Featured Posts

shutterstock_87127951

Just another word or two – passphrases vs passwords

We have blogged many miles of space about the dangers of protecting your business assets with a simple username and password solution. Now there is a new trend using passphrases as a beefed up type of authentication. The problem is, there’s not much meat to this solution. Passphrases are basically a group of dictionary words [...]

Security vs Convenience

Security and convenience – Can we have both?

Dilbert cartoons rarely fail to raise a laugh in the office, and last month, when I was catching up on the Security Nirvana blog, was no different. As a summary of the debate around security versus convenience, I think it sums it up perfectly: I see so many companies and directors debating the issue of [...]

shutterstock_90932852

RSA 2012 – Keeping the Cloud secure

RSA 2012 is the biggest event in the security calendar. I’m here in San Francisco immersing myself in a buzz of activity and discussion about the latest cyber threats, data breaches, risk management and cloud security. But despite all the hustle and bustle I can’t keep away from my favourite blogs and wanted to share [...]

Print

RSA Conference 2012: First thoughts from the show floor

My feet have barely touched the ground at this year’s RSA Conference, and already there are too many talking points to mention. One thing which immediately struck me is the sheer number of people attending this year compared to 2011. The reason for this, which RSA president Art Coviello addressed in his opening keynote: the [...]

snail mail

Strong authentication, not ‘snail mail’, is the answer to cybercrime

In early nineteenth century England, members of the ‘Luddite’ movement protested against the onset of the industrial revolution by destroying the machinery which they believed was jeopardising their careers as skilled tradesmen. Since then the term has become synonymous with all of those who shun technological progress in favour of more antiquated methods. There is [...]

Password lock 1

“12345” thoughts on securing access

Earlier this year, I posted a somewhat comical blog on a list of the weakest passwords being used in corporations. While we all know we will have users that use “password” for their password, it never ceases to amaze me that even with the number of recommendation and best practices available we still see major [...]

EMV-Saudi-Arabia-3

Driving EMV adoption: the benefit for banks

According to recent reports from Visa, EMV deployment in the US is accelerating. An estimated one million Visa-branded EMV chip-enabled cards had been issued by the end of 2011. In addition to this, Mastercard has finally agreed to join Visa in supporting the technology in the US. EMV, which regular readers by now know stands [...]

NFC authentication

NFC developments at CES 2012

As Near Field Communications (NFC) stories spun like roulette wheels at CES in Las Vegas a couple of weeks ago, the emergence of several new devices caught my eye. For some time now, we have been blogging about NFC as the technology of choice when using mobile devices for e-payment. To highlight this point Gemalto [...]

Home Cloud

CES 2012: ARM, home networking and the cloud

While mobility and wireless technology have dominated CES for years, one of the more interesting things to note this year is how ARM processors have worked their way into almost every mobile device. TechCruch’s Devin Coldewey took note of this in his article on the winners and losers at CES 2012, stating: “..smart TVs, tablets, [...]

Tablet security

Security innovations at CES 2012

While CES is not historically synonymous with security technology, there were a few interesting innovations around mobile security that caught my eye at this year’s event. Intel continues to push its Identity Protection Technology (IPT) and Anti-Theft (AT) technology as part of the ultrabook introduction. I particularly like this as it allows for both more [...]