Facebook
Twitter
LinkedIn
RSS
Archive for September, 2009
Thursday, September 24th, 2009
Protegrity CTO Ulf Mattsson in SC Magazine: Encryption is becoming more elaborate to ensure confidential business data is kept secret.
You can click here to read the full article.
Monday, September 21st, 2009
Effective September 23, providers of group health plans MUST notify employees of potential HIPAA privacy breaches.
As part of the February 2009 Stimulus Package, new notification rules were added under the Health Insurance Portability and Accountability Act, requiring health plan providers to notify employees, the Department of Health and Human Services, and possibly the media of certain “breaches” of “unsecured protected health information”.
Tuesday, September 15th, 2009
Format and Datatype Preserving Encryption
The Securosis blog mentions Protegrity as a vendor offering Format and Datatype Preserving Encryption. http://securosis.com/blog/format-and-datatype-preserving-encryption
Friday, September 11th, 2009
According to The 2009 Web Application Security Report from NTA Monitor one in four business web applications have at least one high-risk security issue.
NTA Monitor found that 27 percent of all those tested had a high-risk issue, comparing to 17 percent the previous year.
The industry with the highest number of high-risk vulnerabilities – those that could allow an attacker to gain network access – was services, which had an average of two high-risk flaws per test.
The most secure industries were utilities and legal, as they were the only ones to have no high-level risks.
NTA found that the most common data breach attacks against web application flaws were SQL injection, cross-site scripting and cross-request forgery.
SQL injection was the only data breach attack that was in the top three high-risk attacks from last year’s report.
Wednesday, September 2nd, 2009
Protegrity’s CTO Ulf Mattsson’s White Paper “PCI and Beyond – How to Secure Data in the Most Cost Effective Manner” was recently listed on SSRN’s Top Ten download list for LSN: Other Regulation of Information & Privacy Issues Involving Consumers.
You may view the abstract at the URL: http://papers.ssrn.com/abstract=1330466.