Page 465 - White Papers - bank information security

Optimizing Exchange for Business Continuity

Unplanned messaging downtime is costly to productivity, the bottom line and your reputation. Find out how to take a proactive approach to Exchange messaging availability with this Quest solutions brief. You'll learn strategies to optimize the health and availability of your Exchange environment and ensure business...

Data Activity Auditing for SOX: An Auditor

As the Sarbanes Oxley (SOX) compliance challenge continues for financial services organizations, automated data auditing has become a priority. But how can you design data auditing systems and processes if you’re not sure what auditors are looking? Or what controls you need in place to satisfy requirements or how to...

Combating the Insider Threat

The growing awareness of the insider threat, and the recognition that security breaches by internal, trusted users are at least as risky as malicious outsiders, is pushing organizations to take action. Fueled by regulatory requirements, the market for various security solutions that can help detect and mitigate risks...

Protecting Customers Beyond Compliance Deadlines

Learn how you can protect your entire online user base without compromising the bottom line. So your financial institution has met the compliance guidance to provide stronger authentication for customer data and transactions. Now what? That is only the tip of the iceberg in deploying a long-term security...

Guide to GLBA Risk Management Compliance

This guide focuses on GLBA's digital security requirements as it pertains to network security audits and vulnerability management. GLBA's security regulations are in place to assure the confidentiality and privacy of financial information electronically collected, maintained, used, or transmitted – especially when...

Why Phishing Works

To build systems shielding users from fraudulent (or phishing) websites, designers need to know which attack strategies work and why. This paper provides the first empirical evidence about which malicious strategies are successful at deceiving general users. We first analyzed a large set of captured phishing attacks...

VeriSign Identity Protection for FFIEC Compliance

Learn how to protect your consumers' digital identities. Comply with FFIEC guidelines. Manage your reputational risk. Solidify your approach to consumer authentication. Learn more about VeriSign(r) Identity Protection Services. Get the white paper from VeriSign now!

Embedded Security: Trusted Platform Module Technology Comes of Age

With hundreds of millions of electronic transactions taking place daily, businesses and organizations have a strong incentive to protect the integrity of the data exchanged in this manner, and to positively ensure the identities of those involved in the transactions. This has led to an industry-wide quest for better,...

Sponsored by thawte

The Value of Authentication

One of the biggest problems facing your Internet business today is the thorny issue of trust and security. The vast majority of consumers are concerned about the safety of their credit card and personal details. People simply don't trust the Web, fearing that their transactions might not be safe. Not only are...

Sponsored by thawte

Securing Your Online Data Transfer With SSL

Secure Socket Layer (SSL) is a protocol developed by Netscape in 1996 which quickly became the method of choice for securing data transmissions across the Internet. SSL is an integral part of most web browsers and web servers and makes use of the public-and-private key encryption system developed by RSA. In order...

Sponsored by thawte

Securing Your Apache Web Server With a thawte Digital Certificate

In this guide you will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. We will also touch on the role of...

Sponsored by thawte

The Starter PKI Program

thawte's Starter Public Key Infrastructure (PKI) Program enables companies that require multiple security certificates to better manage their certificate needs without the red tape usually associated with this process. This program will benefit organizations by helping to improve IT and business processes through...

NIST Special Publication (SP) 800-56A, Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography

NIST Special Publication (SP) 800-56A, Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography, is now available . This document specifies key establishment schemes based on standards developed by the Accredited Standards Committee (ASC) X9, Inc.: ANS X9.42 (Agreement of...

DRAFT FIPS 186-3

Draft FIPS 186-3 is the proposed revision of FIPS 186-2. The draft defines methods for digital signature generation that can be used for the protection of messages, and for the verification and validation of those digital signatures. Three techniques are allowed: DSA, RSA and ECDSA. This draft includes requirements...

DRAFT Special Publication 800-89

Entities participating in the generation or verification of digital signatures depend on the authenticity of the process. This Recommendation specifies methods for obtaining the assurances necessary for valid digital signatures: assurance of domain parameter validity, assurance of public key validity, assurances...