A Journal of Identity Managementhttp://idmjournal.com/Copyright 2007, the Virtual Quill With YubiKey and Halo GhostPorts, systems administrators can temporarily open up a server management port for designated administrators. http://www.digitalidnews.com/2012/02/03/yubico-and-cloudpassage-partner-for-cloud-server-authenticationhttp://www.digitalidnews.com/2012/02/03/yubico-and-cloudpassage-partner-for-cloud-server-authentication Fri, 03 Feb 2012 07:37:32 EDT The Shibboleth System is a standards based, open source software package, rapidly growing in popularity. It provides web-based single sign-on across or within organizational boundaries. http://www.digitaljournal.com/pr/550834http://www.digitaljournal.com/pr/550834 Tue, 17 Jan 2012 19:40:49 EDT The 11th annual technology conference, which is presented by Quest and Microsoft, will be held at the Marriott Marquis & Marina in San Diego, April 29-May 2. TEC offers world-class, 400-level training on Microsoft Identity and Access, Exchange Server, SharePoint, PowerShell, and Virtualization and User Workspace Management technologies for the most experienced IT pros in the world. http://www.marketwatch.com/story/quest-software-announces-speakers-for-the-experts-conference-2012-2012-01-17http://www.marketwatch.com/story/quest-software-announces-speakers-for-the-experts-conference-2012-2012-01-17 Tue, 17 Jan 2012 19:34:22 EDT The device uses an optical sensor to read financial transaction data from a Web browser, generating a unique electronic signature that validates each transaction, reducing threats such as Man-in-the-Browser (MitB) and Man-in-the-Middle (MitM), in which hackers hijack legitimate user identities during a transaction and redirect funds.http://www.net-security.org/secworld.php?id=12223http://www.net-security.org/secworld.php?id=12223 Tue, 17 Jan 2012 10:23:42 EDT House Bill H.R. 3523, called the Cyber Intelligence Sharing and Protection Act of 2011, would require the Director of National Intelligence to create a way for the government to share information about online threats with private companies. http://www.stanforddaily.com/2012/01/17/member-of-congress-outlines-proposed-online-security-law/http://www.stanforddaily.com/2012/01/17/member-of-congress-outlines-proposed-online-security-law/ Tue, 17 Jan 2012 07:03:43 EDT Password Tote is an online consumer password manager that assists in the storing of secure passwords. Password Tote eliminates the worry of losing or forgetting a login password for online services and all passwords are stored in one secure location. http://www.marketwatch.com/story/yubikey-supports-password-tote-for-increased-identity-protection-and-online-password-management-2012-01-17http://www.marketwatch.com/story/yubikey-supports-password-tote-for-increased-identity-protection-and-online-password-management-2012-01-17 Tue, 17 Jan 2012 06:12:28 EDT The combination of MaxMind's geolocation and minFraud fraud-risk scoring services and TeleSign Telephone Verification and PhoneID delivers a best-in-breed alliance for fighting against a wide variety of fraud.http://www.marketwatch.com/story/maxmind-and-telesign-partner-to-provide-best-in-class-multilayer-fraud-prevention-2012-01-17http://www.marketwatch.com/story/maxmind-and-telesign-partner-to-provide-best-in-class-multilayer-fraud-prevention-2012-01-17 Tue, 17 Jan 2012 06:11:32 EDT There appears to have been little research into why password security has remained so popular. It is. perhaps, hard to challenge the orthodoxy which is a replacement is just around the corner and soon users will no longer have to remember strings of letters, digits and symbols in order to access services.http://blogs.wsj.com/tech-europe/2012/01/17/why-password-security-lives-on/http://blogs.wsj.com/tech-europe/2012/01/17/why-password-security-lives-on/ Tue, 17 Jan 2012 06:09:57 EDT As cyber attacks become more complex and intelligent, and as we move towards an increasingly mobile society, two-factor authentication is no longer enough because sophisticated fraud simply leverages the authentication process.http://www.finextra.com/community/FullBlog.aspx?blogid=6142http://www.finextra.com/community/FullBlog.aspx?blogid=6142 Fri, 13 Jan 2012 12:34:13 EDT Paul Simmonds, a founding member of the Jericho Forum, which is now part of The Open Group, is calling for European organisations to get actively involved in providing input to the US-based National Strategy for Trusted Identities in Cyberspace (NSTIC), a project with the goal of protecting identity online.http://searchsecurity.techtarget.co.uk/news/2240113762/Jericho-founder-Get-involved-in-plan-for-protecting-identity-onlinehttp://searchsecurity.techtarget.co.uk/news/2240113762/Jericho-founder-Get-involved-in-plan-for-protecting-identity-online Fri, 13 Jan 2012 12:19:03 EDT New variant of malware used by advanced persistent threat (APT) actors out of China challenges DoD, other organizations' two-factor authenticationhttp://www.darkreading.com/authentication/167901072/security/attacks-breaches/232400288/sykipot-malware-now-steals-smart-card-credentials.htmlhttp://www.darkreading.com/authentication/167901072/security/attacks-breaches/232400288/sykipot-malware-now-steals-smart-card-credentials.html Fri, 13 Jan 2012 06:23:56 EDT Authentication, on the other hand, is the act of proving to the online service that someone is the owner of that account.http://www.darkreading.com/authentication/blog/232400235/identity-versus-authentication.htmlhttp://www.darkreading.com/authentication/blog/232400235/identity-versus-authentication.html Fri, 13 Jan 2012 06:22:06 EDT To give its customers added assurance around the new standards, CallCopy recently engaged Coalfire Systems, Inc. (Coalfire), a respected PCI Qualified Security Assessor (QSA) company, to conduct an independent technical assessment of its cc: Discover workforce optimization suite. Results of the audit are expected in early 2012. http://www.marketwatch.com/story/callcopy-helping-companies-comply-with-pci-dss-v20-standards-2012-01-12http://www.marketwatch.com/story/callcopy-helping-companies-comply-with-pci-dss-v20-standards-2012-01-12 Fri, 13 Jan 2012 06:20:22 EDT But will SCIM be accepted where SPML was not? I don't know, but I think there is a decent chance.http://idlogger.wordpress.com/2012/01/13/thoughts-on-scim/http://idlogger.wordpress.com/2012/01/13/thoughts-on-scim/ Thu, 12 Jan 2012 20:05:18 EDT Company Positioned as a Leader in the Identity and Access Governance Magic Quadranthttp://www.marketwatch.com/story/sailpoint-posts-100-annual-growth-and-market-momentum-in-2011-2012-01-12http://www.marketwatch.com/story/sailpoint-posts-100-annual-growth-and-market-momentum-in-2011-2012-01-12 Thu, 12 Jan 2012 11:19:54 EDT