Security Management

Surprise: Study Finds Security Not a Problem for Cloud

John Hawley — Thu, 23 May 2013 16:21:00 GMT

Companies experienced in cloud computing say it is proving to be even more successful than originally anticipated. That is, according to a newly published report, TechInsights Report: Cloud Succeeds. Now What?, based on research by Luth Research and Vanson Bourne. The study talked to 542 senior IT leaders at companies in North American and Europe with at least $500 million in revenue which had...

Bring Your Own Identity: the Rise of the User

Henk van der Heijden — Tue, 14 May 2013 20:01:00 GMT

Social media is fast becoming the identity mechanism of choice to log into popular sites and company information. Looking to find the right music on Spotify? Want to connect with the world’s professionals on LinkedIn? You can now simply log in via your Facebook account. The UK Government may even soon allow citizens to use their social media identity to access public services safely and securely...

Supporting Industry Standards

Chris Wraight — Tue, 14 May 2013 18:07:00 GMT

On May 7, Andras Cser of Forrester Research, Inc. posted a thought-provoking blog entry entitled “XACML is Dead” which postulated that there wasn’t any future for XACML. At CA Technologies we have long supported a broad range of industry standards such as LDAP, X.509, WS-Federation, SAML, WS-Security, REST, SPML as well as more recent standards like OpenID, OpenID Connect and OAuth, thereby...

Identity-centric Security

Sumner Blount — Mon, 13 May 2013 14:20:00 GMT

The “good old days” are gone forever. Those were the days when IT environments were more predictable and easier to control. The user population and their access patterns were more easily defined. Stick a firewall in front of key systems, create some controls around who can access what, and you’re done. The world is far different now. The headlong march towards the cloud has made the...

The Changing Face of Cyber-Attacks

Russell Miller — Fri, 10 May 2013 17:51:00 GMT

It is tempting to think about cyber-attacks as an ever-present, but unchanging threat. To the contrary, attacker profiles have shifted, and new goals and sources of motivation have fundamentally altered the nature of the threat landscape. The trends driving this shift include: The militarization of cyber-attacks. Network penetrations to cause damage and steal intellectual property are now...