Member Login

E-mail:    Password:  




 TitleDate AddedCompany
whitepaper Attestation of Identity Information2006-11-10 14:17:30 Oracle
  This Oracle white paper discusses the fundamental premise of attestation and the role of identity management in achieving cost-effective, sustainable compliance. Attestation is the requirement that management periodically certifies that only appropriate individuals have accessed sensitive information. While the cost of complying with the provisions of regulations like Sarbanes Oxley is high, the cost of non-compliance is even higher. Fortunately, today's robust identity management (IdM) solutions are reducing the overall cost of compliance providing automated processes to maintain a comprehensive audit trail of historical user privileges, including when, why, and through which systems information was accessed. Any IT decision maker who's seeking an end-to-end security solution that supports regulatory compliance will benefit from informative white paper from Oracle.   
whitepaper Websense Security Labs Security Trends Report 20062006-04-24 08:03:54
  Websense Security Labs researches today's advanced internet threats, focusing on malicious websites, phishing, and other emerging threats associated with spyware, keylogging, and instant messaging and peer-to-peer use. This report summarizes findings for the second half of 2005 and presents projections for the upcoming period.   
whitepaper The three dimensions of endpoint security2006-04-24 06:40:19
  With the proliferation of personally-owned IT gagdgets in the workplace, IT security needs to evolve to address the three-dimensions of endpoint security - data, devices and desktops.   
whitepaper E-CRIME & WEB THREATS2006-04-24 08:08:25
  Businesses are now facing a new type of information security threat whose characteristics are less widespread in number, more insidious, better-targeted, financially-motivated and driven by organised crime. This is no longer the domain of teenage hackers, but hardened criminals for whom information-based crime offers bigger rewards and less risk than crime in the physical world. Their target is information - confidential corporate or personal data - that can be sold for profit or used for fraud or extortion. This trend toward "hacking for profit" has been signalled by respected sources such as the SANS™ Institute (United States), the National Hi-Tech Crime Unit (United Kingdom) and Websense Security Labs™ (global).   
whitepaper SSL in High-Security Browsers2006-04-20 08:59:26
  Declaring war on security exploits, browser providers are collaborating with industry experts to make their products more secure. A new breed of high-security browsers, including Firefox, Opera, and the upcoming Microsoft Internet Explorer 7, give users clear indications of a site's trustworthiness. With an average online order value of £75 and rising abandonment rates, e-commerce sites stand to gain or lose veritably depending on how users perceive them through these new browsers.   
whitepaper Detecting Critical Nodes for MANET Intrusion Detection Systems2006-04-14 National Institute of Standards and Technology
  Ad hoc routing protocols have been designed to efficiently reroute traffic when confronted with network congestion, faulty nodes, and dynamically changing topologies. The common design goal of reactive, proactive, and hybrid ad hoc routing protocols is to faithfully route packets from a source node to a destination node while maintaining a satisfactory level of service in a resource-constrained environment. Detecting malicious nodes in an open ad hoc network in which participating nodes have no previous security associations presents a number of challenges not faced by traditional wired networks.

Tags: Mobile - Wireless Communications, Intrusion Detection Systems		   
whitepaper Compliance in the Mobile Enterprise2006-08-02 06:14:47 iAnywhere Solutions
  At a time when state, local, and federal regulators are demanding higher data protection standards, accelerating mobile trends—such as use of smart phones, basic logistical applications, and tiny storage devices—are multiplying the possible security breaches that IT organizations face. To add to the complexity, those risks differ depending on the employee's job description, from sales people to clinicians, all the way up to executives. Yet, few companies realize that mobile security management is not simply an extension of existing end-user management. Download this paper to learn how to create and implement effective mobile user policies and how to evaluate management applications that may make the tasks easier.   
whitepaper Oracle Software Security Assurance Process2006-07-04 03:56:39 Oracle
  The Oracle Software Security Assurance Process ensures that Oracle's products are as secure as the company can build them at all stages of the software lifecycle: initial design, in development, and following release to customers. The process is extensive and constantly evolving. Oracle's products have included security mechanisms as core product capabilities for decades. The Oracle Software Security Assurance Process has evolved over the company's history and will continue to evolve as it identifies new technology and processes to find security vulnerabilities, improve the strength of its security mechanisms, and provide ongoing protection to its customers.   
whitepaper NetSafeGuard Intrusion Detection System Blueprint2006-03-24 Science Technology Institute
  This paper contains specifications of an integrated Network Security framework. This framework provides a complete security for computer systems against various computer threats such as virus, internet worms, spywares, intrusion attempts and spamming emails. The current systems available in the market suffer from high false alarm rates, and cannot detect unknown attacks because of the sophisticated and dynamic nature of malicious activities. This project aims to improve the system robustness, and detection accuracy of the decision engine, in order to overcome such inefficiency. Beside this major focus, there are a wide range of supporting services provided to boost the effectiveness of system, in terms of functionalities and usability.

Tags: Intrusion Detection Systems, 		  
whitepaper SmashGuard: A Hardware Solution to Prevent Security Attacks on the Function Return Address2006-03-22 Purdue University
  A buffer overflow attack is perhaps the most common attack used to compromise the security of a host. This attack can be used to change the function return address and redirect execution to the attacker's code. This paper presents a hardware-based solution, called SmashGuard, to protect against all known forms of attack on the function return addresses stored on the program stack. With each function call instruction, the current return address is pushed onto a hardware stack. A return instruction compares its address to the return address from the top of the hardware stack. An exception is raised to signal the mismatch.