October 2007 - Research on Security and Identity Management (by Marco Casassa Mont) -

New ENISA Position Paper: Security Issues and Recommendations for Online Social Networks

ENISA has recently released a position paper, called “ Security Issues and Recommendations for Online Social Networks ” (available online, here ) – Editor: Giles Hogben (ENISA): “This paper aims to provide a useful introduction to security issues in the...

Published 10-30-2007 1:21 AM by marcocasassamont

2012: A Day in the Life of John Webber

How digital-personae, identity management and web 2.0 will impact, influence and reshape people lives and organisations during the next 5 years? What is going to be “hot” in 2012? Difficult questions … A few colleagues of mine and I tried to explore future...

Published 10-25-2007 5:44 PM by marcocasassamont

Part II: CIMIP to Release Landmark Study on Identify Theft

As anticipated in my previous post, “ CIMIP to Release Landmark Study on Identify Theft ”, The CIMIP report, called “Identity Fraud Trends and Patterns: Building a Data-Based Foundation for Proactive Enforcement”, has been released. It can be downloaded...

Published 10-23-2007 12:50 PM by marcocasassamont

CIMIP to Release Landmark Study on Identify Theft

This could be of interest to the Identity Management Community. A recent article written by Amanda Damiano (“ CMIP to Release Landmark Study ”) reveals that: “On Monday (Oct. 22), Utica College’s Center for Identity Management and Information Protection...

Published 10-21-2007 11:55 PM by marcocasassamont

On the Joy of Having Multiple (Digital) Personae …

Having multiple “digital personae” (i.e. identity profiles that provide a different “view” about an individual, depending on the context, service, location, etc.) is undoubtedly useful. Different concerns, roles, interest and priorities can be conveyed...

Published 10-19-2007 8:22 PM by marcocasassamont

Making a case for the “Identity Leak” Service …

A recent article by Tom Bowers, called “Smart security testing on the cheap” , makes a few good points: “Most executives in a company are focused on building on the company's strengths. The chief information security officer, however, must look through...

Published 10-17-2007 8:53 PM by marcocasassamont

On the “Identity Oracle” and Improper Disclosures

I have been following with great interest the thread of discussions about the business concept of “Identity Oracle” and related posts by Bob Blakley , Kim Cameron ( here and here ), Jeff Bohren and Phil Hunt . I wondered for a while about business models...

Published 10-15-2007 8:41 PM by marcocasassamont

Call for Papers: IEEE Workshop Policy 2008 (2-4 June 2008, NY)

The call for papers for Policy 2008 is now available online: “POLICY 2008 is the 9th in a series of successful workshops, which since 1999 have provided a forum for discussion and collaboration between researchers, developers, and users of policy-based...

Published 10-15-2007 2:23 AM by marcocasassamont

The Open Group: Whitepaper on “Information Security Strategy” - Version 1.0

The Open Group has announced that their Information Security Strategy white paper is now published on The Open Group's online bookstore (a free PDF version is available on the Web) . It is about a “Framework for Information-Centric Security Governance...

Published 10-12-2007 8:30 PM by marcocasassamont

Part III - PLING: the W3C Policy Languages Interest Group

I have been asked by a few people what a new group member should discuss once involved in the W3C Policy Languages Interest Group (PLING) . I am sure that the discussions of this interest group and priorities will evolve and adapt over time, also based...

Published 10-10-2007 8:01 PM by marcocasassamont

Part II - Announcing PLING: the W3C Policy Languages Interest Group

In a previous post , I announced the creation of the W3C Policy Languages Interest Group (PLING) and briefly discussed the scope and mission of this group. As a first step, I would like to invite people, interested in discussions on policies, policy interoperability...

Published 10-10-2007 12:40 AM by marcocasassamont

Call for Papers: 23rd International Information Security Conference – SEC 2008

The Call for Papers for SEC 2008 (Milan, Italy – September, 8-10, 2008), is now available online: “The conference seeks submissions from academia, industry, and government presenting novel research on all theoretical and practical aspects of computer...

Published 10-09-2007 1:06 AM by marcocasassamont

Announcing PLING: the W3C Policy Languages Interest Group

I am proud to announce the creation of the W3C Policy Languages Interest Group (PLING) . Roberto Iannella (Research Scientist, NICTA) and I are going to be the co-Chairs. Thomas Roessler and Rigo Wenning (W3C) are the initial Team Contacts: “The Policy...

Published 10-05-2007 12:13 AM by marcocasassamont

Part II: Privacy Management in Enterprises? It is a matter of Enforcement and Automation …

I find James McGovern’s feedback always useful and relevant to trigger further thoughts. This is particularly true for his last post (see the “Links for 2007-10-01” part), related to a recent post of mine (on “Privacy Management in Enterprises? It is...

Published 10-03-2007 8:59 PM by marcocasassamont

Introducing a “Privacy Week” in Enterprises?

Marc Groman, Chief Privacy Officer for the (US) Federal Trade Commission, makes the case for having Privacy Weeks (see this article ): “Annual computer security and privacy awareness training for all employees is a good start, but it is just the beginning...

Published 10-02-2007 9:49 PM by marcocasassamont

October 2007 - Research on Security and Identity Management (by Marco Casassa Mont)

Syndication

Recent Posts

Tags

Blogroll

Archives