Removing assumptions about data integrity

Security of data is not only about encryption and protection – it starts from a basis of whether you’re secure in relying on the data in the first place. Because you know where you receive the data from, that doesn’t mean that that data is as per the original, complete and tamper-free. 

Frequently data is received indirectly, from data aggregators and vendors, from third parties, etc, and it’s therefore important to be able to check what data you receive against the data that its originator created.  Notarisation of digital data has become a requirement so that recipients of data can cross-check it electronically and immediately against the original – particularly where the data is to be used as the basis for contractual agreements and investment decisions. [Read more...]

A Matter of Trust

How should organisations prove that they can be trusted with sensitive data, and build a bond of trust with partners and stakeholders?  Terry Greer-King, UK MD for Check Point, looks at the issues

“That won’t happen to us, ’cause it’s always been a matter of trust.”  This line from Billy Joel’s 1986 hit single could easily describe the approach that many organisations have taken over the past five years to safeguarding the personal, confidential data that they hold. [Read more...]

The problem of search engine poisoning attacks

The problem of search engine poisoning attacks

We’re pleased to invite you to a WebEx we’ll be hosting on May 17th talking about search engine poisoning attacks. [Read more...]

Shadow Boxing: security and innovation

There is often tension between security, innovation, business drivers and business productivity. A challenge exists. Instead of the positive tension many businesses often create to ensure a balance that allows them to grow and profit from technology advances there is a negative tension. For example, this negative tension exists in the form of security policies that are usually aimed at reducing the risk profile of organisations. [Read more...]

How are Java attacks getting through?

Carl Leonard, Sr. Security Manager, Websense Security Labs

Were you aware that Java is increasingly being viewed as a security risk? Of course you were — recent high-profile attacks have firmly established the trend, so we’re not going to do yet another roundup here.

Instead, let’s drill in and try to understand the core problem. With so many vulnerabilities, it’s hard to keep browsers up to date with the latest patched versions — especially because Java is updated independently from the browser. How hard is it? We decided to check. [Read more...]