-mails into strings of letters and numbers. Encryption software is affordable for small companies also. The most popular encryption technique is Pretty Good Privacy (PGP).

The article offers helpful information concerning Windows XP migration. Several important topics being discussed include searching and organizing data, security and encryption, and browsers. It also offers information when it comes to user interface, transferring files and settings, and accessibility and notebook friendliness.

The article offers guidelines for identifying a business' backup needs. It suggests paying attention to the way the software performs the backup. The best software allows the combination of various options as well as the exclusion of nonessential files. It recommends the use of the strongest encryption method supported by the software. Scheduling, shadow copy and integrated burning are the other features considered when choosing a software. Other options include network-attached storage (NAS) and tape technology.

The article discusses the features offered by Extensible Key Management (EKM), an encryption tool, designed for SQL Server 2008. EKM enables encryption keys for data and key encryption to be stored in Hardware Security Modules (HSMs) which prevents other users to illegally access encrypted information. Also, the tool supports third-party encryptions which enable them to register EKM/HSM modules in the SQL Server 2008.

The article focuses on the relevance of digital evidence. Those concerned with privacy issues and identity theft are familiar with the concept of dumpster diving. Trash often reveals the dealings of an individual or a corporation. The risks of revealing private information through the trash has led to a boom in the sale of paper shredders. To ensure reliable data storage, the tracks on hard-drive platters are wider than the influence of the heads, with a gap between tracks. Thus, even after wiper software has been applied, there may still be ghosts of the original data, just partially obscured. Thus a tradeoff between the cost to the user and the cost to the investigator is observed. Forensics investigators take care to examine disks in a manner that does not tamper with the evidence. Another approach is to consider file recovery as a fait accompli and ensure the recovered data is not available as evidence. Encryption clearly has a role to play here. An encrypting file system built into the operating system can be helpful, but may provide only a false sense of security-unless one has adequate assurance of its cryptanalytic strength.

This article presents an introduction to various issues related to techniques for safeguarding private data from unauthorized parties, and legal protection of computer programs. Key escrow encryption techniques, used to safeguard private data from unauthorized parties, have been scrutinized under a very public microscope ever since the U.S. government announced its interest in defining how such a system should operate. While industry and government argue the perceived merits and threats of encryption strategies, businesses worldwide continue to evaluate available key escrow systems as a formative means for protecting their information and other valuable assets. Also in this issue, is a report that reconsiders the legal protection of computer programs. Randall Davis, Mitch Kapor, Pamela Samuelson, and Jerry Reichman examine some of the topical notions about the nature of software, the legal protection required, and the methods for providing that protection. Finally, "Viewpoint" featured Gordon Bell's observations on the "small, vanishing" U.S. supercomputing market. Bell, the noted architect of DEC computers and VAX machines, traces the road to the elusive teraflop-speed supercomputer.

This article reports on the adoption of enterprise rights management software by optical-fiber and cabling product manufacturer, Corning Inc. The company's research and development staff uses the software to encrypt critical documents and apply rules that determine not just who has access to the files but also whether they can print, copy or forward them to others. The system also establishes a chain of custody, providing an audit trail of the people who have accessed a certain document. INSETS: ERM Tip Sheet;DRM's Language-Rights Wars.

This article defines the inherent application security risks and demonstrates some methods to implement MS Office security addressing the lapses within the MS Office document structures. The focus is on document security and controlled presentation. Encryption is a partial though effective solution, but only as a point solution even when extended by public key encryption. Encryption of MS Office documents merely hides risks until decryption and encryption also breaks most dispersed workflows that are the stated business goals of Microsoft's platform for delivery of services within a collaborative environment. This article also describes some of the techniques being implemented for MS Office document security at the file level. Although the focus is on document security and controlled presentation, this is not the whole security issue for MS Office, but it is a substantial first step toward what is perhaps the most difficult issue in COTS security control.

The article offers tips on EMR patient data migration to provider. Before opting for a new software package, it is advisable to find out the process for data migration and the support available for this process. According to the author, data must be password-protected, encrypted and secure at all times, including when transferred. It is necessary to back up the data from the existing system before transferring it.

The article discusses the need for hardware and software encryption for securing network against malicious attacks and copying. Topics discussed include the role of the General Data Protection Regulation (GDPR) to protect personal data and report breaches; how digital security works best when it is applied in layers; and how the data can be protected either by encrypting the communications channel so that no data can be read in transit, or by encrypting sensitive data at source.

The article reviews several encryption-at-rest software including Credant Technologies Mobile Guardian Enterprise Edition v6.8, Data Encryption Systems DESlock + Business Desktop v4.1.10 and SafeNet ProtectDrive v9.2.

The article presents information on several companies offering computer security products. Akamai Technologies Inc., which operates a private data network, has security services that are built on top of the software and hardware it uses for its own network. Amazon.Com Inc., which sells cloud-based storage and processing equipment, protects customers' data by maintaining backups and physically preventing unauthorized access to data centers. EMC Corp. owns critical encryption technology RSA algorithm, which is used worldwide to encrypt sensitive information sent over the Internet.

The article discusses the techniques on how to encrypt data for security. These include encrypting data directly in SQL table columns via an application, using third-party software to encrypt selected objects, and employing encryption capabilities built into the tape device. The author recommends the TS1120 and LTO4 tape devices from International Business Machines Corp. (IBM).

The article presents information on the vulnerability of software including Vista's BitLocker, Apple Inc.'s Filevault and freeware favourite TrueCrypt to BitUnlocker, a software developed by Jacob Appelbaum and his mates at Princeton University in Princeton, New Jersey. In March 2008, Jacob published a paper revealing a potentially fatal flaw in popular disk encryption technology. Their software analyses the target computer's random access memory (RAM) for sequences that look like parts of the encryption key in use, which allow users to get around even 256-bit security. Anyone concerned about the safety of their personal data can minimise the threat by changing the BIOS to prevent booting from an external device.

The article evaluates several hardware and software products with simple portable-drive encryption, including Cryptainer PE, Migo Portable Vault and Apricorn Aegis Vault.

The article offers information on backing up and recovering data. Some businesses transfer their data on tapes. But these tapes are not good in data safekeeping. Instead of using tapes, all-electronic back ups are recommended. Cryptographic hardware should also be considered. To encrypt data, OS/400 application programs interfaces can also be used. Using Robot/SAVE by Help/Systems is also recommended.

The article provides security tips for protecting encrypted files. It is important to consider creating an encrypted disk image when creating a handful of files to protect and adding those important files to it. Operating system X's FileVault feature can be used when the folder is full of confidential documents. After activating FileVault, the user can enter a password to begin work and then open files, work on them, user can save changes without noticing a thing. FileVault's master password can also work as a kind of backup account password.

The article presents information on several password manager applications. In general, password managers use encryption algorithms to protest the login information on users. This service is available either as a software or as an inherent feature of Web sites. Agatra offers free password manager service in their site. The service stores passwords and sensitive information online by using a login account. Agatra employs a block cipher encryption technology. Agatra's service is different from other services because it has teamed up with online vendors to allow users direct access into password-protected Web sites. Password management software, on the other hand, is safer than Web-based password managers. Handy Password 3.4 uses Blowfish algorithm and master password to make sure that login information is not compromised.

Presents a list of e-mail security appliances, software and managed services that offer anti-spam, antivirus, content policy enforcement and secured message transmission. eSafe Mail software from Aladdin; Secure E-Mail Gateway managed service from AppRiver; Spam Firewall appliance from Barracuda Networks.

This article explores the process of making safe data transmission faster. Many software companies use encryption to protect their programs from tampering or copying, but even those protections can be circumvented by a hacker who is skilled and motivated enough. In a conventional computer, protected software is decoded and stored in memory until the processor calls for it; hackers can tap into decoded instructions as they move from memory to the processor by listening to the channel between the two. Safeguards exist--namely, the XOM (execution-only memory) processor, which keeps information encrypted until it gets the processor--but systems that use them are slow. The bottleneck in most XOM systems is the decryption procedure: encrypted instructions are first fetched from the memory, then decoded, then executed. Jun Yang, an assistant professor of computer science at the University of California, Riverside, and colleagues and the University of Texas at Dallas use a security scheme called a one-time pad that can start decryption without the data. The procedure fetches data and start the decryption in parallel, so that the processor can act on instructions almost as they arrive. In a simulation, the extra time needed for decryption dropped from 20.8 percent of the computation time in XOM processors to a mere 1.3 percent.

Provides information on the anti-virus and computer protection software used by lawyers in the U.S. Programs that can be downloaded free of charge; Use of encryption in e-mail; Benefit of WiFi technology to lawyers.

The article features Inter-Business Vault 2.5 from Cyber-Ark Software Ltd. The product's sole purpose is to keep documents safe from prying eyes. Cyber-Ark Inter-Business Vault is a client/server solution that protects documents with several layers of security. What makes the solution special, is that it is surprisingly easy to set up and configure. Cyber-Ark gives administrators a great deal of control over user access and imposes relatively light burdens on the end user's experience. The first level of security is the Cyber-Ark server, which is run on a dedicated system and includes its own firewall. No communications other than its own vault protocol are allowed in or out. The second layer of security is encryption. The system encrypts all transmissions over the network employing a virtual private network. Next, files are also encrypted as they reside on the server. Cyber-Ark also offers distributed administration, making it an effective solution for agencies and departments needing to manage data access among far-flung offices and outside contractors. The Inter-Business Vault also offers distributed authentication. It also integrates into the existing enterprise infrastructure by providing extensive interfaces to systems based on Lightweight Directory Access Protocol.

The article focuses on the use of encryption techniques such as steganography and cryptography. It comments on historical uses of steganography using a tattooed message on a person's scalp, and more modern applications such as watermarks, microdots, and invisible inks. It mentions Fabien A. Petitcolas book "Information Hiding, Techniques for Steganography and Digital Watermarking." It talks about the use of steganography in digital photographs.

The article reports that various computer technology firms are tracing firmware and software that are affected by the Heartbleed bug including Dell Inc., Hewlett-Packard Co. (HP) and International Business Machines Corp. (IBM). As mentioned, the bug is able to steal confidential data of users such as passwords and encryption keys.

The article presents information on using a password manager for remembering different alphanumeric passwords. It says that these programs are also password protected and users can select a favorite saying or words in a song for their passwords. It focuses on the things, that should be considered while signing up for such programs, like program's encryption style, its storage location, and its cost.