July 2007 - Research on Security and Identity Management (by Marco Casassa Mont) -

TrustBus 2007 – 4th International Conference on Trust, Privacy & Security in Digital Business

The program and registration form for the 4 th International Conference on Trust, Privacy & Security in Digital Business, TrustBus 2007 , are now available online: “The 4th International Conference on Trust, Privacy and Security in Digital Business...

Published 07-31-2007 5:54 PM by marcocasassamont

Web 2.0/Ajax “Submission Throttling” and Privacy Concerns

“Submission Throttling” (e.g. see here ) is an “ Ajax Pattern” commonly used in state-of-the-art web applications: in a nutshell, data is buffered at the user/client side (web browser) and then sent to the server (e.g. remote web site) at predetermined...

Published 07-30-2007 8:22 PM by marcocasassamont

Digital ID World 2007 Conference

The 6 th Digital ID World 2007 Conference is going to take place in San Francisco, September, 24-26. I attended this conference in the past and I found it very useful not only in terms of presentations, but also in terms of networking and opportunity...

Published 07-27-2007 6:37 PM by marcocasassamont

Next Steps: Identity Governance Framework (IGF) and Open Liberty …

A few days ago I wrote about a new Identity Governance Framework (IGF) document available online, “ Id Governance – Privacy and Access Policy Market Requirements ”, which describes use cases and requirements. A recent article by Jeremy Kirk, titled “...

Published 07-26-2007 3:25 PM by marcocasassamont

R&D Opportunity: Identity 2.0 and its Impact on the Enterprise …

Identity 2.0 is currently associated to a broad wave of Web 2.0 initiatives, involving collaborative networking, content mashups, individual content provision, etc. In this context, Identity 2.0 includes technologies and approaches such as OpenId , InfoCard...

Published 07-25-2007 5:12 PM by marcocasassamont

New Identity Governance Framework (IGF) Document - Available Online …

A new Identity Governance Framework document, titled “Id Governance – Privacy and Access Policy Market Requirements”, is now publicly accessible online, in the Liberty Alliance portal : “This document provides the key business actors, use cases, and requirements...

Published 07-24-2007 7:09 PM by marcocasassamont

Experiment: Blogs and Role of Authentication on Comments …

After getting some feedback (including Paul Madsen’s comment ), I decided to run an experiment to explore how much “authentication” plays a role when submitting comments to blogs – in particular to my blog. This blog on “ Research on Identity Management...

Published 07-24-2007 3:22 PM by marcocasassamont

Search Engines and Privacy …

Robert McMillan has just published an article highlighting Microsoft’s move to support anonymity and privacy in the search engine space: “Microsoft is joining Ask.com in offering Web surfers a way to use its search engines anonymously, and the two companies...

Published 07-23-2007 8:39 AM by marcocasassamont

Identity Thefts? It is Matter of Opinion …

After reading Roger A. Grimes’ post, “ Identity Thefts? What Identity Thefts? ”, I had a look at the mentioned US Government Accountability Office (GAO) report, called “ Personal Information: Data Breaches Are Frequent, but Evidence of Resulting Identity...

Published 07-20-2007 12:48 PM by marcocasassamont

Worries of IT & Compliance Practitioners about Privacy and Data Security

Phil Hunt (Oracle) has created awareness (in a recent post ) of the availability of a report on “What Worries IT & Compliance Practitioners Most About Privacy and Data Security? ” : "A recent study, commissioned by Oracle and conducted by privacy...

Published 07-19-2007 12:51 PM by marcocasassamont

Report: 90 percent of companies fail compliance to data-handling regulations

A recent InfoWord article (by Matt Hines) titled “Report: 90 percent of companies fail compliance” provides an interesting anticipation of the findings of an IT Policy Compliance Group ’s report, to be published on July 18: “The consortium of IT compliance...

Published 07-17-2007 5:46 PM by marcocasassamont

ISSE 2007: Information Security Solutions Europe

I’d like to bring to your attention the ISSE 2007 conference , 25-27 September 2007, Warsaw, Poland. Its program is now available online. ISSE (Information Security Solutions Europe) is an independent, European, interdisciplinary security conference and...

Published 07-15-2007 9:10 PM by marcocasassamont

Authorization in-a-Box

The authorization process is a critical aspect in distributed/federated environment. For example, in federated identity management scenarios or outsourcing scenarios “distributed” decisions and authorizations are made by multiple parties involved in an...

Published 07-13-2007 8:47 PM by marcocasassamont

Federated Access Management for SOA

A technical report has recently been published by two HP Labs colleagues (Jun Li and Alan Karp) on “ Zebra Copy: A Reference Implementation of Federated Access Management ”. It might be of interest to the Identity Management community. Jun and Alan discuss...

Published 07-12-2007 3:34 PM by marcocasassamont

Identity Management and the Human Factor

This last case of “identity misuse/theft” (source: Fidelity employee steals 2.3 million consumer records ) illustrates yet again how the “human factor” plays a key role in all aspects involving identity and privacy management – and how the key issues...

Published 07-04-2007 6:43 PM by marcocasassamont

July 2007 - Research on Security and Identity Management (by Marco Casassa Mont)

Syndication

Recent Posts

Tags

Blogroll

Archives