password

2014: A tipping point for password authentication

With advances in research on new token-based and biometric identification systems, it's time for the government to bid adieu to the common password.

chess

Cyberthreats for 2014: Not just the usual suspects

Public-sector cybersecurity experts predict that threats will not change dramatically in 2014 but will seek new platforms, including bring your own cloud, the Internet of Things and wearable computing.

Cyber Flag

Cyber Flag exercises sharpen DOD cyber operations and defense

Cyber pros from across the military hone their skills against a realistic adversary on a closed network in an 11-day U.S. Cyber Command exercise.

network security

Firms offer single path to securing cloud and physical networks

VMware and Palo Alto Networks offer integrated platform to unify network security across both physical and virtual cloud enterprises.

cryptography

NTRU crypto software available to open-source community

Security Innovation says offering its public key cryptography for use in open-source community would head off a looming ‘cyrptopocalypse’ caused by limited choice of encryption algorithms.

approved

Symantec gets FISMA certification for shared service products

Two of Symantec's public key infrastructure products receive approval for use by federal agencies and contractors.

letters

Why salted hash is as good for passwords as for breakfast

Encrypted passwords can be vulnerable because a decryption key must be available to the authentication server; hashed passwords cannot be decrypted and must be guessed by an attacker, which can be made impractical.

plant

DLA using botanical DNA to prevent tech counterfeiting

The Defense Logistics Agency is using botanical DNA marking technology to battle a rise in counterfeit electronic parts and devices.

Stratus

Secure, compact PC stack arranges to meet government needs

The multi-client Stratus includes three PCs and a remote controlled KVM to deliver security and convenience to government users who need to operate multiple PCs.

GPS

The serious side of GPS, where timing is everything

Although most widely known as a feature in consumer products, GPS timing and positioning is used in much of the nation's critical infrastructure, from managing air traffic to time-stamping financial transactions.

secure cloud

Is FedRAMP working? It better.

It's the only security standardization game in town for feds, and it will mature. Meanwhile, IBM gets FedRAMP stamp of approval.

shared services

Lack of awareness slows cloud shared services, providers say

In launching shared services, agencies find ways to build awareness of their offerings and to overcome misunderstanding about the cloud.

Topic Resources

  • GameChanger: Microsegmentation

    In less than a decade, more than 87 million records with sensitive or private information have been exposed due to cyber-incidents on federal networks alone. Increasingly, organizations are beginning to realize that perimeter-based security just isn’t enough anymore. Download to learn how for many data centers, the solution is microsegmentation.

  • Stepping Up the Battle Against Advanced Threats

    Cyber-attackers continuously develop sophisticated tactics and evasion techniques to bypass the latest protection methods, requiring the security industry to find a different approach to malware protection. Read this whitepaper to learn where the traditional cybersecurity measures fall short and how your agency can adopt a new approach to defend against advanced threats.

  • The Rising Threat of Enterprise Cybercrime

    Cybercriminals are leveraging vulnerabilities of the Internet, browsers, operating systems, and applications to secretly and proficiently gain access to information assets. Compromising employee endpoints with malware has become the preferred method; a far simpler path into the network than a direct network attack. Agencies need to recognize and address this growing danger.