In the world of information security, we often see statements such as ‘secured by 128-bit AES’ or ‘protected by 2048-bit authentication’. We are used to people asking about the strength of the cryptographic algorithms deployed in a security solution. Algorithms such as the AES, RSA and ECC have a proven track record of being difficult to break. They are successfully deployed in protocols that protect on a daily basis our identity and the integrity and confidentiality of our data. Consider as examples the use of SSL or TLS when you buy a book at Amazon or when you connect to your bank account to transfer a sum of money. Or the use of IKE and IPsec when you connect your laptop to the company network to check on your email and read documents stored on the company network.
With today’s newest technology, tools and scalable infrastructure, filmmakers can now bring interactive storytelling to a mass audience. There are many ways of doing that, one of them being the MOSAIC by HBO and Steven Soderbergh.
Here is the latest infographic from Inside Secure. It highlights the importance of secure mobile apps in the future. Payments are steadily getting more and more into mobile. Therefore secure yet usable solutions are needed to develop the technology and keep accounts away from hackers' best efforts.
How To Secure your IoT Product: Ron Keidar (Inside Secure) gives a presentation at IoT DevCon 2017, describing a simplified process of securing an IoT device. Starting from known and new trends in IoT threats, he breaks down security into its elements, and assembles them into a sample solution.
America’s National Institute for Standards and Technology (NIST) advised the abandonment of SMS-based two-factor authentication already in July 2016. According to NIST, companies that implement new systems should consider alternative authenticators, because of the risk that SMS messages or voice calls may be intercepted or redirected.
On July 1st 2016, the eIDAS Regulation went into effect, aiming to enable mutual recognition and acceptance of electronic identification schemes across EU borders. European Commission was dissatisfied with its predecessor, the E-signature Directive (1999). eIDAS was set out to give consistency to electronic signature regulations in the EU.