Member Login

E-mail:    Password:  




 TitleDate AddedCompany
whitepaper Why You Need Email Encryption: Use Case Scenarios2008-02-26 Proofpoint
  "Identity theft is a top concern for consumers right now, so we can't let their credit card information get into the wrong hands. Proofpoint is extremely accurate at detecting any sensitive information that's being sent out and it allows us to automatically encrypt that data so it's always safe." - Steven Romero, Systems Engineer, Outback Steakhouse

DSS, GLBA, HIPAA, OMB, PCI, and PIIG are just a few of the standards and regulations that place additional constraints on how data is stored, processed, and transmitted. Adopting best practices for protecting the sensitive or private information valued by your company, customers, employees and partners adds a new complexity to email security.

Outbound email and other electronic communications (such as web-based email, blog postings, FTP and other messaging streams) pose a significant risk for data loss or data leakage. Solutions to mitigate this risk must include easy to use, policy-based encryption to make it simple to securely communicate with customers and partners.

In this web seminar, Proofpoint product manager Andrew Vu presents real world case studies about organizations that have deployed Proofpoint's unified data loss prevention and email encryption solutions.

View this web seminar replay and learn:
  • Why email encryption is an important component of an organization's overall security architecture.
  • How leading organizations are using Proofpoint's unified data loss prevention and email encryption solution to ensure message privacy, enforce internal policies, comply with data protection and privacy regulations and protect valuable intellectual property.
  • How your organization can send financial statements, patient health information or other sensitive material securely over email, ensuring compliance with regulations including GLBA and HIPAA.
  • About Proofpoint's breakthrough single-appliance solution for email security, multi-pro

    Tags: E-commerce Security, Data Recovery - Security, Email, HIPAA, Gramm-Leach-Bliley Act
   
whitepaper Increased Online Revenues With Secure and User-Friendly e-Commerce Shopping Site for the Largest Retail Network in the UK2008-01-24 MindTree Consulting
  MindTree Consulting built a robust online shopping basket and an integrated Travel Money Card product for the largest post office network in Europe. Leveraging its competency in building e-commerce applications, MindTree designed a shopping basket with a range of features and capabilities for hundreds of products and government services. The application is intricately integrated with multiple payment gateways, fraud detection and prevention systems, and third party applications. This solution has increased customer satisfaction and online revenues for the client by providing a secure and user-friendly e-commerce environment.

Tags: Gateways - Hubs, Application Development		   
whitepaper New Solution Helps City Strengthen IT Security, Automate Software Distribution2008-01-01 Microsoft
  As part of an ongoing effort to operate more efficiently, the City of Tampere wants to make more information and services available online while strengthening IT security. Additionally, the city wants to better manage its systems using limited IT resources. In 2007, Tampere made plans to upgrade 6,500 client computers to the Windows Vista operating system, and it began deploying the Windows Server 2008 Enterprise operating system on test servers. The city also decided to implement a Public Key Infrastructure (PKI) to help protect information that is exchanged across applications, internal networks, and the Internet.

Tags: Windows Server 2008		   
whitepaper Role Sharing in Password-Enabled PKI2007-12-01 James Madison University
  Password-enabled PKI schemes simplify the management of end users' private keys by storing them in password-protected form on a centralized on-line server. Under such schemes an end user needs only remember his password and can access his private key from anywhere the centralized server is available. Existing password-enabled PKI schemes are based on the single-user model where a private key is owned by one user. This paper presents mechanisms to support role sharing in password-enabled PKI. In these schemes, using passwords only, a group of users share the privileges of a role through sharing the private key of that role. A hybrid password-enabled PKI scheme is developed, which supports both easy password change and misuse monitoring.

Tags: Security Tools		   
whitepaper PKI: Ten Years Later2007-12-01 University of Ottawa
  This paper examines the history and evolution of so-called Public Key Infrastructure (PKI). It compares the original definition of PKI with a broader and more flexible definition that better reflects the variety of implementation philosophies available today. This current definition shows how the understanding of this technology has matured (although its essential characteristics have remained unchanged) and is derived, at least in part, from an evaluation and comparison of several quite different forms of PKI as well as a consideration of PKI criticisms over the years. The original definition of PKI may be dead or dying, but PKI technology continues to thrive as an extremely useful (and, in some cases, necessary) authentication solution.

Tags: Security Tools		   
whitepaper Regulations Shift Focus on Outbound Email Security: The Impact of HIPAA, PCI, PIIG and Other New Government and Industry Guidelines on Email Security Policies2007-11-01 Proofpoint
  Email is the lingua franca of business today. It is the conduit that allows employees to share information, companies to work with partners, and increasingly, provides a way for companies and their customers to interact. Enterprises today deal with an ever-increasing number of email-related threats. Most are familiar with the problems of virus-infected email attachments and productivity-draining spam, but now companies must also address the threats posted by outbound email.

Read this paper to learn about the impact of relatively new data protection regulations and standards such as the Payment Card Industry (PCI) Data Security Standard (DSS) and the Office of Management and Budget (OMB) Personally Identifiable Information Guidelines (PIIG) which place new constraints on how data is stored, processed, and transmitted over email.

Tags: Security Management, SSL - TLS, E-commerce Security, Sarbanes-Oxley, Data Recovery - Security, Email, HIPAA, Gramm-Leach-Bliley Act		   
whitepaper Norsk Tipping: Retailer Increases Sales With Digital Signage2007-08-28 Cisco Systems
  Norsk Tipping, the Norwegian lottery, uses the Cisco Digital Media System to promote its games on networked digital signs in 4,500 retail stores.   
whitepaper How to comply with the Payment Card Industry Standard2007-08-07 Astaro AG
  The Payment Card Industry (PCI) Standard applies to every organization that processes credit or debit card information, including merchants and third-party service providers that store, process or transmit credit card/debit card data.

This new set of guidelines and operational requirements went into effect June 30th, 2007, and companies outlined above are now required to adhere to the PCI standard. Failure to comply with the Payment Card Industry security standards may result in heavy fines, restrictions or permanent expulsion from card acceptance programs.

Download this Astaro OrangePaper to learn more.

Tags: Digital Signatures, SSL - TLS, E-commerce Security, Security Tools, Anti-Hacking, Security Standards, Data Recovery - Security, Best Practices		   
whitepaper AutoPKI: A PKI Resources Discovery System?2007-08-01 Dartmouth College
  The central goal of Public Key Infrastructure (PKI) is to enable trust judgments between distributed users. Although certificates play a central role in making such judgments, a PKI's users need more than just knowledge of certificates. Minimally, a relying party must able to locate critical parameters such the certificate repositories and certificate validation servers relevant to the trust path under consideration. Users in other scenarios may require other resources and services. Surprisingly, locating these resources and services remains a largely unsolved problem in real-world X.509 PKI deployment. This paper presents the design and prototype of a new and flexible solution for automatic discovery of the services and data repositories are available from a Certificate Service Provider (CSP).

Tags: Security Tools		   
whitepaper Electric Bill Presentment and Payment - The Gateway to One-on-one Customer Relationships2007-07-07 Personix
  The benefi ts of electronic bill presentment and payment (EBPP) are undeniable. Although its promises have been promoted for a decade, it has fi nally reached critical mass in the market with the number of electronic bill payments surpassing checks in 2006. However, the technical and financial effort required for a biller to implement an in-house EBPP solution can be both challenging and expensive.

Tags: 		  


Industry Watch: Manufacturing for Retail

Learn how the right information puts manufacturers ahead of the competition.