Member Login

E-mail:    Password:  




 TitleDate AddedCompany
whitepaper Comodo Helps Zamberg.com Land Customers for High-Quality Grooming Products2008-12-02 Comodo Group
  Zamberg.com is a leading distributor of high quality German grooming products. It is the largest distributor of products made by craftsmen in Solingen, Germany. Zamberg.com is the exclusive U.S. distributor for many European products. The challenge was that many customers who are interested in buying a product off a new website feel unsure about the website's authenticity. They worry that their information is not secure on the web, and that some websites may be used for scams. Zamberg.com deployed Comodo's EV SSL Certificates and HackerProof Certificates to indicate to users that their information was secure.

Tags: Authentication - Encryption
  
whitepaper Why Switch From IPSec to SSL VPN: And Four Steps to Ease Transition2008-11-01 SonicWall
  Internet Protocol Security (IPSec) Virtual Private Networks (VPNs) were originally developed over a decade ago to help businesses avoid the costs of privately-leased WAN lines. IPSec VPNs work by establishing a tunnel over the Internet to connect the internal corporate network to a site outside a corporate firewall or gateway. IPSec needs compatible hardware or software, often from a single vendor, at both endpoint locations. IPSec VPNs remain viable solutions for connecting trusted endpoint devices that are directly managed by IT (such as branch or remote office computers), but not for mobile or personal devices.

Tags: Security Administration, Authentication - Encryption
  
whitepaper MashSSL: Towards Multi-Party Trust in the Internet2008-10-23 University of Texas
  This paper first shows that several seemingly disparate problems, ranging from secure cross domain authorization to policy enforcement in enterprise mashups to MITM attacks on federation protocols, all have as their root cause a single missing primitive function. Specifically, when a user at a browser is simultaneously interacting with two web services to obtain a composite service, it is not possible in today's Internet architecture for either web service to "Look behind the browser" and assure itself of the identity of the other web service in a standard and secure fashion. Complicating matters is that in almost all cases the web services cannot, or should not, trust the user or their browser.

Tags: Authentication - Encryption
  
whitepaper Taking Secure Access to the Next Level - Achieving Granular Control That Really Works2008-10-18 Missing Link Security
  This paper explains taking secure access to the next level by effectively implementing granular access control depends not only on the presence of related functionality but also on the efficiency and uniformity with which those features can be applied and the overall usability of the resulting configuration. In this regard, most SSL VPN products currently available in the market exhibit inconsistencies, dependencies, and other shortcomings that complicate matters considerably. Organizations, therefore, need to be mindful to avoid these all-too-prevalent pitfalls when selecting an SSL VPN solution.

Tags: Authentication - Encryption
  
whitepaper VeriSign EV Helps CanadaDrugs.com Save Lives, Boost Conversions, and Build Revenue2008-10-13 Verisign
  CanadaDrugs.com was a founder of the international mail order pharmacy industry in 2001 and remains its largest participant, with many millions of satisfied customers. The challenge was to distinguish Canadadrugs.com from the many unscrupulous Web sites purporting to offer great deals on internationally-supplied medicines and to build customer trust in the CanadeDrugs.com name. CanadaDrugs.com deployed VeriSign Secured Seal and VeriSign Secure Site Pro with Extended Validation (EV) SSL Certificates.

Tags: Authentication - Encryption
  
whitepaper Workload Characterization of a Lightweight SSL Implementation Resistant to Side-Channel Attacks2008-10-11 Springer Science+Business Media
  Ever-growing mobility and ubiquitous wireless Internet access raise the need for secure communication with devices that may be severely constrained in terms of processing power, memory capacity and network speed. This paper describes a lightweight implementation of the Secure Sockets Layer (SSL) protocol with a focus on small code size and low memory usage. The paper integrated a generic public-key crypto library into this SSL stack to support elliptic curve cryptography over arbitrary prime and binary fields. Furthermore, the paper aimed to secure the SSL handshake against side-channel attacks (in particular simple power analysis) by eliminating all data-dependent or key-dependent branches and memory accesses from the arithmetic operations and compare the resulting performance with an unprotected implementation.

Tags: Security Administration, Authentication - Encryption
  
whitepaper VeriSign Name Builds Trust for Credit Karma, EV Delivers 26% More Conversions2008-10-09 Verisign
  Credit Karma is the only resource for consumers to access their credit score as often as they need for free. Unlike other services, Credit Karma never limits access, never charges consumers and never sells their personal information. The challenge was to develop trust and loyalty from a savvy user base, to build a large enough customers following to command advertising revenues, to establish entrenched positioning as a pro-consumer advocate, etc. Credit Karma deployed VeriSign Secured Seal and VeriSign Secure Site Pro with Extended Validation (EV) SSL Certificates.

Tags: Authentication - Encryption
  
whitepaper SonicWALL Case Study: Carriage Services, Inc.2008-10-01 SonicWall
  The nation's fourth-largest publicly traded death care company, Carriage Services owns funeral home and cemetery facilities in 29 states, which are run by established professionals within each local community. The challenge was to establish a secure, powerful, reliable and cost-effective distributed network to support a nationwide service business. Carriage Services deployed SonicWALL E-Class NSA E7500, SonicWALL TZ 190 and TZ 170 network security Appliances, SonicWALL Global VPN Client (GVC), SonicWALL Global Management System (GMS), SonicWALL SSL-VPN 2000 and SonicWALL Email Security 400.

Tags: Security Administration, Authentication - Encryption
  
whitepaper Minimizing SSO Effort in Verifying SSL Anti-Phishing Indicators2008-09-05 Institute for Infocomm Research
  In an on-line transaction, a user sends her personal sensitive data (e.g., password) to a server for authentication. This process is known as Single Sign-On (SSO). Subject to phishing and pharming attacks, the sensitive data may be disclosed to an adversary when the user is allured to visit a bogus server. There has been much research in anti-phishing methods and most of them are based on enhancing the security of browser indicator. This paper presents a completely different approach of defeating phishing and pharming attacks. Its method is based on encrypted cookie. It tags the sensitive data with the server's public key and stores it as a cookie on the user's machine.

Tags: Security Administration, Authentication - Encryption
  
whitepaper Actinic Selects GlobalSign for Extended Validation SSL Certificates2008-09-02 GlobalSign & GMO Internet
  Founded in 1996, Actinic Software Ltd is a specialist developer and provider of ecommerce products for small to medium sized businesses and a leading supplier of Electronic Point Of Sale (EPOS) and multi-channel retail technology. With the increase of e-commerce, organisations and customers alike are faced with ever increasing security threats, for example, phishing attacks, and credit card fraud and identity theft. SSL is an essential operational security requirement for Actinic and all organisations offering Internet based services. When a website is using a traditional SSL certificate, a padlock symbol is displayed in the address bar to alert users of the presence of SSL - indicating the site is enabled to carry out secure transactions.

Tags: Authentication - Encryption, Authentication - Encryption