http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2015-11-18 09:05:43 - JW Secure Inc. Blog : The most successful organizations are built on a combination of great people and efficient processes Information technology teams are no exception the most effective are those that combine talent and technology in order to become a strategic asset to the business IT security is frequently seen as a tax on the business, even by the The post Systematically protecting the crown jewels of enterprise data appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/590370.shtmlhttp://www.secuobs.com/revue/news/590370.shtml Secuobs.com : 2015-11-01 09:24:34 - JW Secure Inc. Blog - Enterprise Security Investment in IT security is a requirement for every company that is in possession of valuable data Security is a moving target, and if you re not proactively tracking it, you will get hacked and your data will get stolen Evidence Data security is the most serious IT challenge in organizations Kaspersky the average The post The Weakest Link Enterprise Security, Consumer Security, and Privacy appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/588641.shtmlhttp://www.secuobs.com/revue/news/588641.shtml Secuobs.com : 2015-10-27 08:54:15 - JW Secure Inc. Blog - Failing to plan is planning to fail Your high-value assets need protection now Enabling business success is the ultimate aim of Enterprise IT security personnel They want to ensure the right data is available to the right people at the right time every time Use cases, authorization rules and security group management all play a part, The post How to protect high-value network assets appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/588054.shtmlhttp://www.secuobs.com/revue/news/588054.shtml Secuobs.com : 2015-10-22 10:05:21 - JW Secure Inc. Blog - 1 Introduction Please join me at the Cyber Security session in the Seattle Biz-Tech Summit this Saturday, 10 24 15, from 11 00am 12 30pm, in Room A at the Hyatt Regency Bellevue 2 Session Description We are constantly reminded of the critical importance that Cyber Security plays in our personal and professional lives From stolen credit card The post Cyber Security at Seattle Biz-Tech Summit 2015 appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/587598.shtmlhttp://www.secuobs.com/revue/news/587598.shtml Secuobs.com : 2015-08-18 00:42:03 - JW Secure Inc. Blog - Enterprise network credentials are like the keys to your house once someone has a copy, they can enter your space whenever they want The more valuable your property, the more motivated the bad guys are to get in Worse, sophisticated network intruders leave no trace Digital assets can be copied, malware can be installed and The post How to stop network credential theft appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/580491.shtmlhttp://www.secuobs.com/revue/news/580491.shtml Secuobs.com : 2015-06-01 22:23:52 - JW Secure Inc. Blog - Target Rich Environment Corporations with valuable intellectual property, utilities with critical infrastructure, and government entities such as national intelligence are all irresistible targets to independent and state-funded computer hackers Typical attacks start by attempting to compromise an Internet accessible device, such as a web or email server, or a remote user laptop Due to the The post Better Defense Against Enterprise Credential Theft appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/572693.shtmlhttp://www.secuobs.com/revue/news/572693.shtml Secuobs.com : 2015-06-01 22:23:52 - JW Secure Inc. Blog - Derived credentials are part of our everyday lives For example, if you have a US driver s license, you presented a birth certificate in order to obtain it What about Apple Pay When used for a purchase, it identifies you to Apple, provides an association with your credit card, and allows Apple to pay the merchant The post The Right Way to do Derived Credentials appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/572692.shtmlhttp://www.secuobs.com/revue/news/572692.shtml Secuobs.com : 2015-04-14 03:02:53 - JW Secure Inc. Blog - Security is a perennial challenge in Internet of Things IOT scenarios Suppose a sensor network has been deployed to a factory that manufactures cutting-edge electronics In the interest of protecting trade secrets and business reputation, it s critical that the sensors including motion detectors, video cameras, and quality and industrial control related devices be The post High-Integrity Internet-Scale Device Authentication appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/567203.shtmlhttp://www.secuobs.com/revue/news/567203.shtml Secuobs.com : 2015-03-19 09:40:29 - JW Secure Inc. Blog - It is incumbent upon IT professionals to keep their skills current This is tough because, while there are basic principles that don t change, the shelf life of technology-specific skills gets shorter each year The good news is that most conferences are designed specifically to inform attendees what s new For example, the RSA 2015 security conference The post Security Trends and Guerilla Tactics for Conference Attendees in 2015 appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/564021.shtmlhttp://www.secuobs.com/revue/news/564021.shtml Secuobs.com : 2015-01-28 23:33:50 - JW Secure Inc. Blog - We all have secrets we keep on our mobile devices passwords, customer data, strategic plans And yet high-profile cyber-attacks Home Depot, NSA, Sony, Target continuously remind us of the risks posed to enterprise systems by sophisticated adversaries, trusted insiders, insecure hardware, and single-factor authentication Those publicized security incidents notwithstanding, there is a body The post Data Security and the Internet of Things appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/557038.shtmlhttp://www.secuobs.com/revue/news/557038.shtml Secuobs.com : 2015-01-28 22:58:04 - JW Secure Inc. Blog - Two trends are in conflict in the enterprise, endpoint protection and bring your own device BYOD to work Mobile Device Management MDM seeks to fill the gap, but current solutions fail in that they cannot assure the integrity of the mobile device This means that the identity of the mobile user and the protection of The post Hardware integrity for Mobile Device Management appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/557031.shtmlhttp://www.secuobs.com/revue/news/557031.shtml Secuobs.com : 2015-01-27 19:54:04 - JW Secure Inc. Blog - This post describes how the JW Secure StrongNet Secure Admin solution enables your business by protecting high-privilege network accounts, even on unmanaged mobile computers IT Security is a Business Enabler The bring your own device trend allows employees to work when they want, how they want, and where they want This flexibility increases the speed The post Security as a Business Enabler StrongNet Secure Admin appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/556811.shtmlhttp://www.secuobs.com/revue/news/556811.shtml Secuobs.com : 2014-12-19 02:38:40 - JW Secure Inc. Blog - Network security requires both top-down and bottom-up thinking Read more about securing network endpoints in the 25th edition of the JW Secure Informer The post Endpoint security the challenge is part of the reward appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/550968.shtmlhttp://www.secuobs.com/revue/news/550968.shtml Secuobs.com : 2014-12-19 02:38:40 - JW Secure Inc. Blog - Big thank you to CARTES America 2014 for hosting my presentation, Using NSA Tradecraft to Protect Data on Mobile Devices And who doesn t love visiting Las Vegas before it gets really hot All of the slide decks from CARTES America 2014 are available here The post From CARTES America 2014 Using NSA Tradecraft to Protect Data on Mobile Devices appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/550967.shtmlhttp://www.secuobs.com/revue/news/550967.shtml Secuobs.com : 2014-12-19 02:38:40 - JW Secure Inc. Blog - Due to the BYOD and cloud computing trends, as well as to the presence of insider threats and sophisticated overseas adversaries, the enterprise network perimeter is a myth That is, you can t depend on an internet firewall to protect the critical data that defines a business What can you do Effective data protection requires layers The post Data protection requires layers create a Stronghold appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/550966.shtmlhttp://www.secuobs.com/revue/news/550966.shtml Secuobs.com : 2014-12-19 02:38:40 - JW Secure Inc. Blog - Pass the Hash PTH is one of the most potent exploits in the hacker arsenal for gaining system administrator privilege and compromising an entire enterprise network Why Because PTH can be successful simply by compromising a single machine PTH works by extracting credential information from the computer s memory Any credential present on the computer is The post Mitigating the Pass the Hash Exploit on Windows appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/550965.shtmlhttp://www.secuobs.com/revue/news/550965.shtml Secuobs.com : 2014-12-19 02:38:40 - JW Secure Inc. Blog - One of the bigger network security defense methodology trends over the past couple of years, Lockheed Martin s Cyber Kill Chain model is useful for analyzing and mitigating Advanced Persistent Threat APT attacks in the enterprise The sequential nature of the chain model expresses how the attack itself is vulnerable to disruption, and hence provides avenues The post Cyber Kill Chain and The Four Pillars of Endpoint Security appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/550964.shtmlhttp://www.secuobs.com/revue/news/550964.shtml Secuobs.com : 2014-12-19 02:38:40 - JW Secure Inc. Blog - There are three principles to securing online payment transactions Protect user payment account identity Securely express user intent Detect fraud The next sections summarize considerations for addressing each principle Protect User Payment Account Identity Magnetic stripe cards aren t cutting it from a security perspective see the recent incidents involving Target, Home Depot, and PF Chang s The post Securing Online Payments appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/550963.shtmlhttp://www.secuobs.com/revue/news/550963.shtml Secuobs.com : 2014-12-19 02:38:40 - JW Secure Inc. Blog - Many thanks to the organizers of the Cloud Developers Summit and Expo 2014 last month in Austin The conference was enjoyable and educational And it s always a huge bonus when conference content is made availability electronically for posterity To that end, the full archive is here My specific sessions The Secret Life of Mobile Data The post Session recordings from Cloud Developers Summit appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/550962.shtmlhttp://www.secuobs.com/revue/news/550962.shtml Secuobs.com : 2014-12-19 02:38:40 - JW Secure Inc. Blog - By now, you ve heard about cloud computing Your email server lives in some rural datacenter Your IT operations team has had a shrinking budget for 10 years straight You are living and breathing cloud computing You ve probably heard about the internet of things IoT buzz trend, too Your refrigerator should be able to order milk from The post Cloud Computing and Internet of Things what s actually new appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/550961.shtmlhttp://www.secuobs.com/revue/news/550961.shtml Secuobs.com : 2014-12-19 02:38:40 - JW Secure Inc. Blog - When it comes to planning and executing projects to improve enterprise security, I find that IT security practitioners are frequently focusing on the wrong things First, don t focus on computers and network routers when you should be focused on the data that traverses them For example, are you putting the same amount of effort into The post Enterprise security is all about people appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/550960.shtmlhttp://www.secuobs.com/revue/news/550960.shtml Secuobs.com : 2014-12-19 02:38:40 - JW Secure Inc. Blog - Many thanks to the organizers of Seattle Technical Forum, and to the sponsor of last night s Side by Side of Cloud Computing IV event in Bellevue, WA, UnifyCloud in particular, kudos to host Marc Pinotti for keeping the event on schedule The main theme that emerged from the sessions is that, while enterprise IT and The post Accelerating enterprise cloud adoption, safely appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/550959.shtmlhttp://www.secuobs.com/revue/news/550959.shtml Secuobs.com : 2014-01-14 21:07:38 - JW Secure Inc. Blog - The secret to protecting big data isn t to put it under a big tarp Or to guard it with a big dog No The secret to protecting big data is encryption And you don t even need big encryption Just regular encryption will do it Information security is all about the basics access control, authorization, confidentiality The post How do you protect big data appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/491579.shtmlhttp://www.secuobs.com/revue/news/491579.shtml Secuobs.com : 2014-01-14 01:07:05 - JW Secure Inc. Blog - My Microsoft MVP-ness got renewed for the sixth consecutive year I ve been keeping busy Check out my public MVP profile it lists the technical community-oriented activities that have made me worthy The post I m Enterprise Security MVP for 2014 appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/491375.shtmlhttp://www.secuobs.com/revue/news/491375.shtml Secuobs.com : 2014-01-10 21:06:16 - JW Secure Inc. Blog - Our rock star technical team has just grown to include fellow ex-MSFT colleague Jeff Sigman Jeff started at Microsoft in 1997 and spent most of his 16 year career in the Windows division focused on networking and security His work can be seen in every major Windows release since Windows 2000 and included software development The post Please welcome Jeff Sigman to JW Secure appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/490928.shtmlhttp://www.secuobs.com/revue/news/490928.shtml Secuobs.com : 2013-11-15 23:36:25 - JW Secure Inc. Blog - Thank you very much to the NYU-Poly THREADS conference organizers for hosting the DARPA Cyber Fast Track presentations yesterday It was an honor to be among the CFT awardees, and an honor to be on the THREADS list If you missed my presentation and or want to review the slide deck, it s below Secure Endpoints, Secure The post Secure Endpoints, Secure Network at NYU-Poly THREADS Conference appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/481327.shtmlhttp://www.secuobs.com/revue/news/481327.shtml Secuobs.com : 2013-11-15 22:30:46 - JW Secure Inc. Blog - Usability and security are one of the classic tradeoffs in software design it s rarely possible to optimize both But just like a fader on a mixing board, there s an ideal balance You just have to take the time to listen and find it Want to learn more about how to dial in the usability and The post Usability and threat modeling two sides of the same coin appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/481321.shtmlhttp://www.secuobs.com/revue/news/481321.shtml Secuobs.com : 2013-10-16 20:15:14 - JW Secure Inc. Blog - I ve written before about the importance of protecting data on the move in scenarios such as a traveling executive Imagine the potential damage to reputation and future revenue if a laptop is left in the back of a taxi, and the hard drive is filled with acquisition plans, product source code, emails to the board The post Protect your data and keep the money flowing appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/475142.shtmlhttp://www.secuobs.com/revue/news/475142.shtml Secuobs.com : 2013-10-07 18:17:38 - JW Secure Inc. Blog - The sample source code download link at the beginning of this MSDN article, Building Plug-ins for Network Access Protection, unfortunately became broken at some point along the way You can find the source code here Registry SHV SHV reference code for NAP Disclaimer that code is not being maintained and has not been updated since the The post Building Plug-ins for Network Access Protection appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/473041.shtmlhttp://www.secuobs.com/revue/news/473041.shtml Secuobs.com : 2013-09-27 01:18:42 - JW Secure Inc. Blog - It s easy to forget that, when we talk about authenticating users on the internet, the two ends of the connection are rarely humans Instead, it s one computer talking to another And while your bank may trust its own servers, why should it trust that the user s laptop is operating correctly on the user s behalf After The post Learning to trust machines, if only briefly appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/471103.shtmlhttp://www.secuobs.com/revue/news/471103.shtml Secuobs.com : 2013-09-27 00:17:44 - JW Secure Inc. Blog - Google has been doing it for years, and now companies ranging from 37 Signals to Microsoft are incorporating it into their cloud hosted services phone-based user authentication Static passwords the kind everybody uses to check their email, log into Facebook, etc are the weak link in online account security, and replacing them with The post Strong Authentication Using Your Mobile Phone appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/471090.shtmlhttp://www.secuobs.com/revue/news/471090.shtml Secuobs.com : 2013-09-13 18:30:13 - JW Secure Inc. Blog - We ve redesigned the JW Secure home page to focus on our four primary consulting practice areas Application Infrastructure Security Systems Engineering Development Data Protection Network Access Identity The service capsules on the new page are the four boxes below the main hero The new design has more vertical elements than the old The post Check out the new service capsules design for http wwwjwsecurecom appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/468522.shtmlhttp://www.secuobs.com/revue/news/468522.shtml Secuobs.com : 2013-09-13 18:30:13 - JW Secure Inc. Blog - Congratulations to our fellow members at the Trusted Computing Group for a successful Trusted Computing Conference this week in Orlando I presented Using NSA Tradecraft to Protect Data on Mobile Devices, and I understand from the conference organizers that the video recording and slides will be posted Hope to see you next year, same time, The post Using NSA Tradecraft to Protect Data on Mobile Devices appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/468521.shtmlhttp://www.secuobs.com/revue/news/468521.shtml Secuobs.com : 2013-08-02 16:38:34 - JW Secure Inc. Blog - Data loss prevention DLP and digital rights management DRM scenarios require a hardware root of trust and a secure time source in order to be effective Otherwise, DLP and DRM solutions are easily circumvented, and the data they protect are readily compromised Until recently, such assurance has been prohibitively expensive to achieve on consumer-class hardware The post Trusted Tamperproof Time on Mobile Devices appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/460828.shtmlhttp://www.secuobs.com/revue/news/460828.shtml Secuobs.com : 2013-08-02 16:38:34 - JW Secure Inc. Blog - The TPM 20 security chip on most recent mobile devices supports measurement-bound cryptographic keys Despite the fact that effective data loss prevention DLP and digital rights management DRM depend on a hardware root of trust, and on the issuance of limited user credentials and content licenses, this feature of the TPM remains relatively untapped We The post Secure Time-Bound Data Protection Keys appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/460827.shtmlhttp://www.secuobs.com/revue/news/460827.shtml Secuobs.com : 2013-07-24 02:16:09 - JW Secure Inc. Blog - Learn more about layered security, defense in depth, and The Case For Attribute-Based Authorization, in the July 2013 edition of the JW Secure Informer newsletter The post Layered security using attributes to spot bad actors appeared first on JW Secure, Inc http://www.secuobs.com/revue/news/458722.shtmlhttp://www.secuobs.com/revue/news/458722.shtml Secuobs.com : 2013-06-27 23:48:23 - JW Secure Inc. Blog - Introduction A major component of cloud computing strategy is the support of service-connected devices in a variety of scenarios, including entertainment eg the Apple App Store and Netflix and productivity eg Microsoft Office 365 The intersection between elastic cloud computing services and widely available, sophisticated smartphones and tablets is the origin of the bring-your-own-device BYOD http://www.secuobs.com/revue/news/454165.shtmlhttp://www.secuobs.com/revue/news/454165.shtml Secuobs.com : 2013-06-27 23:48:23 - JW Secure Inc. Blog - As businesses expand their mobile and cloud services, the increased complexity of identity management represents both development costs and security risks Each new service costs developer time and requires secure management of that application s identity concepts Redundantly implementing identity management strategies also requires excessive maintenance, and each instance potentially introduces flaws which lead to security http://www.secuobs.com/revue/news/454164.shtmlhttp://www.secuobs.com/revue/news/454164.shtml Secuobs.com : 2013-06-25 22:57:41 - JW Secure Inc. Blog - Oh, yes I m speaking at DefCon again The topic this time is Protecting Data with Short-Lived Encryption Keys and Hardware Root of Trust And as an added bonus, unlike last year, it looks I won t be speaking opposite General Alexander, head of the NSA, in the next room My new talk builds on the previous http://www.secuobs.com/revue/news/453636.shtmlhttp://www.secuobs.com/revue/news/453636.shtml