Research on Security and Identity Management (by Marco Casassa Mont) -

ENISA Cloud Computing Risk Assessment Report

ENISA has recently released three documents related to Cloud Computing, all of them available online: Cloud Computing Risk Assessment Cloud Computing Information Assurance Cloud Computing SME Perspective Survey Enjoy. --- Posted by Marco Casassa Mont...

Published 11-21-2009 2:35 AM by marcocasassamont

Filed under: risk management, Cloud computing, Enisa

On the T-Mobile Incident and Open Questions on Trading Personal Data Online

There has been an incident this week where employees of T-Mobile have been caught selling customer data. On one hand this has shown that there is a thriving market for this kind of data ... On the other hand, this has also highlighted "interesting...

Published 11-21-2009 2:22 AM by marcocasassamont

Filed under: data breach

Whitepaper – Avoid the 7 Most Common Mistakes of Compliance

Here is a recent whitepaper that might be of interest to the IAM and security community, " Avoiding the 7 Most Common Mistakes of Compliance " (registration is required to get a copy ...): "At the most basic level, there is no single standardized...

Published 11-21-2009 2:19 AM by marcocasassamont

Filed under: compliance management

W3C Workshop on Access Control Application Scenarios – Papers Available Online

The position papers submitted to the W3C Workshop on Access Control Application Scenarios (17/18 November 2009, Luxembourg) are now available online . A few interesting positions have been made by various authors: I am sure the debates at the workshop...

Published 11-17-2009 2:02 AM by marcocasassamont

Filed under: W3C Access Control Workshop

CfP Workshop – Security and Privacy of Pervasive Systems and Smart Devices

Please consider submitting a paper at the WISTP 2010 workshop focusing on security and privacy topics for pervasive systems and smart devices. The submission deadline is November, 10 th : "The impact of pervasive and smart devices on our daily lives...

Published 11-17-2009 1:59 AM by marcocasassamont

Filed under: CfP WISTP

Updated HPL Web Page with my R&D Work and Other Topics

I eventually found time to update my HP Labs personal web page , where I describe my current R&D work in the security and identity management, research activities. I received a few emails related to a recent post of mine (where I announced an extension...

Published 11-17-2009 1:57 AM by marcocasassamont

Filed under: web page

Security Trends Report by Microsoft and McAfee: Phishing Scams Relying More Heavily on Worms and Trojans

Based on a recent security trends report by Microsoft and MAfee , it looks like that social networks have been targeted with phishing scams and relying more heavily on worms and Trojans to attack computers. Rogue security software also remains a big issue...

Published 11-03-2009 2:04 AM by marcocasassamont

Filed under: phishing attacks

3rd PrivacyOS meeting

The 3 rd PrivacyOS meeting has taken place in Vienna, 26-27 October 2009. I attended, along with a few colleagues from HP Labs Bristol, the 3 rd PrivacyOS meeting, in Vienna. It has been a very interesting meeting, with presentations from various stakeholders...

Published 11-03-2009 2:00 AM by marcocasassamont

Filed under: PrivacyOS

Article - Malware is bound to hit smartphone devices as users do not consider security

Interesting article , by Dan Raywood (called "Malware is bound to hit smartphone devices as users do not consider security"): "Smartphone attacks are likely to increase, as users are encouraged to take as much care with their device as...

Published 11-03-2009 1:57 AM by marcocasassamont

Filed under: smartphones, malware

Update about TSB UK EnCoRe Project – Ensuring Consent and Revocation

The 5 th Quarter Summary of EnCoRe ( http://www.encore-project.info ) R&D activities in the space of Consent and Revocation management is now available online at: http://www.encore-project.info/press_archive/Q5%20summary.pdf In addition, a new "service"...

Published 11-03-2009 1:54 AM by marcocasassamont

Filed under: EnCoRe

Research on Security and Identity Management

The time has come to update the topic (and focus) of this blog. In the last few years my R&D work and research at HP Labs has been involving a variety of aspects, including security, identity management and privacy. Most of my posts have actually...

Published 10-10-2009 1:22 AM by marcocasassamont

Filed under: Privacy, identity management, security

New W3C PLING General Phone Call – 14 October 2009, 12:00 UTC

The next W3C Policy Language Interest Group (PLING) general meeting is going to happen on October, 14 th - 12:00 UTC. Topics to be discussed include: (1) Best practices for privacy awareness; (2) web policy language working group proposal. Please consider...

Published 10-10-2009 1:20 AM by marcocasassamont

Filed under: W3C PLING

Article – Phishing or not, leaked passwords show lazy habits

This article, called Phishing or not, leaked passwords show lazy habits , by Elinor Mills, is quite interesting. It is not a novelty the fact that there are bad practices when dealing with passwords - but it is also true that people are usually good at...

Published 10-10-2009 1:18 AM by marcocasassamont

Filed under: password phishing

3rd PrivacyOS Conference, Vienna, 25-27 October 2009

The Third PrivacyOS conference is going to take place in Vienna, 25-27 October 2009: http://www.amiando.com/3rdprivacyos.html "The third PrivacyOS Conference focuses on "rising awareness - functions and impact of data protection". Participants...

Published 09-29-2009 12:43 AM by marcocasassamont

Filed under: PrivacyOS

Workshop on Access Control (and Privacy) Application Scenarios

Please consider submitting a position paper at the W3C Workshop on Access Control (and Privacy) Application Scenarios, by October 23 rd : http://www.w3.org/2009/policy-ws/cfp.html "W3C invites people to participate in a Workshop on Access Control...

Published 09-29-2009 12:37 AM by marcocasassamont

Filed under: Privacy, access contol

Research on Security and Identity Management (by Marco Casassa Mont)

Syndication

Recent Posts

Tags

Blogroll

Archives