Page 14 - White Papers in Next-Generation Technologies & Secure Development

Sponsored by Sourcefire Network Security

Key Benefits of Application White-Listing and How to Achieve Them

Application white-listing is the number one strategy in Australia's Defence Signals Directorate (DSD) list of 35 Strategies to Mitigate Targeted Cyber Intrusions; it is deemed an essential control. Application white-listing gives administrators visibility and control over applications that are allowed to communicate...

5 Steps to Managing Third Party Application Security Risk

Application vulnerabilities are real and hackers are targeting industries that offer the best avenues for illicit monetary gains. At the same time, economic, competitive and time-to-market pressures are driving enterprises to use third-party commercial off-the-shelf (COTS), open source and outsourced code as part of...

Web Application Security Trends Report

Attacks against many financial institutions -- including one of the largest in history against Heartland -- continue to prevail throughout the second half of 2008. Many political hacktivism attacks result in countries defacing one another's Websites with the usual suspect countries including India, Pakistan, Russia,...

Securing Retail POS Systems & Meeting PCI Compliance

There's something new in the air that retailers, especially the directors of information technology (IT) operations at the store, are starting to research and implement called "application whitelisting". This technology is being presented as the panacea for Payment Card Industry (PCI) compliance, and is being welcomed...

The Application Security Imperative for Financial Institutions

For financial institutions, a dicey economic landscape can translate into a lot more than a credit crunch and wildly fluctuating stocks. Desperate times stimulate criminal activity. And that threat calls for tighter security - not just to satisfy regulators, but also to instill consumer confidence. Exploits within...

Application Security Survey Results: Executive Summary

In a survey of more than 100 banking/security leaders, 57% of respondents say they are somewhat or very confident in their own applications, and 90% say application security is somewhat or a significant part of their overall information security programs. However, when it comes to applications developed or managed...

OCC Bulletin 2008-16: A Blueprint for Compliance

The recent issuance of the OCC Bulletin 2008-16 alerted financial institutions of the risks posed by insecure software and recommended steps banks should take to reduce risk and protect their critical data. Historically, banks have lacked an effective and cost-efficient manner to analyze the security of software. ...

The Case for Business Software Assurance

In recent years, the hacking community has shifted its efforts toward a new frontier: the application layer. With most companies spending thousands, if not millions, of dollars securing the perimeter with network firewalls, intrusion prevent systems, and other devices, hackers have realized the lowest hanging fruit...

PCI Compliance for IBM System i (AS/400)

The launch of the Payment Card Industry Data Security Standard (PCI DSS) has helped expose serious security shortcomings. The IBM System i (AS/400) presents its own unique set of challenges when it comes to PCI compliance. Read this white paper to learn the following: How the standard relates to the AS/400 How to...

Online Banking: The Evolution of Application Security

According to Gartner, 2006 was the worst year for application hacking. But not for the largest US online banks - cyber attacks against applications actually dropped. Banks, often the biggest target of cyber attacks, have set an example for responsible security strategies. According to the Javelin Strategy and...

Winning the Battle Against Insider Threat

Ten Steps for Safeguarding Critical Data PCI and GLBA require that you guard critical customer and cardholder data. But to manage threats successfully while meeting these compliance challenges, organizations need a security strategy that can successfully do battle with inside as well as outside threats. Now, there is...

PCI Compliance: Identifying Application Vulnerabilities

New Application Security Regulations: Build Compliance In History has shown: regulation follows breaches. With over 215 million data records exposed since 2005, the PCI Data Security Standard (PCI DSS) is fast becoming the standard of data security due care. This is effective guidance not only for financial services...

Stop Identity Theft at the Source: Build Security In

Since January 2005, over 167 million credit card numbers have been exposed due to security breaches. Many of the most damaging breaches were the result of hackers exploiting flaws in software. With the PCI Security Standard Council's regulations recently expanding to include specific mandates to assess software for...