Page 602 - White Papers - bank information security

Sponsored by NIST

NIST Special Publication (SP) 800-56A, Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography

NIST Special Publication (SP) 800-56A, Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography, is now available . This document specifies key establishment schemes based on standards developed by the Accredited Standards Committee (ASC) X9, Inc.: ANS X9.42 (Agreement of...

Sponsored by NIST

DRAFT FIPS 186-3

Draft FIPS 186-3 is the proposed revision of FIPS 186-2. The draft defines methods for digital signature generation that can be used for the protection of messages, and for the verification and validation of those digital signatures. Three techniques are allowed: DSA, RSA and ECDSA. This draft includes requirements...

Sponsored by NIST

DRAFT Special Publication 800-89

Entities participating in the generation or verification of digital signatures depend on the authenticity of the process. This Recommendation specifies methods for obtaining the assurances necessary for valid digital signatures: assurance of domain parameter validity, assurance of public key validity, assurances...

Sponsored by NIST

NIST Interagency Report (NISTIR) 7290 Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation

The use of mobile handheld devices within the workplace is expanding rapidly. These devices are no longer viewed as coveted gadgets for early technology adopters, but have instead become indispensable tools that offer competitive business advantages for the mobile workforce. While these devices provide productivity...

Sponsored by NIST

Guidelines for Media Sanitization

Information systems capture, process, and store information using a wide variety of media. This information is located not only on the intended storage media but also on devices used to create, process, or transmit this information. This media may require special disposition in order to mitigate the risk of...

Sponsored by NIST

Biometric Data Specification for Personal Identity Verification

The Homeland Security Presidential Directive HSPD-12 called for new standards to be adopted governing the interoperable use of identity credentials to allow physical and logical access to Federal government locations and systems. The Personal Identity Verification (PIV) standard for Federal Employees and Contractors,...

Your Customers and Their Secrets

This paper discusses and analyzes the internet-based, password reset functionality provided by many organizations for their customers. The average application user is being forced to remember more and more complex passwords to accomplish their daily routines. The very nature of complex passwords, sometimes results in...

Document Security in Web Applications

Organizations publish information online including confidential data. Data is rendered in varied formats; it can vary from simple HTML pages to documents in Adobe's PDF or Microsoft's Word/Excel formats. Confidential data is restricted to a set of users who have to login and be authenticated on the website. A common...

The Security and Administrative Benefits of using X.509 PKI based Strong Authentication

Strong authentication based on X.509 PKI (Public Key Infrastructure) is available in a number of protocols and provides both security and administrative benefits and drawbacks. This paper looks at the security and administrative benefits (and drawbacks) of using strong authentication. This paper looks at generic...

Security Testing Demystified

This white paper identifies the products and architecture's needed to aid in the process of procuring the following: -Identifying *Possible* Attack Vectors -Reasearching and discovering system vulnerabilities -Exploitating found Vulnerabilities -Preparaing Test Cases -Compilating Final Security Testing...

Voluntary Guidelines for Consumer Confidence in Online Financial Services

This white paper discusses some actions financial institutions can take to make consumers more comfortable with online banking: · Put consumer education about security and fraud prevention in a prominent place on your institution’s website home page. · Establish a single point of contact within your...

BITS Consumer Confidence Toolkit: Data Security and Financial Services

INTRODUCTION This Consumer Confidence Toolkit provides information to support consumer confidence in the safety, soundness and security of financial services. Special attention is placed on online financial services transacted through the Internet. Data in support of the safety of online financial transactions are...

BITS Key Considerations for Global Background Screening Practices

I. OVERVIEW According to the August 2004 U.S. Secret Service and CERT® Coordination Center’s Insider Threat Study: Illicit Cyber Activity in the Banking and Finance Sector: … (The fact that) over one quarter of the insiders had a criminal record prior to their incidents underscores the importance of looking...

Reconciliation of Regulatory Overlap for the Management and Supervision of Operational Risk in Financial Institutions

New laws and regulations are frequently enacted in response to topical and systemic events. While laws may establish important regulatory compliance requirements, the evolution and convergence of overlapping laws that share common or at least similar intent can lead to the establishment of cumbersome and differing...

Malware - Future Trends

What are the driving forces behind the rise of malware? Who’s behind it, and what tactics do they use? How are vendors responding, and what should organizations, researchers, and end users keep in mind for the upcoming future? These and many other questions will be discussed in this article, combining security...

White Papers

NIST Special Publication (SP) 800-56A, Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography

DRAFT FIPS 186-3

DRAFT Special Publication 800-89

NIST Interagency Report (NISTIR) 7290 Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation

Guidelines for Media Sanitization

Biometric Data Specification for Personal Identity Verification

Your Customers and Their Secrets

Document Security in Web Applications

The Security and Administrative Benefits of using X.509 PKI based Strong Authentication

Security Testing Demystified

Voluntary Guidelines for Consumer Confidence in Online Financial Services

BITS Consumer Confidence Toolkit: Data Security and Financial Services

BITS Key Considerations for Global Background Screening Practices

Reconciliation of Regulatory Overlap for the Management and Supervision of Operational Risk in Financial Institutions

Malware - Future Trends

Around the Network

Who Will Take the Lead in Setting Healthcare AI Regulations?

Cyber Insurers Are Intensely Scrutinizing Healthcare Clients

Top 'Privacy by Design' Considerations for Medical Devices

Gaining Better Visibility Into Medical Devices, IoT, OT

Study: 92% of Healthcare Firms Hit by Cyberattacks This Year

Oswal: AI, Platformization Key to Network Security Evolution

Clinical Considerations When Recovering From Ransomware

Eliminating the Need for Stored Credentials in Healthcare

Court's Web Tracker Ruling: What HIPAA Entities Should Know

How Mega Attacks Are Spotlighting Critical 3rd-Party Risks