Home > Security/Privacy

Security/Privacy

Payment Standard for Web Apps Goes Live

7/3/2008

A new payment card industry (PCI) standard for Web application firewalls and source code went into effect July 1. PCI Industry Data Security standard 6.6 gives merchants a framework to ensure that the point-of-sale information uploaded into browser-based applications is sound from "top to bottom," the organization's literature said.

U Texas San Antonio To Deploy Wireless Outdoor Emergency Notifications

7/3/2008

The University of Texas at San Antonio has selected Cooper Notification's Wireless Audio Visual Emergency System (WAVES) Mass Notification System (MNS) for its outdoor campus emergency notification system. Through WAVES campus public safety departments can broadcast targeted voice alerts via "Giant Voice" to students, faculty, staff, and visitors.

Microsoft's XP SP3 Patch Fixes Antivirus Glitch

7/2/2008

Microsoft issued a hotfix for Windows XP Service Pack 3 last week that it says "could resolve" a Windows registry corruption problem associated with third-party security software. The problem was first discovered just over a month ago, and it notably affected users of Symantec's Norton Antivirus suite of products.

Trapeze Wireless Management System Adds Support for Access Control Plugins

7/2/2008

Trapeze Networks has introduced SmartPass 7.0, a new version of access management software for its wireless networking products. The new release supports plugins that enable IT administrators to control wireless network access, perform location-based authentication, do RADIUS-based monitoring and reporting, and grant guest access. The company has also published application programming interfaces for SmartPass so an organization can write its own plugins.

U Tennessee Chattanooga Upgrades Wireless Network with Aruba

7/2/2008

The University of Tennessee is deploying Aruba Networks' wireless LAN equipment at its Chattanooga campus. The 9,000-student campus is replacing a single channel network that wouldn't work reliably owing to interference and security issues to move to Aruba's Adaptive Radio Management (ARM) and identity-based security technology.

University of Alabama Health System Prints Up Secure Prescription Pads

7/1/2008

When the University of Alabama at Birmingham Health System needed to comply with a federal law to make it harder to create fake prescriptions, it was a Xerox press and specialized Xerox paper that provided the antidote.

City College of San Francisco To Deploy Emergency Notification System

7/1/2008

City College of San Francisco (CCSF) said it will deploy the AlertU emergency alert notification system from Waterfall Mobile, becoming the 22nd district in the California Community Colleges System to implement the service.

Radiant Logic Releases New Version of Virtual Directory Server

7/1/2008

Radiant Logic has rolled out RadiantOne Virtual Directory Server (VDS) 5.0, a set of tools for managing identity integration for Web site single signon and federation.

Delivering Slices of Network Securely at USC

6/27/2008

When Richard Nelson's IT team at the University of Southern California's Information Science's Institute (ISI) decided to make an internally developed research administration application available to other groups on campus, it faced a unique security challenge: how to provide access to the program itself without also handing over broader access to other resources on its network.

New Vendor Consortium Pushes for Digital Information Card

6/27/2008

A new vendor consortium focused on promoting industry-wide adoption of online digital identities has been established by Microsoft, Google, Oracle, PayPal, Novell, Equifax, and nine other companies. Its founders say the Information Card Foundation (ICF) hopes to unite industry efforts and vendor products to create Internet-enabled digital identities using information cards.

VMware Finds Home on Campus in Disaster Recovery Planning

6/26/2008

Three colleges--Bowdoin College in Brunswick, Maine, Loyola Marymount University in Los Angeles, and Sheffield Hallam University in the United Kingdom--have gone public with their use of virtualization software from VMware to manage growth and prepare for disaster recovery.

Vista SP1 'Update' Released for OS Reliability

6/26/2008

Three months after the initial release of Windows Vista Service Pack 1, Microsoft has issued what it calls a "reliability update" to sweep out any glitches that may pop up in a complex stack of applications on the new OS version.

Microsoft Advisory Targets SQL Injection Attacks

6/25/2008

Microsoft Tuesday issued a new security advisory after the discovery of "a recent escalation in a class of attacks" targeting Web sites. The exploits are associated with Microsoft's Active Server Pages (ASP) and the ASP.NET 2.0 Framework, with SQL Server used as an entry vector for so-called SQL injection attacks.

Mobile Security To Surface in Sybase iAnywhere Suite

6/25/2008

Sybase announced that by the end of June its mobile device management suite will be enhanced with antivirus and firewall technology. These new security components will appear in the company's iAnywhere Afaria management and security software. Combined with Afaria's mobile device authentication and encryption technology, the enhanced software is intended to provide protection for Windows Mobile, Symbian, and Blackberry mobile devices from viruses, data compromise, hackers and the effects of mobile device loss or theft.

Southeast Missouri State Says Former Employee Took Student Data

6/25/2008

Southeast Missouri State University in Cape Girardeau, MO has notified about 800 of its students that a former university employee recently was found in possession of computer data files containing their names and Social Security numbers.

Universities Deploy Procera Hardware to Prioritize Network Traffic

6/25/2008

Korea University in Seoul and Swinburne University of Technology in Melbourne, Australia are both using Procera's PacketLogic PL10000 hardware to gain visibility into network application traffic and control over non-academic use of network bandwidth.

Dartmouth Launches 2-Week Crash Course in Security

6/24/2008

Dartmouth's cyber security research and education arm, the Institute for Security Technology Studies (ISTS), recently launched a two-week introduction to computer security in a program called SISMAT, or Secure Information Systems Mentoring and Training.

Survey: Many Microsoft Patches Are Going Uninstalled

6/24/2008

The results of an online test conducted by U.K. anti-virus firm Sophos found that more often than not, PC users don't install Microsoft's monthly patches.

New Bluetooth Patch Fixes XP Security Hole

6/24/2008

Microsoft on Thursday announced that it was reissuing a "critical" patch relating to Bluetooth wireless technology that was released last week as part of its June update cycle. The patch addresses how Bluetooth interoperates with Windows components and applications.

P2P Redux: New Twists and Turns

6/13/2008

At the same time that RIAA has been bombarding campuses with P2P filesharing notices, questions are being raised about the underlying legality of the methods being used by the RIAA.

U South Carolina PC Theft Hits 7,000

6/13/2008

The University of South Carolina has reported a burglary that included the theft of a desktop computer containing personal information on 7,000 faculty, staff and students. According to pages posted on the schools' Web site and an article in The State, a South Carolina daily newspaper, the theft occurred in the Moore School of Business over Memorial Day weekend and involved a PC belonging to a deputy dean.

Korea's Pohang U Accelerates and Secures SAP and Web Apps with F5 System

6/13/2008

Korea's Pohang University of Science and Technology (POSTECH) will be optimizing its application delivery infrastructure by implementing the BIG-IP Local Traffic Manager (LTM) with Application Security Manager from F5 Networks. The installation will focus on upgrading availability and delivery of SAP applications, Web mail and the school's Web pages.

New Absolute Software Release Secures and Manages Handhelds

6/13/2008

Absolute Software has released Computrace Mobile, an application to help organizations manage and secure handheld devices within their mobile computer population. IT administrators can install Computrace Mobile on supported handheld devices, enabling them to delete sensitive data remotely from lost or stolen devices.

Dartmouth Research Program To Test Security on Campus Wireless Networks

6/12/2008

A team of Dartmouth researchers is preparing to launch a project that examines the campus wireless computer traffic in an effort to learn how the network is used and how to best maintain its security. The project is called the Dartmouth Internet Security Testbed, or DIST.

Developing the Right Alert Notification Strategy

6/11/2008

Two noted security experts examine the characteristics of an effective campus mass notification system.