Member Login

E-mail:    Password:  




 TitleDate AddedCompany
whitepaper Why Strong Authentication? - The Security and Administrative Benefits of Using X.509 PKI Based Strong Authentication2007-01-01 Isode
  Strong authentication based on X.509 PKI (Public Key Infrastructure) is available in a number of protocols and provides both security & administrative benefits and drawbacks. This paper looks at the security and administrative benefits (and draw backs) of using strong authentication as well as the generic issues that apply to many applications and protocols using strong authentication. Future white papers will look at specific applications of strong authentication. This paper shows that, in many situations, there are significant security and administrative benefits to using strong authentication. These benefits are behind Isode's drive to add strong authentication capabilities to many parts of the Isode product set.

Tags: Authentication - Encryption, Security Administration		   
whitepaper Easy Setup of Strong Authentication2007-01-01 Isode
  In order to gain the overall administrative "Win" by choosing strong authentication, it is critical to make the setup of keys and certificates very easy, which in turn leads to the requirement on making Certification Authority interaction easy. This paper looks at how to achieve this goal, and Isode's approach to the problem.   
whitepaper Federated Identity, Distributed PKI and Smart Cards2007-01-01 Isode
  This paper considers authentication systems based on smart cards, where the smart cards will be issued by many organizations, and authentication must work at any location. An important example of this type of deployment is the US Government planned deployment in support of HSPD (Homeland Security Presidential Directive) 12. Federated Identity schemes have been proposed to support HSPD-12. This paper first looks at systems where federated identity approaches are appropriate. It then considers smart card based deployments, and looks at requirements and solutions to support them. It describes why use of a distributed PKI is generally superior to a federated identity approach.

Tags: Security Administration, Authentication - Encryption		   
whitepaper Proposal of Constructing PKI on Overlay Network2006-12-16 Nara Institute of Science and Technology
  This paper presents the design of foundation PKI (fPKI), a PKI system constructed on an overlay network for an open source community. fPKI can provide an alternative PKI system to the current server-client PKI system. The Certificate Authority (CA) system of the fPKI is composed of the reputation of each committer, which has been assessed by the SecureEigenTrust algorithm. fPKI inherits the scalability of SecureEigenTrust, and also inherits the common CA usage of the server-client PKI system.   
whitepaper Diffie-Hellman Key Exchange -- A Non-Mathematician's Explanation2006-12-18 13:20:17 Global Knowledge Network
  The Diffie-Hellman algorithm is one of the most common protocols used in networking today. An understanding of its underlying protocols and processes helps a great deal when trouble-shooting a system. This white paper takes a simple approach to explaining the DH process.

Tags: Authentication - Encryption		   
whitepaper Enterprise Email Encryption Buyers Guide2006-03-15 PGP
  This PGP White Paper provide a comprehensive understanding of the factors organisations must consider when designing, implementing, managing, and procuring encryption solutions for enterprise email systems. PGP Corporation's award-winning enterprise encryption products provide the reference solution for this guide.

Tags: Internet and Web, Security Administration		   
whitepaper Windows Server 2003 Security Cookbook: Public Key Infrastructure and Certificates2006-02-10 O'Reilly Media
  Public Key Infrastructure (PKI) and Certification Authorities (CA) have become very popular IT artifacts. They can be used for a multitude of purposes including identity assertion, encryption, and digital signatures. They're actually relatively easy to set up and very easy to maintain. However, before jumping into the recipes, the user should understand some of the basic concepts and terminology of PKI.

Tags: Server Platforms - OS, Authentication - Encryption		   
whitepaper PKI Interoperability by an Independent, Trusted Validation Authority2006-02-02 Det Norske Veritas
  Interoperability between PKIs (Public Key Infrastructure) is a major issue in several electronic commerce scenarios. This paper suggests an approach based on a trust model where an independent Validation Authority (VA) replaces Certification Authorities (CA) as the trust anchor for the receiver of a PKI certificate (the Relying Party, RP). By trusting the VA, the RP is able to trust all CAs that the VA can answer for. The main issue is not technical validation of the certificates but assessment of quality, trustworthiness and risk related to certificate acceptance. The RP obtains a one-stop shopping service - one point of trust, one agreement, one bill, one liable actor, which may be beneficial for some business processes.

Tags: Security Administration		   
whitepaper On-Demand Webcast: Risk Compartmentalization as a Security Strategy2006-02-01 Apani Networks
  Learn how to cost effectively implement risk compartmentalization strategies to enhance security inside the network perimeter. Enterprises today are trying to address the threat of a of zero-day attack. Approaches to this challenge include:
  • Build stronger barriers around sensitive data by setting up security zones throughout the network
  • Implement intrusion detection and prevention defenses
  • Initiate access control programs to limit unauthorized activity
Up until now, the choices that were available on how to segment the network into distinct systems has been quite challenging, especially for large scale deployments.

Learn how a software approach to this challenge provides an easier solution that is scalable, flexible and can reduce your overall cost of security.

Presenter:
Andreas M. Antonopoulos is a Senior Vice President and Founding Partner with Nemertes Research, where he develops and manages research projects, conducts strategic seminars and advises key clients. Andreas is a computer scientist and a Certified Information Systems Security Professional (CISSP) with an engineering, programming and consulting background.

Tags: Data Infrastructure, Intrusion - Tampering, Intrusion - Tampering, Intrusion - Tampering, Authentication - Encryption, Security Administration, Authentication - Encryption, Security Administration, Data Infrastructure, Data Tools, Data Tools, IT Budgeting, IT Budgeting, Intrusion - Tampering, Intrusion - Tampering, Security Administration, Intrusion - Tampering		   
whitepaper S/MIME Support Package: Release 4.02005-12-21 Research In Motion
  The S/MIME Support Package is designed to enable BlackBerry device users who are already sending and receiving Secure Multipurpose Internet Mail Extensions (S/MIME) protected messages using their desktop email program to send and receive S/MIME protected messages using their BlackBerry devices. The S/MIME Support Package is designed to work with S/MIME email clients including Microsoft Outlook and Microsoft Outlook Express, and with popular Public Key Infrastructure (PKI) components including Netscape, Entrust Authority Security Manager version 5 and later, and Microsoft Certificate Authorities (CAs). This paper describes the S/MIME Support Package, which is designed to offer extended security features for BlackBerry devices.

Tags: Internet and Web, Software Development Tools