Member Login

E-mail:    Password:  




 TitleDate AddedCompany
whitepaper Attestation of Identity Information2006-11-10 14:17:30 Oracle
  This Oracle white paper discusses the fundamental premise of attestation and the role of identity management in achieving cost-effective, sustainable compliance. Attestation is the requirement that management periodically certifies that only appropriate individuals have accessed sensitive information. While the cost of complying with the provisions of regulations like Sarbanes Oxley is high, the cost of non-compliance is even higher. Fortunately, today's robust identity management (IdM) solutions are reducing the overall cost of compliance providing automated processes to maintain a comprehensive audit trail of historical user privileges, including when, why, and through which systems information was accessed. Any IT decision maker who's seeking an end-to-end security solution that supports regulatory compliance will benefit from informative white paper from Oracle.   
whitepaper VeriSign TeraGuard: Securing Critical Information Assets Through Intelligent Data Collection, Expert Monitoring, and Analysis2006-08-04 01:00:11 VeriSign
  Email is the virtual nervous system with which one communicates internally with fellow employees and externally with the business partners and customers. The VeriSign Go Secure! for Lotus Notes service works with existing R5/R6 desktop clients and supports IBM Domino 5.02 or later; certificate requests are automatically approved using the Notes Internet password for verification. This seamless process makes it easy for administrators to deploy S/MIME Internet email security to a large number of users. The Go Secure! service allows for automatic publishing of digital certificates issued by the VeriSign Managed Public Key Infrastructure (PKI) service to the existing Domino directory and automatic retrieval of certificates for encrypting and signing of sensitive email messages.   
whitepaper The Four Key Qualities of Effective Host Intrusion Prevention (HIP) Solutions: Defining Deep HIP2006-09-07 01:00:13 Third Brigade
  Businesses today are under intense pressure to open up their networks, comply with increasingly rigorous regulatory requirements, and ensure their IT assets are protected from attacks that are becoming increasingly sophisticated, targeted and frequent. This white paper explores these security challenges and explains in clear, simple terms: the changing threat environment; why common security approaches are not sufficient; what host-based Intrusion Prevention Systems (IPS) is, and why it must play a critical role in an overall security strategy.   
whitepaper Intelligent Defense for Enterprise Assets: The Need for Host Intrusion Prevention2006-09-07 01:00:13 Third Brigade
  At the same time that organizations are providing deeper access to their networks for employees, partners and customers enabling flexible work environments and more efficient business relationships - organizations are faced with an increasingly hostile threat environment as well as rising complexity associated with corporate and regulatory compliance. This whitepaper looks at the security challenges faced by organizations and explains how Host Intrusion Prevention (HIP) plays a critical role in an organization's overall security strategy.   
whitepaper MSB Purpose-Driven IT: Service Management Best Practices as a Strategic Advantage for Medium-sized Businesses.2006-04-03 06:57:51
  MSB Purpose-Driven IT: Service Management Best Practices as a Strategic Advantage for Medium-sized Businesses. Do you know the costs of your network downtime? Are you monitoring your network performance and network security? Do you need help delivering your Compliance Management Strategy? This whitepaper discusses Service Management Best Practices. Learn how to improve uptime, reduce complexity and reduce IT costs based on solid reporting to simplify and accelerate your IT operations.   
whitepaper Cisco IOS IPS Supported Signature List2006-05-04 03:56:49 Cisco Systems
  Cisco Systems releases IOS Intrusion Prevention System (IPS) signatures in the form of "S-files", which are lists of signatures and their characteristics. Cisco S-files contain signatures for all Cisco IPS platforms: Cisco IPS 42xx sensors, Cisco ASA 55xx appliances, Intrusion Detection System (IDS) modules for Cisco Catalyst 6500 Series switches, and Cisco IOS IPS. As Cisco creates new signatures, it updates the S-files and increments the file name (e.g. S224 as of April 2006). Cisco IOS IPS supports most, but not all, of the signatures in the S-files. This is because the other platforms (e.g. 42xx sensors) support additional "IPS inspection engines" that Cisco IOS IPS currently does not.   
whitepaper Wireless Intrusion Detection Systems Including Incident Response & Wireless Policy2006-05-10 01:00:28 Infosecwriters.com
  For some time wireless has had very poor, if any, security on a wide open medium. Along with improved encryption schemes, a new solution to help combat this problem is the Wireless Intrusion Detection System (WIDS). In the security and wireless world this has fast become a major part of securing a network. This paper will cover details of what a WIDS is and can do, along with incident response, and creating a wireless policy.   
whitepaper Cisco IOS IPS Deployment Guide2006-05-04 03:52:33 Cisco Systems
  In today's business environment, network intruders and attackers can come from both outside and inside the network. They can launch Denial-of-Service (DoS) attacks or Distributed Denial-of-Service (DDoS) attacks; attack Internet connections; and exploit network and host vulnerabilities. There is often no time to wait for human intervention - the network itself must possess the intelligence to instantaneously recognize and mitigate these attacks, threats, exploits, worms, and viruses. Cisco IOS Software Intrusion Prevention System (Cisco IOS IPS), with inline intrusion capabilities, is the first system in the industry to provide an inline, deep-packet-inspection-based IPS solution that helps enable Cisco routers to effectively mitigate a wide range of network attacks.   
whitepaper White Paper - Modern Network Security: The Migration to Deep Packet Inspection2006-02-24 01:01:25
  The past few years has seen a radical evolution in the nature and requirements of network security. There are many factors contributing to these changes, the most important of which is the shift in focus from so-called 'network-level' threats, such as connection-oriented intrusions and Denial of Service (DoS) attacks, to dynamic, content-based threats such as Viruses, Worms, Trojans, Spyware and Phishing that can spread quickly and indiscriminately, and require sophisticated levels of intelligence to detect. Where attacks like Smurf, Fraggle and the Ping of Death were the key threats in years past, now attacks such as "Microsoft IIS 5.0 printer ISAPI extension buffer overflow vulnerability" and "Unicode directory traversal" are more prevalent, albeit much less imaginatively named.   
whitepaper Identity Driven Management and Endpoint Integrity: A Technical Overview2006-08-03 01:00:11 Hewlett-Packard
  This white paper from ProCurve Networking by HP defines the networking function known as "endpoint integrity," or the process by which all endpoints attempting to connect to the network are examined in order to prohibit unsafe or otherwise non-compliant endpoints from gaining access. It goes on to describe how client-based and network-based endpoint integrity options work, and highlights the key differences between the three types of network-based endpoint integrity products on the market today, including:

  • Proprietary solutions
  • De facto standard solutions
  • Standard solutions

Finally, the paper explains how ProCurve's Identity Driven Manager (IDM) provides a richer, more robust, and future-proof implementation of endpoint integrity.