Identity Management
News
The week in security: AusCERT 2013 dominates Cyber Security Awareness Week
The AusCERT 2013 security conference, which coincides with the government-sponsored National Cyber Security Awareness Week (NCSAW), dominated the news during the week, and the CSO Australia team was there in full force to hear the latest from industry experts from across Australia around the world.
Standards could turn social networks into trusted ID brokers: NetIQ
Adoption of identity and access management (IAM) standards may see social-network giants like Facebook and LinkedIn emerge as trusted identity brokers for everything from government transactions to financial services, a security expert has predicted.
Five steps to mastering identity and access management
As the workforce becomes increasingly mobile and dispersed, identity and access management becomes more important in ensuring organisational security. While managing user identities and controlling access are separate tasks, they are closely related.
Australia crawls towards its answer to identity fraud
The Australian Government's electronic answer to the nation's $1 billion identity theft problem -- the Document Verification Service (DVS) -- has processed 200,000 verifications, according to the Attorney General's Department (AGD).
Don't let your data suffer from Miss Taken Identity
Whether you celebrated National Identity Fraud Awareness Week (NIFAW) with a large identity cake or just shrieked 'Who Are You?' and other identity-inspired songs with friends over a beer or four, the campaign has run its course for another year -– and reminded those who were listening that we're still living in a world of trusting, naïve fools.
Slideshows
Features
It Wasn’t Me, It Was Bennett Arron
So, Identity Theft. What is it really? Well, I’m glad you asked. It’s basically when your personal details are used fraudulently to open accounts or obtain documentation in your name. This could result in debts being accumulated, for which you would initially be accountable – until you prove yourself innocent.
Novell, CA push to secure identity, security in cloud
Two major identity management companies are forging ahead with products designed to satisfy what a cloud-computing consortium calls one of the trickiest problems preventing secure and automated connections between internal IT infrastructures and external service providers: identity and authentication.
AFP hits $6 million identity fraud syndicate
The Australian Federal Police (AFP) claims to have struck a major blow to a multi-million identity fraud syndicate.
Free Tools to Send Anonymous Messages
Whether it is for an investigation, a whistle-blower statement, a prank or just extreme paranoia, you may have a need for anonymously sending messages. The following five tools provide an easy to use way to communicate incognito with Internet surfing, emails, phone calls and text messages. While these tools have their limitations, they do provide an Investigator a great way to hide his identity, gather intelligence, and communicate secretly when needed.
Social Engineering: The Fine Art of BS, Face to Face
Chris Nickerson is willing to push it about as far as a person can go when it comes to security assessments. The founder of Lares, a security consultancy in Colorado, Nickerson conducts what he calls "Red Team Assessments" for clients. He is paid to try and dupe a client, and the client's employees, to give them a clear picture of the weak spots in their security plan. He then advises them on how to shore up defenses more effectively in the event a real criminal comes knocking.
Opinions
Opinion: How safe is your customer identity data?
Some of the world’s largest corporations have recently fallen victim to hacking attacks and identify data theft, while other online businesses have been compromised and sidelined for days or weeks, losing millions of dollars in revenue and suffering significant reputational damage. It’s never been more important for companies to act in order to avoid becoming the next victim of identity data theft.
Vendor View: Where's the risk in a recession?
A financial crisis is not the time for organisations to become lax about the value of their information security assets.
Good security in recessionary times
If you've had any money in the stock market, it's been a bloodbath the last few weeks. It's hard to remember that any 10-year period in stock market history has always ended up with better returns than any other investment. As financial analysts argue over whether we are already in or just headed into a deep global recession, we are facing a rough, contracting period. People with good jobs are holding on to them tighter than ever.
Five lessons learned about computer security
Reformed hacker-turned-security-consultant Kevin Mitnick served five years in federal prison for breaking into phone and software company networks. He talks about his past hacking exploits, computer security, and how he turned an illegal hobby into a useful career.
Deploying NAC: Challenges and alternatives
What are some of the challenges in deploying NAC? What are the alternatives for LAN security?
-
KANA Launches Next-Generation LAGAN Enterprise Customer Service Suite for Cost-Effective, Omni-Channel Public Sector Engagement
-
Vormetric appoints M.Tech as Australian and New Zealand Distributor
-
Gigamon wins Best of Show Grand Prix at Interop Tokyo 2013
-
A10 Networks’ new Thunder Series receives two awards at Interop Tokyo for Performance Optimisation and DDoS Mitigation
-
Silver Peak names founder David Hughes as CEO
Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).
- Have an incident response plan.
- Pre-define your incident response team
- Define your approach: watch and learn or contain and recover.
- Pre-distribute call cards.
- Forensic and incident response data capture.
- Get your users on-side.
- Know how to report crimes and engage law enforcement.
- Practice makes perfect.
Warning: Tips for secure mobile holiday shopping
I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.








