InformationWeek: The Business Value of Technology

InformationWeek: The Business Value of Technology
e2 Conference & Expo - Boston 2013

Informationweek Influencer

adam shostack

adam shostack (@adamshostack)

Twitter Bio:
Working to reduce bad security outcomes. Representing myself here on Twitter.
Location:
(Location not provided)
Website:
http://www.emergentchaos.com

adam shostack's
Network
Virus Bulletin DataLossDB Rob Lewis Dave Piscitello David Harley Bev Robb Ed Bellis Rich Mogull Andrew Jaquith Gal Shpantzer Brian Pennington SocialMediaSecurity Ben Tomhave Stephen Foskett Dave Marcus grecs Chris Gates David Chartier Ben Jackson Raf SecurityBuzz Dave Whitelegg CiscoLive Andrew Waite Patrik Runald Dept. of Technology Kyle Maxwell DEFCON Web Security News Let's Talk Security David Iftach Ian Amit EvilFingers CRN Buzz SophosLabs Andrew Storms Jeff Pettorino Ars Technica adam shostack securitypro2009 RSnake Jeremiah Grossman MC Petermann James Lyne 0x410x410 Security4all Sarah Schacht Mark Headd Ryan Naraine regsecurity Theresa Payton Sam Bowne SafeNet Avram Marius (d3v1l) Jack Daniel Yuri Diogenes Chris Wysopal Christophe Veltsos Nick Selby CoreSecurity Webroot Kaspersky Lab McAfee Cisco Collaboration

adam shostack's Selections From the Web

REDMOND, Wash., and OVERLAND PARK, Kan. — Oct. 4, 2012 — Microsoft Corp. and PhoneFactor Inc. today announced that Microsoft has acquired PhoneFactor, a recognized leader in multifactor authentication (MFA) solutions.“The acquisition of PhoneFactor will help Microsoft bring effective and easy-to-use multifactor authentication to our cloud services and on-premises applications,” said Bharat Shah, corporate vice president, Server and Tools Division for Microsoft. “In addition, PhoneFactor’s solutions will help Microsoft customers, partners and developers enhance the security of almost any authentication scenario.” Founded in 2001, PhoneFactor is

There is a widening gulf between application developers and security decision makers inside the enterprise, and it’s starting to cost companies serious money. Sure there’s been lots of talk about the need for better static and dynamic web application testing tools and the need for a formalized security methodology integrated into software development lifecycles [SDL], but to date it’s all been talk.Web applications are often a simple point of entry for attackers to get at enterprise data, yet security largely remains an afterthought for developers who face enormous deadline pressure to get features built in and applications out the door.“No one

Health scare: Much hospital equipment uses software that can be vulnerable to viruses. PR Newswire Computerized hospital equipment is increasingly vulnerable to malware infections, according to participants in a recent government panel. These infections can clog patient-monitoring equipment and other software systems, at times rendering the devices temporarily inoperable.While no injuries have been reported, the malware problem at hospitals is clearly rising nationwide, says Kevin Fu, a leading expert on medical-device security and a computer scientist at the University of Michigan and the University of Massachusetts, Amherst,

The phrase "you're doing it wrong" is a common refrain in the security community these days as people wander around in various states of disillusionment with the technology and processes that have led to what many perceive as a systemic failure. But that refrain usually is not followed by any useful discussion of what's going wrong or what can be done about it. To researcher Claudio Guarnieri, one of the major problems is obvious: we're completely backward in the way we prioritize protection.On any given day, the headlines are full of dire warnings about new zero-days, another bug discovered in Android or a new flaw in a major database. Inside

Get InformationWeek Daily

Don't miss each day's hottest technology news, sent directly to your inbox, including occasional breaking news alerts.

Sign up for the InformationWeek Daily email newsletter

*Required field

Privacy Statement



Upcoming Events

This Week's Issue

Special Issue

Current Government Issue

In this issue:
  • The Government CIO 25: These influential and accomplished government IT leaders are finding ways to be cost efficient and still innovate.
  • Rethink Video Surveillance: It's not just about networked cameras anymore. New technology provides analytics, automation, facial recognition, real-time alerts and situational-awareness capabilities.
  • Read the Current Issue

Related Whitepapers

Related Reports






Video