For enterprises moving more business and customer data to the cloud, investigating and selecting an online storage solution can be a challenging task. A primary concern is the level of data security offered by the sites being considered. While the theme holds true across all of the major providers (Box, DropBox, SkyDrive), for the purpose of illustration I'll focus on DropBox since it is arguably the most popular site boasting over 100 million users. Here is where some of the concerns begin; DropBox experienced a major security breach in July 2012, specifically involving user passwords. In response to the attack, DropBox attempted to improve password security by implementing two-factor authentication. But just last month though, a pair of researchers released a paper claiming they had reverse-engineered the DropBox application, providing details for how hackers c... (more)

Information Security Strategy

Security Track at Cloud Expo Have you ever Googled "information security strategy“? Try it yourself and see the results. What you get is bunch of mixed-up terminology, most of it does not (should not) fit into what information security strategy really is (or should be). Major misconception is this – information strategy is risk treatment (mitigation) plan. In some way it is true, but let’s consider some major limitations with that approach. According to wiki, „strategy“ is „a plan of action designed to achieve a particular goal.“ So you have a business strategy, which is a plan of action designed to achieve business goals. You have IT (development) strategy, which is a plan of action designed to achieve IT goals, that support achievement of business goals (or more precisely – that are aligned to business goals – strategy).  It should be common sense that therefore ... (more)

ArcSight Publishes Open Standard Designed to Improve the Interoperability of Security and Compliance Systems

CUPERTINO, CA -- (MARKET WIRE) -- 08/22/06 -- ArcSight, Inc., a global leader in Enterprise Security Management (ESM) software, today announced the release of the Common Event Format (CEF), an open log management standard that improves the interoperability of security-related information from different security and network devices and applications. CEF is based on ArcSight's expertise from building more than 230 connectors across 30 different security and network technology categories and is the first log management standard developed and optimized to support such a broad range of device types. CEF enables technology companies and customers to use a common event log format so that data can be easily collected and aggregated for analysis by an enterprise security management system. "With CEF and the ArcSight CEF connector, we can add new devices and applications to ... (more)

Info Security Products Guide Awards SPI Dynamics, Inc. Its 'Hot Companies' Recognition for 2007

ATLANTA, Jan. 31 /PRNewswire/ -- S.P.I. Dynamics, Inc., the leading provider of web application security software and services, is pleased to announce that for the second consecutive year the company has received Hot Company status from Info Security Products Guide, the world's leading publication on security-related products and technologies. SPI Dynamics is the only web application security company to appear on the list two years in a row. Selected from an industry analysis of more than 500 prominent info security vendors around the world, this prestigious honor comes to SPI Dynamics based upon a stern selection criteria of 4Ps, namely Products, People, Performance and Potential behind the company's growing success. The Hot Companies selection also helps raise the bar significantly for the industry to provide end-users with effective and deployable protective solut... (more)

Vulnerability Advisory: McAfee Inc. Solutions Protect Against 15 Newly Disclosed Microsoft Windows Vulnerabilities

SANTA CLARA, Calif., June 12 /PRNewswire-FirstCall/ -- McAfee Inc. , announced that it provides coverage for the 15 security vulnerabilities disclosed by Microsoft Corporation today. These vulnerabilities have been reviewed by McAfee(R) Avert(R) Labs, and based on their findings, McAfee recommends that users confirm the Microsoft product versioning outlined in the bulletins and update as recommended by Microsoft and McAfee. This includes deploying solutions to ensure protection against the vulnerabilities outlined in this advisory. "Today's Microsoft patches underline the risk of surfing the Web unprotected," said Dave Marcus, security research and communications manager, McAfee Avert Labs. "Many of the vulnerabilities addressed by the fixes could be exploited if a Windows user simply visits a malicious Web site -- a favorite attack method among cybercriminals." M... (more)

Document Security Systems and Trebuchet Capital Partners Enter into Comprehensive Agreement Related to European Patent Litigation Initiatives

Document Security Systems, Inc. (AMEX: DMC), a leader in patented protection against counterfeiting, unauthorized copying, scanning and photo imaging, and Trebuchet Capital Partners, LLC announced today that they have entered into a comprehensive agreement whereby Trebuchet will fund and manage Document Security Systems’ previously reported European patent validity and infringement lawsuits against the European Central Bank (“ECB”) and other governmental and private sector entities. Trebuchet Capital Partners will provide significant financial and management resources to oversee all such matters in Europe for Document Security Systems. In addition, Trebuchet has the authority to prosecute and resolve on behalf of Document Security Systems any existing and future challenges to the validity of the disputed patent and related infringement and damages considerations. ... (more)

The Top 250 Players in the Cloud Computing Ecosystem

In the run-up to the next Cloud Expo, 7th Cloud Expo (November 1–4, 2010) being held at the Santa Clara Convention Center in Silicon Valley, it's time to give my earlier list a complete overhaul. Here, accordingly, is an expanded list of the most active players in the Cloud Ecosystem. I have increased it from the 'mere' 150 I identified back in January of this year, to 250, testimony – as if any were needed! – to the fierce and continuing growth of the "Elastic IT" paradigm throughout the world of enterprise computing. Editorial note: The words in quotation marks used to describe the various services and solutions in this round-up are in every case taken from the Web sites of the companies themselves. Omissions to this Top 250 list should be sent to me via Twitter (twitter.com/jg21) and I will endeavor to include them in any future revision of this newly expanded rou... (more)

Cloud Expo New York Call for Papers Now Open

Early Bird Savings Cloud Expo Cloud computing is a game changer. The cloud is disrupting traditional software and hardware business models by disrupting how IT service gets delivered. Entrepreneurial opportunities abound as this classic disruptive technology begins to proliferate, so it is no surprise that SYS-CON's industry-leading International Cloud Expo is going from strength to strength. The 5th International Cloud Expo, to be held April 19-21, 2010, at the Jacob Javits Convention Center in New York, NY, announces that its Call for Papers is fast approaching. Topics on which submission are welcome include all aspects of providing or using massively scalable IT-related capabilities as a service using Internet technologies (see suggested examples below). Help plant your flag in the fast-expanding business opportunity that is The Cloud: submit your speaking propos... (more)

Cloud Expo 2011 East To Attract 10,000 Delegates and 200 Exhibitors

SYS-CON Events announced today that the 8th International Cloud Expo will take place June 6-9, 2011, in New York City. The International Cloud Computing Conference & Expo series is the world's leading Cloud-focused event and is held three times a year, in New York, Silicon Valley and in Europe. Over 600 corporate sponsors and 10,000 industry professionals have participated in Cloud Computing Expo since its inception, more than all other Cloud-related events put together. Cloud Computing Expo 2011 East Call for Papers Deadline November 30, 2010 - SUBMIT YOUR SPEAKING PROPOSAL TODAY! The four-day event will offer a rich array of sessions led by exceptional speakers about the business and technical value of cloud computing with more than 150 sponsors and exhibitors and over 5,000 estimated delegates from well over 48 different countries. Explore Cloud Expo Sponsorship &... (more)

The Top 100 Bloggers on Cloud Computing

Ever since I first published here my tentative list of Top 50 Bloggers on Cloud Computing it became clear that an expansion would be needed before too long. Thanks to community feedback via my Twitter account (http://twitter.com/jg21) here goes - just three months before Cloud Expo Silicon Valley (November 7-10) - with an expanded roster, listed as before in alphabetical order since I am making no attempt at this stage to rank the various blogs, merely to map - and celebrate - their existence. Dustin Amrhein | "A View from the Clouds" Dave Asprey | "Cloudy Words" Ian Bergin | "Clouded Issues" Randy Bias | "Cloudscaling" Rick Blaisdell | "Rickscloud" Steve Bobrowski | "The Cloud View" Rene Buest | www.CloudUser.de Larry Carvalho | "Robust Cloud" Andrew M. Chapman | "MemorableURL.com" Sam Charrington | "Cloud Pulse" Colin Clark | "Cloud Event Processing" Peter Coffee | cloudb... (more)

Most Powerful Voices in Security

The security community has a growing number of influential and important people, especially as the industry rises to meet the need to address more advanced security threats, such as targeted attacks. But how does a company in the security industry truly identify the influential people? And then once identified, how does one use influential voices to help promote their brand? In this study, we answer the first question - how to identify the most powerful voices in your industry, focusing on the security space, and as part of this we provide you a list of people to follow for the best, most up to date information, and who have the loudest voices to help help carry some of your key messages. In a future study, we will discuss how to further exploit that knowledge to market your brand. As executives in a fast-changing and social world, many of us struggle with the abil... (more)