Phil Windley

DECEMBER 2, 2020

While decentralized identifiers and verifiable credentials have much to offer the Internet of Things (IoT), the secure messaging subsystem promises an IoT that goes well beyond those initial scenarios. The follow-on post goes deeper into what a true Internet of Things founded on SSI can provide. A Self-Sovereign Internet of Things.

Internet 87

Internet Security Examples Authentication 87

SecureWorld News

FEBRUARY 9, 2024

Identity Governance: This concerns the business processes and guard rails for effective IAM service assurance. Identity Governance (IGA) Challenges abound in the enterprise that are opening the door to greater compliance and security risk.

Architecture 85

Architecture Authentication Security Applications 85

GeekWire

DECEMBER 9, 2021

There’s a lot of chatter these days about Web3 — a decentralized version of the internet that operates outside the confines and grips of social media and technology giants. That pass is a digital credential that allows airlines and governments to verify travel and health documents, including COVID-19 test results.

Internet 85

Internet Travel Hotels Airlines 85

GeekWire

JUNE 2, 2020

Dick Hardt has often been “early to the new,” as he puts it: Microsoft Windows in 1986, neural networks in 1989, the internet in 1993, open source in 1995, and even Burning Man in 1999. “The internet does not have an identity layer,” said Hardt, our latest Geek of the Week. back in 2005.

Internet 102

Internet Architecture Microsoft Applications 102

CTOvision

NOVEMBER 22, 2016

Cyberattacks are increasing across multiple industries and every level of government. Over the last decade, attacks have been directed against governments, academia, financial institutions, businesses in every sector, and even individuals and their homes. The use cases for a Trusted Security Foundation touch every user of the Internet.

Security 150

Security Internet Engineering Healthcare 150

SecureWorld News

AUGUST 4, 2020

And it's a malware strain used specifically by the Chinese government. Chinese government actors are using malware variants in conjunction with proxy servers to maintain a presence on victim networks and to further network exploitation. If these services are required, use strong passwords or Active Directory authentication.

Malware 53

Malware Government Exercises Firewall 53

CIO Business Intelligence

DECEMBER 19, 2023

This shows that many modern cyber security challenges are network-agnostic, which means the most popular cyber attack methods typically don’t focus on the network technology the company uses to access the internet. The need for improved rural internet service has been recognized by both governments and businesses alike.

Wireless 96

Wireless Network Security Internet 96

CIO Business Intelligence

JANUARY 22, 2024

Over 85% of organizations analyzed have RDPs accessible via the internet for at least 25% of a given month, leaving them open to ransomware attacks. Implement strong authentication methods for key internet-facing systems, such as multi-factor authentication.

Security 122

Security CTO How To Authentication 122

CTOvision

SEPTEMBER 19, 2014

Some of the developments include, among others, cloud computing, web solutions, information governance and BYOD. Therefore, as long as an Internet connection is available, staff can gain access to their applications and to their work. Identity and access governance. Moving to and using the cloud.

Authentication 305

Authentication Applications Cloud Government 305

SecureWorld News

JULY 26, 2023

Earlier this week, the Norwegian National Security Authority (NSM) disclosed that a series of attacks targeting government agencies exploited a previously unknown Zero-Day vulnerability in Ivanti's Endpoint Manager Mobile (EPMM) software, formerly known as MobileIron Core. The vulnerability also has a maximum CVSS score of 10.0,

Software 73

Software Software Government Authentication 73

CTOvision

SEPTEMBER 3, 2015

Take the 2015 Agile Government Survey. CSC Merges Government Services Unit with SRA Upon Separation; Creating Largest Pure-Play Government I.T. How to limit cyber risk with adaptive authentication - GCN.com. Redesigning Government Work for the Internet of Things - Nextgov. Business in the U.S.

Government 150

Government Healthcare Intel Authentication 150

CTOvision

SEPTEMBER 11, 2015

The DHS National Cybersecurity and Communications Integration Center (NCCIC) is playing an increasingly important role in collaborating across multiple sectors of the economy and across government in sharing important advisories and alerts. These devices may be at risk if they are capable of long-range connectivity.

Internet 150

Internet Wireless Security Network 150

Vox

DECEMBER 18, 2020

Suspected Russian government hackers breached the computer networks of the US Defense Department. The Russians, knowing they would struggle mightily to get into hard targets — the US government and also members of the Fortune 500 — instead found that they all used the same software for network management, made by a company called SolarWinds.

Government 125

Government Network Microsoft Software 125

Kitaboo

MARCH 26, 2024

eBook DRM implements total control over resources using technologies such as encryption and authentication. It includes methods like user authentication, verification, licensing of eBooks, encryption, etc. The DRM platforms also incorporate access governance to ensure that only authorized users have access to the eBooks.

eBook 78

eBook Licensing Authentication Trends 78

GeekWire

JANUARY 30, 2024

Above all, West said he’s most concerned about “lowering levels of trust in our system” at a time when public trust in government is at historic lows. He said it took far too long for people to recognize the harms of the internet — and hopes that we don’t repeat that delay again. ”

Research 89

Research Artificial Intelligence Government Authentication 89

Phil Windley

AUGUST 20, 2019

Summary: Sovrin is an identity metasystem that provides the Internet's missing identity layer. Digital identity is broken because the Internet was built without an identity layer. The idea was made famous by a New Yorker cartoon that says, “On the Internet, nobody knows you’re a dog.”. The Problems with Digital Identity.

Internet 102

Internet Banking System Architecture 102

CTOvision

JANUARY 4, 2017

If your organization has something of value to a foreign government here are five cyber attack counter-measures you should be implementing. Phishing to steal credentials is the #1 technique used by foreign governments to gain access to sensitive data. Verify User Identity. Check Device and Server Software.

Data Center 204

Data Center Malware Virtualization Government 204

Phil Windley

JULY 28, 2017

Summary: Building the Internet of Things securely requires that we look to non-hierarchical models for managing trust. Sovrin provides a Web of Trust model for securing the Internet of Things that increases security and availability while giving device owners more control. Not bad stuff as far as it goes. Indeed, I think we have to.

Internet 45

Internet Security Industry Authentication 45

CTOvision

AUGUST 27, 2015

Symantec takes on the Internet of unsecured things - GCN.com. USPS Official: First Priority with Internet of Things is Cost Cutting - Nextgov. Prioritizing authentication, GitHub attacked, Carter back to Silicon Valley. Trends on Tuesday: Web Standards Advocate Advises Adaptive Web Design for Government Sites.

Symantec 150

Symantec Licensing SAP Journal 150

SecureWorld News

OCTOBER 6, 2022

The CSA aims to inform all federal and state government agencies, specifically those involved in critical infrastructure, and private sector organizations of notable trends and commonly used tactics, techniques, and procedures (TTPs). government and civilian networks. Block obsolete or unused protocols at the network edge.".

Network 82

Network Telecommunications Government Authentication 82

SecureWorld News

MARCH 18, 2021

Here is how Check Point describes what the vulnerabilities allow attackers to do: "The vulnerabilities allow an attacker to read emails from an Exchange server without authentication or accessing an individual’s email account. Once an attacker takes over the Exchange server, they can open the network to the internet and access it remotely.

Microsoft 79

Microsoft Groups Internet Authentication 79

Phil Windley

DECEMBER 6, 2021

But my relationship with him grew into friendship through Internet Identity Workshop (IIW). Kim not only saw the need for a set of laws to govern online identity system architecture, but also foresaw the need for an identity metasystem on the internet. I guess we'll never get that last talk.

Microsoft 133

Microsoft Internet Authentication Architecture 133

Dataconomy

JANUARY 10, 2024

This includes restricting user access privileges based on job roles and responsibilities while utilizing factor authentication methods. Adherence to regulatory standards In today’s data-driven world, governments have established regulations to ensure the protection of information.

Security 83

Security Data Backup Authentication 83

Phil Windley

SEPTEMBER 28, 2020

In Authentic Digital Relationships I made the argument that self-sovereign identity, supporting heterarchical (peer-to-peer) interaction, enables rich digital relationships that allow people to be digitally embodied so they can act online as autonomous agents. the right and acceptance of an authority, usually a governing law or a regime.

Architecture 138

Architecture System Authentication Security 138

SecureWorld News

DECEMBER 8, 2021

The Russian-linked group, dubbed "Nobelium" by Microsoft, has continued its hacking campaigns targeting business and government entities around the globe, according to new research from Mandiant. Abuse of multi-factor authentication leveraging 'push' notifications on smartphones.". Use of a new bespoke downloader we call CEELOADER.".

Authentication 73

Authentication Malware Research Groups 73

ForAllSecure

APRIL 21, 2023

However, hacking did not always involve computers or networks, and its history is much older than the internet era. There were no laws or regulations governing computer security, and many computer systems were poorly secured or not secured at all. In 1971, the first computer virus, known as the Creeper virus , was released.

Malware 75

Malware Internet Security Government 75

Phil Windley

OCTOBER 31, 2017

Andy Tobin has a great presentation that describes five problems of Internet identity. Our claim is that self-sovereign identity, and Sovrin in particular, solve these five problems: The Proximity Problem —The proximity problem is as old as the familiar cartoon with the caption "On the Internet, nobody knows you're a dog."

Internet 45

Internet Architecture System Data 45

ForAllSecure

MAY 17, 2023

And, as my guest will say later in this podcast, these virtual SOCs are like pen testing the internet. We can't just, you know, bust things up into small parts and say this is my world because again, internet is a pen test and we're all in this together. And we're also on the cusp of ChatGPTs on everyone's terms. Yeah, we're all good.

Internet 40

Internet Insurance Security Virtualization 40

Phil Windley

MAY 24, 2022

Summary: Building a better internet won't happen by chance or simply maximizing freedom. The Hundreds doesn't likely care if someone other than the original purchaser of an Adam Bomb NFT uses it to get a discount so long as they can authenticate it. That's because this is often a function of governance. How can we do that?

Internet 110

Internet Examples System Network 110

Phil Windley

SEPTEMBER 7, 2021

Summary: Fluid multi-pseudonymity perfectly describes the way we live our lives and the reality that identity systems must realize if we are to live authentically in the digital sphere. I frequently see calls for someone , usually a government, to solve the online identity problem by issuing everyone a permanent "identity."

Network 107

Network Government Authentication Examples 107

CTOvision

FEBRUARY 11, 2016

Don't think the government or anyone else will defend your technology. New action is called for to modernize government IT. Many of the antiques in government cannot be defended and should have been replaced long ago. The plan calls for a campaign to encourage people to use multi-factor authentication in everything.

Government 150

Government Information Security Small Business Authentication 150

Phil Windley

MARCH 1, 2022

Absolute digital privacy can be achieved by simply never using the Internet. Before the Web became a ubiquitous phenomenon, people primarily thought of privacy in terms of government intrusion. But the march of technological progress means that private companies probably have much more data about you than your government.

Authentication 59

Authentication Policies Internet Examples 59

CIO Business Intelligence

JULY 14, 2022

The proliferation of cyber threats has become so great that earlier this year the Australian government issued the recommendation that organisations “ urgently ” adopt an enhanced cyber security posture. As noted in a report by PwC , an effective security response still typically involves getting the basic best practices right.

Security 98

Security Conference Budget Case Study 98

SecureWorld News

JUNE 22, 2020

Says the Aussie government: "This activity is targeting Australian organisations across a range of sectors, including all levels of government, industry, political organisations, education, health, essential service providers, and operators of other critical infrastructure.". This is happening on a huge scale.

Government 57

Government Security Strategy Internet 57

The Verge

JUNE 11, 2021

Pretty much all internet security relies on this math to encrypt information or authenticate users in protocols such as Transport Layer Security. This is a particular concern for government agencies that create documents intended to remain classified for years. “We

Internet 131

Internet Security Research Google 131

SecureWorld News

AUGUST 21, 2020

Here's what Blindingcan has accomplished so far: "A threat group with a nexus to North Korea targeted government contractors early this year to gather intelligence surrounding key military and energy technologies. CISA refers to any malicious cyber activity from the North Korean government as Hidden Cobra.

Exercises 70

Exercises Malware Firewall Operating Systems 70

CTOvision

FEBRUARY 20, 2014

The Guidance Software Federal Summit is a thought leadership forum designed exclusively for federal managers and leaders to learn how Government and industry leaders are achieving endpoint visibility across their entire IT ecosystems. Government. Registration is free for Government attendees. Register Now! Space is Limited.

Software 257

Software Software Information Security Government 257