Search

The article details the use of Microsoft Exchange Management Shell to configure Internet Message Access Protocol (IMAP) and Post Office Protocol (POP) support. Exchange Management Shell can be used to manage all of the other settings for the IMAP and POP services by replacing the default certificates with certificates issued by a third-party Certificate Authorities (CA).

The article discusses the use of Microsoft's Identity Lifecycle Manager (ILM) 2007 software in managing an organization's work flows for various activities that occur during a certificate's lifetime and increase its assurance levels. ILM 2007 would ensure that the organization's written security policies are implemented. ILM 2007 consists of various certificate management component including meta-directory and synchronization facilities and certificate management.

The article presents a discussion about managing web users with custom profile providers. It focuses on the ASP.NET 2.0 profile providers, on building a custom provider, and on the authentication and authorization of web sites. ASP.NET allows authentication, authorization and the addition of profiles on the Web site with the use of built-in providers. These built-in providers can be customized by specifying attributes that pass information into the provider to allow it to execute different behavior.

The article offers tips in deploying custom authentication scheme for reporting services and filtering data at run time for multiple users. According to the author, the Reporting Services 2005 uses Windows Authentication mode to establish identity and its own set of roles by default. In addition, the Reporting Services security model is extensible. Details of the two extension interfaces are outlined, as well as installing the sample security extension. INSET: What About Web Services?.

Focuses on the emergence of public key infrastructure (PKI) as the standard for user authentication and data security. Elements of PKI interoperability; Server authentication in Windows 2000 using PKI; Digital equivalency of the PKI; PKI-based services; Advantages of PKI on online banking.

Deals with Kerberos, a network authentication protocol technology developed in the 1980s at Massachusetts Institute of Technology (MIT) in Cambridge. Applications and uses of Kerberos; How the Key Distribution Center (CDC) works with Kerberos; Options; Authenticating procedures.

The article announces the release of the OneSign Anywhere(tm) single sign-on (SSO) solution from Imprivata Inc.

The article discusses multifactor authentication solutions for network and systems security. It notes that keyfob tokens, universal serial bus (USB) tokens, and smart or magnetic cards are hardware solutions, which function only with the help of proprietary software. Some of the considerations when choosing a multifactor authentication solution include operating system (OS) compatibility and the product's management features. It highlights the effectiveness of multifactor authentication solutions in protecting against illicit logons.

The article discusses key steps in reducing compliance burdens and risk exposure in organizations. The concepts of fail-safe system and security service, also known collectively as authentication, authorization and access control and audit (AAA) are explained in relation to risk assessment. Being prepared and making the right investment are illustrated through team engagement and defect management. A compliance matrix that reduced expenses by 80 percent is mentioned along with security and compliance programs that serve the business.

The article reports on software developed by computer scientist Arun Ross and presented at the 2011 Workshop on Information Forensics and Security which creates a unique fingerprint that is used to keep personal information safe.

Reports on the Web-based authentication systems of consumer surfing in the United States. Advantages of single sign-on systems on Microsoft services; Factors of potential risks on single sign-on; Benefit of Passport authentication system on personalized services.

The article discusses security methods to fight against identity theft. The use of dual-factor authentication, in which an individual must supply something they know, such as a password, along with an object they have in their possession, such as a cellphone, is defined. A list of commonly carried items is provided with methods to fight identity theft including SafePass from Bank of America, SecurID with a Blackberry, and SanDisk's SecurID USB drive.

The article reports on the new enhancements to the Blue Coat® ProxySG® appliances of Blue Coat Systems Inc. The enhancements expanded the options and flexibility for support of enterprise authentication processes that verify the identity of a network user. New authentication features are incorporated into the operating system software for the appliances. These include permit authentication error, guest authentication and user management. Supported authentication includes active directory, NT Lan Manager (NTLM) and lightweight directory access protocol (LDAP).

Focuses on the aspects of verifying the authenticity of the contents of the message. Features of Message Authenticity Code (MAC) algorithms; Information on Keyed-Hashing for Message Authentication Code (HMAC); HMAC-design objectives; HMAC algorithm; HMAC security.

Reports on developments in the field of Certificate Authorities (CAs) and certificate-based authentication and how it relates to the corporate culture. CAs as not yet fully exploited in networking; Examination of cryptography; Outsourcing to specialists; Benefits of running an internal CA; Internet credit card transactions; Reviews of Netscape Communications Corp.'s Certificate Server 1.0, Xcert Software's Sentry CA and Frontier Technologies Corp.'s e-Lock; The Fischer Smarty; Others. INSET: Vendor information..

The article reviews the ezAuth email authentication software from IDconnex.

The article discusses the founding principles and the implementation details of the BIOWRAP biometric-base security device from Nation Technologies. It says that the device offers a central management system and ensures that the identity of a user is secured. The author also mentions that the device has a multi-factor authentication system which makes the scanning of biometrics more accurate.

The article discusses the position of technology evangelist Ben Kepes on the file sending, discussion and tracking platform Sendergram. Topics covered include the application of blockchain according to co-founder Andy Rosen, its difference among other application focusing on authentication of documents and files, contract signing and associated workflows, and the ability of cloud provider CloudHQ to deliver cross provider support as well.

The article presents a case study regarding the security of online banking. It cites on the AmBank Group in Malaysia which cracks down on poor password management with two-factor authentication security. It reveals that the bank is the leader in the country's financial insurance and diversified investment, commercial and retail banking offerings to its clients. It launched the e-AmBiz online business banking system to further enhance its services and to serve customers nationwide.

The article talks about Astaro Corporation's e-mail encryption and security which have always appeared to be the most utilized technologies. Virtual private networks are used to secure the connections to the office and branch sites, Novell e-Directory implement policies on corporate computers and ensuring the authenticity and security of intra-company e-mail. End-user certificate deployments and desktop applications for e-mail encryption and authentication are required by the original S/MIME solutions.

The article describes the BioPassWord Enterprise Edition software developed by BioPassword Inc. for enterprise authentication. The software works with Windows Active Directory and Citrix environments. It features a neural networking engine that analyzes a person's unique typing pattern. Adaptive learning technology enables the neural networking engine to develop a unique biometric template.

The article reports that RSA Security has launched the RSA SecurID Appliance designed to make identity management a simple task for businesses. The technology offers scalability to adequately serve the enterprise. The technology includes the RSA Authentication Manager 6.1, a software environment optimized for two-factor user identity.

Reports on Netegrity Inc.'s plan to launch authentication software to secure web services. Planned launch of a product for managing access to a portal and helping validate web requests by authenticating, authorizing and auditing the documents used in a web services exchange. Schedule for availability; Security as stumbling block in the deployment of web services.

Focuses on the Liberty Alliance specification and the Microsoft Passport authentication component of .Net My Services in the U.S. Management of Web-based identification and authentication; Creation of federal identification systems across disparate sources; Sharing and use of authentication information without user-sensitive data. INSET: How the Liberty Alliance might work.

Reports the need of Microsoft Corp. for support from the computer industry on the conversion of passport authentication system in the United States. Capabilities of the authentication system; Statement of Bob Muglia, Microsoft group vice president of online services; Identification of passport service as Internet trust network.

Reports on BioNetrix Systems Corp.'s release of BioNetrix Authentication Suite 4.0, a software suite that monitors a wide range of authentication methods. Support for tokens from Rainbow Technologies Inc.; Allowance of role-based delegation of administration rights to types of users or groups.

Evaluates Novell Inc.'s Novell Modular Authentication Service 1.0 Enterprise Edition authentication software. Usability; Capability; Performance; Interoperability; Manageability; Long- and short-term business impact. INSET: EWEEK LABS//EXECUTIVE SUMMARY..

The article previews the Veridify authentication and anti-counterfeiting solution from SecureRF Corporation.

The article previews the AssureTec ID-150 identification authentication system from EasyLobby and AssureTec Technologies.

The article discusses some security breaches on the RSA SecurID authentication token which accounts for 61% of the secure ID market share. These breaches include 45,000 tokens being replaced at Lockheed Martin and two phising attack to two small groups of low level RSA employees which targeted the company's 2011 recruitment plan. The article outlines the mitigation actions offered by RSA to customers.

The article offers the author's insights on how to design a secure authentication strategy. He claims that the best method create a secure authentication strategy is to have a risk assessment that accounts for the data sensitivity, exposure to unauthorized users, and applicable regulations. He provides various questions to help one choose the right technology concerning access to and protection of corporate network.

The article evaluates the Short Message Service (SMS) Passcode authentication system from SMS Passcode A/S.

The article offers software related news briefs. A pilot program led by information technology (IT) companies will test its Open ID and Information Card technologies for logging in to government sites. The open source CRM application from SugarCRM is made available to developers of EC2 cloud of Amazon.com as a pre-packaged Amazon Machine Image. AT&T will upgrade its networks in six major markets to counter the criticisms from iPhone users.

Apple''s own announcements at the MacWorld show this month may have been relatively underwhelming, but several companies rolled out new security technologies at the event. A stolen computer tracker accompanied a two-factor authentication system designed for iPhone users. [Copyright &y& Elsevier]

The article discusses results of a survey conducted by DigitalPersona to find out what was on consumers' minds in terms of security and authentication. Sixty percent of the respondents said that they or someone they knew in their company had shared a network password with a colleague. This, and other key findings of the survey, is seen by DigitalPersona as an opportunity for the company's enterprise, end-to-end, fingerprint solutions.

The article focuses on the plans of the Great Britain government to use the existing Government Gateway system to authenticate public access to its services. Further plans to develop a single login system that involved investment in CGI Excelsior software has been suspended. This system was to be used as the authentication engine of the Government Connects (GC) program. The Technical Advisory Group is being launched to act as a sounding board for new developments.

The article reports that Microsoft Corp. announced on October 23, 2006 that it is offering to users for free its Sender ID framework specification for e-mail authentication, and assures that no legal action will be taken in using such facility. Microsoft Corp. said that the move will further promote interoperability efforts among commercial software solutions and Internet Service Providers for online safety worldwide and will put to rest issues on the licensing terms of its Web service specifications.

The article reviews the Stealth MXP three-factor remote authentication software from MXI Security.

The article reviews the OneSign ENA authentication software from Imprivata.

This article focuses on the report "Why Phishing Works," which looks at how computer users are evaluating Web sites. The results indicate that users are only scanning the quality of the site's appearance and content and does not bother with critical browser tip offs. In line with the report, Harvard and Berkeley researchers developed the Dynamic Security Skins scheme that offers two-factor authentication program that provides a short term solution.

The article deals with the use of authentication software in the financial services industry. Financial institutions are beginning to require software that makes users authenticate their identity mid-session, according to American Banker newspaper. The software can use challenge questions and can prompt the institution to notify the customer, by phone or e-mail, about a transaction.

Reports on the plans of Microsoft Corp. to convert its Passport System for online authentication into a web service. Adoption of a range of extensible markup language-based specifications for the conversion; Advantages of using simple object access protocol by the Passport web service; Replacement of the current architecture of cookies and JavaScript by Web services protocols.

Reports on the investment cost of automated authentication systems considered by various organizations. Estimation of revenue of European enterprises get from authentication system; Update of security policy by enterprises; Need of the knowledge related to benefits from the smart cards and digital certificates.

Reports that the U.S. software firm Microsoft Corp. is asking for support from International Business Machines Corp. for its planned Federated Passport authentication mechanism. Aim of building an industry consensus around the system; Microsoft's campaign for support in Great Britain; Competition with Sun Microsystems Inc.'s Liberty Alliance Project.

Reports the inauguration of Centralized Authentication Software Server (CAS) by Keyware Technologies NV in Belgium. Management of biometric and non-biometric authentication methods; Features of the CAS Server; Integration of different biometric technologies in the Layered Verification.