Dennis Fisher

SAML Apps Before Their Time?

Customer demand for single-sign-on security for B2B sites is pushing vendors to deliver applications months ahead of specification approval—even at the risk of creating weak products now and a weaker spec later. The product push comes even as many in the security and e-commerce industry look to SAML (Security Assertion Markup Language) to provide the […]

ISS Raises Security Platform

After more than three years of development, Internet Security Systems Inc. this week will deliver an ambitious security platform and product road map that it said will deliver the first truly integrated security solution for all aspects of a companys network. Known as the Real- Secure Protection System, the architecture and solution set is designed […]

PKI Woes Take Toll On Leading Firms

As two leaders in PKI scramble to refocus their businesses in the hopes of a steadier revenue stream, corporate users are again wondering if and when the promise of killer public-key infrastructure applications is ever going to be realized. Baltimore Technologies Inc. and Entrust Technologies plc. are planning to move much more heavily into the […]

Building Dams Against DoS Flooding

In the aftermath of the distributed denial-of-service attacks against several high-profile sites last year, dozens of vendors rushed into the vacuum that was the anti-DDoS software market and proclaimed they were working on products that will protect customers against these attacks. Now, more than a year later, some of these vendors are finally preparing to […]

Worms Come Under Attack

When the ILoveYou virus swept through corporate networks around the world last May, it took everyone by surprise—especially anti-virus software developers. As the one-year anniversary of the Love Bugs attack passed last week, McAfee Corp., Trend Micro Inc. and other anti-virus vendors were working on new technologies and strategies that they hope will reduce the […]

AES Is Ready to Assume Crypto Lead

The Advanced Encryption Standard is still more than two months away from government approval, but some vendors and cryptographers are already pouring over the spec, calling attention to its promise as well as its pitfalls. While some tout AES as a breakthrough that will make encryption-dependent software and hardware faster and more practical for enterprise […]

Security Bugs Microsoft

It seems Microsoft Corp. cant shake its problems with security. Having formally announced earlier this month that it had rededicated itself to building security into its products, Microsoft last week was dealt an embarrassing blow when a vulnerability was discovered in its first stand-alone security product. Although the Redmond, Wash., company quickly issued a patch […]

Chips Speed Secure Web Data

As e-businesses work to move more enterprise applications and services to the Web, a major hurdle to be cleared remains the painfully slow transmission rate of secure data. SSL (Secure Sockets Layer) traffic is as much as 50 times slower than typical HTTP traffic, which has led many site administrators to make the Faustian choice […]

In Through Out Door

PKI-based security is heading out the door—literally. If the early years of public-key infrastructure security have been stymied by complex deployments and little interest from corporate IT departments, then the future may belong to vendors such as Baltimore Technologies Inc. and ValiCert Inc. The companies are each set to announce managed security offerings that promise […]

Measuring the Health of Security

Securify Inc. this week will launch a security service that will be custom-designed to fit the unique needs of each customer. As part of an effort to broaden its offerings beyond simple consulting services, the Mountain View, Calif., company is rolling out its SecurVantage service, which is designed to give customers a quantifiable picture of […]