Security Renaissance

Promoting the art and mindset of information security

Ren - ais - sance:

(lowercase) a renewal of life, vigor, interest, etc.; rebirth; revival: a moral renaissance

Archive for February, 2007

New resource added

Saturday, February 24th, 2007

I’ve just added a new paper to the resources section of my site.  The paper is titled Cryptography in a very small nutshell; it is a very brief introduction into the concepts and types of crypto.
As of today, the resources section now has the following papers.

Analyzing the Paris Hilton T-Mobile hack
The emerging mobile malware threat (long […]

Read the rest of this entry »

The psychology of risk perception

Saturday, February 24th, 2007

I guess that I’m on a Bruce Schneier kick this week.  My last post was related to an article that he wrote about New York City’s upcoming ability to accept camera phone images and videos in their 911 centers.
Today I’ve been reading and pondering another article by Bruce about how psychology plays into people’s perception […]

Read the rest of this entry »

Multimedia 911 security concerns

Tuesday, February 20th, 2007

I just posted at my Computerworld blog about how New York City is in the process of enabling their 911 systems to receive images and video from cell phone callers.  I think that this is a huge leap forward – but I am circumspect regarding the security of any proprietary systems involved in enabling this […]

Read the rest of this entry »

That thing you do – keystroke dynamics

Monday, February 19th, 2007

For years, security professionals have known and been saying that passwords themselves are inadequate — thus the need for two-factor (or stronger) authentication. However, multifactor authentication implementations are typically known to be costly (e.g. issuing tokens or biometric readers). Further, many companies report user push-back: some end-users reject or express disdain for biometric […]

Read the rest of this entry »

Another VA hard drive lost

Tuesday, February 6th, 2007

Ugh….  Less than a year after the reported loss of a laptop containing the data of 26.5 veterans, the VA looses another laptop.  Oh yeah – and in the intervening months they developed processes and procedures to ensure that such data is encrypted; yet this report mentions that there were upwards of 20,000 unencrypted records.
Here […]

Read the rest of this entry »