| Title | Date Added | Company | |
|---|---|---|---|
![]() |
Java XML Digital Signatures | 2006-09-27 01:00:21 | Sun Microsystems |
| Extensible Markup Language (XML) technology is now an integral part of web-based business applications. These applications require a fundamentally sound and secure infrastructure to meet the security requirements of confidentiality, endpoint authentication, message integrity, and nonrepudiation. XML signature, XML encryption, XML Key Management Specification (XKMS), Security Assertion Markup Language (SAML), and XML Access Control Markup Language (XACML) are the XML security standards that define XML vocabularies and processing rules to meet these security requirements. This paper provides an introduction to XML digital signatures and to the Java XML Digital Signatures APIs (JSR 105). | |||
![]() |
Lightweight Email Signatures | 2006-06-16 | IBM |
| This paper presents Lightweight Email Signatures (LES), a simple cryptographic architecture for authenticating email. LES is an extension of DKIM, the recent IETF e ort to standardize domain-based email signatures. LES shares DKIM's ease of deployment: they both use the DNS to distribute a single public key for each domain. Importantly, LES supports common uses of email that DKIM jeopardizes: multiple email personalities firewalled ISPs, incoming-only email forwarding services, and other common uses that often require sending email via a thirdparty SMTP server. In addition, LES does not require DKIM's implied intra-domain mechanism for authenticating users when they send email. LES provides these features using identity-based signatures.
Tags: Email |
|||
![]() |
Reduce the Risk of Costly Data Breaches: Three Pillars of Data Protection | 2006-06-01 | Iron Mountain |
| There are numerous regulations that govern the protection of private, personal and confidential data regardless of whether the data resides on a secure mainframe computer, desktop PC or mobile device such as a laptop PC. Legislative requirements to disclose lost data incidents are expensive and can negatively affect a corporation's reputation.
Iron Mountain Digital advocates these Three Pillars of Data Protection to serve as a guide for customers establishing a PC security program:
|
|||
![]() |
"Going Up, Going Down!" - A Review of Quarter 2/2006 | 2006-09-15 10:47:40 | MessageLabs |
| Welcome to the June Edition of the MessageLabs Intelligence monthly report. This report provides the latest threat trends for June 2006, as well as a quarterly retrospective, to keep you informed regarding the ongoing fight against viruses, spam and other unwelcome content. | |||
![]() |
Efficient Byzantine Broadcast in Wireless Ad-Hoc Networks | 2006-05-16 01:00:28 | Technion - Israel Institute of Technology |
| This paper presents an overlay based Byzantine tolerant broadcast protocol for wireless ad-hoc networks. The use of an overlay results in a significant reduction in the number of messages. The protocol overcomes Byzantine failures by combining digital signatures, gossiping of message signatures, and failure detectors. These ensure that messages dropped or modified by Byzantine nodes will be detected and retransmitted and that the overlay will eventually consist of enough correct processes to enable message dissemination. An appealing property of the protocol is that it only requires the existence of one correct node in each one-hop neighborhood. The paper also includes a detailed performance evaluation by simulation. | |||
![]() |
Attestation of Identity Information | 2006-11-10 14:17:30 | Oracle |
| This Oracle white paper discusses the fundamental premise of attestation and the role of identity management in achieving cost-effective, sustainable compliance. Attestation is the requirement that management periodically certifies that only appropriate individuals have accessed sensitive information. While the cost of complying with the provisions of regulations like Sarbanes Oxley is high, the cost of non-compliance is even higher. Fortunately, today's robust identity management (IdM) solutions are reducing the overall cost of compliance providing automated processes to maintain a comprehensive audit trail of historical user privileges, including when, why, and through which systems information was accessed. Any IT decision maker who's seeking an end-to-end security solution that supports regulatory compliance will benefit from informative white paper from Oracle. | |||
![]() |
Stealth MXP: Comprehensive Digital Identities in One Device | 2006-06-29 03:45:59 | MXI Security |
| Security tokens have been used for strong authentication of individuals to systems. They have traditionally come in many forms including smart cards, USB keys, biometric readers, and one-time-password devices. Despite the multitude of capabilities and form factors of tokens that have appeared in the market they have all been limited in capacity, application and portability, which poses serious obstacles when facing today's new digital identity requirements. MXP is the first technology of its kind that has the manifold identities, strong authentication, large capacity, flexibility, security and portability to meet the needs of existing systems and the rapidly evolving demands of the identity management and information security industry. | |||
![]() |
A Content Integrity Service for Long-Term Digital Archives | 2006-05-02 06:15:52 | Hewlett-Packard |
| This paper presents a content integrity service for long-lived digital documents, especially for objects stored in long-term digital archives. The goal of the service is to demonstrate that information in the archive is authentic and has not been unintentionally or maliciously altered, even after its bit representation in the archive has undergone one or more transformations. The paper describes the design for an efficient, secure service that achieves this, and the implementation of the first prototype of such a service that is built for HP's Digital Media Platform. The solution relies on one-way hashing and digital time-stamping procedures. | |||
![]() |
The Driver Reliability Signature Program | 2006-03-07 03:23:06 | Microsoft |
| This paper provides information about the Driver Reliability Signature program that hardware vendors can use to get a signed device driver for the Windows Vista operating system. The Driver Reliability Signature (DRS) program was formerly known as the Driver Quality Signature (DQS) program. Together with the Windows Vista operating system, Microsoft is introducing the Driver Reliability Signature (DRS) program. The DRS program represents a baseline set of reliability test and tools that must be used in addition to the required Windows Vista Logo program tests for a device type. If no Windows Vista Logo Program is available for your device type, you can use the DRS program to obtain a digital signature for your driver. | |||
![]() |
Digital Signatures for Kernel Modules on x64-Based Systems Running Windows Vista | 2006-03-07 02:19:58 | |
| For Microsoft Windows Vista and later versions of the Windows family of operating systems, kernel-mode software must have a digital signature to load on x64-based computer systems. Digital signatures allow the administrator or end user who is installing Windows-based software to know whether a legitimate publisher has provided the software package. When users choose to send Windows Error Reporting data to Microsoft after a fault or other error occurs, Microsoft can analyze the data to know which publishers' software was running on the system at the time of the error. This paper describes how to manage the signing process for kernel-mode software for Windows Vista. |