Sun Microsystems plans to open-source its Web site authentication and single sign-on technology. Eric Leach, director of product management at Sun, said the Santa Clara, Calif.-based company will open-source the technology through the Open Source Web Single Sign-On, or OpenSSO project. That effort includes technology related to authentication, single domain, single sign-on, Web agents and J2EE agents, he said. . The identity management technology will be released under Sun's Common Developer and Distributed License (CDDL) program, under which Sun will help the developer community determine which innovations will continue to be developed, Leach said. Sun also will be responsible for testing the technology, he said. The link for this article located at CRN is no longer available. . The identity management technology will be released under Sun's Common Developer and Distributed Lic. microsystems, plans, open-source, authentication, single, sign-on, technology. . LinuxSecurity.com Team
Representatives from 37 e-mail technology companies used a one-day Summit in New York on Tuesday to exhort private sector administrators and online marketers to adopt e-mail sender authentication technology that helps block spam and phishing attacks. . Around 500 people attended the E-Mail Authentication Implementation Summit and heard speeches by Internet luminary Esther Dyson, as well as executives from Microsoft Corp., Yahoo Inc. and the Direct Marketing Association. With problems like spam and phishing continuing to grow, companies need to implement some form of e-mail authentication technology soon, and begin preparing for the next wave in e-mail security: sender reputation services, according to e-mail experts. The link for this article located at eWeek is no longer available. . About 500 participants took part in the Email Conference, promoting email verification as a means to combat junk mail and phishing threats.. Email Safety, Anti-Spam Techniques, Sender Reputation Management, Cybersecurity. . Brittany Day
Anti-spam researchers are working on technologies designed to authenticate e-mail senders. Earlier this year, researchers predicted that solutions would be in place within months, but now those predictions appear overly optimistic, and researchers say it will take some time to produce tangible results.. . .. Anti-spam researchers are working on technologies designed to authenticate e-mail senders. Earlier this year, researchers predicted that solutions would be in place within months, but now those predictions appear overly optimistic, and researchers say it will take some time to produce tangible results. One organization working on sender-authentication mechanism is a commercial alliance comprising the biggest consumer e-mail providers: Microsoft, Yahoo, America Online and Earthlink. Another organization, the Anti-Spam Research Group, is an organization of anti-spam researchers affiliated with the Internet's main technology standards body, the Internet Engineering Task Force. And a small vendor, ICS, in Bohemia, New York, is selling its own, proprietary sender-authentication service. The alliance, called the "big gorilla project" by ASRG members, formed in April to develop technology quicker than what they believe can come out of the research body. The alliance is proposing a method for authenticating an email sender, and is seeking support for its ideas from other vendors and industry experts. "What we really want to do is make sure that the Internet community is in agreement that this is a good solution, and an appropriate solution," Miles Libbey, anti-spam product manager for Yahoo Mail, said. "Certainly, we don't want to willy-nilly go implement something and then force it down the industry's throat." The link for this article located at SecurityPipeline.com is no longer available. . Email security experts are actively investigating advanced methods for verifying the identity of email senders in a more streamlined manner.. Email Authentication, Anti-Spam Solutions, Sender Verification. .LinuxSecurity.com Team
On Oct. 1, the Electronic Signatures in Global and National Commerce Act, or E-Sign, will take effect, giving electronic signatures the same legal standing as their paper-and-pen counterparts. This expansive federal legislation considers facsimiles of an original signature and recorded agreements . . . . On Oct. 1, the Electronic Signatures in Global and National Commerce Act, or E-Sign, will take effect, giving electronic signatures the same legal standing as their paper-and-pen counterparts. This expansive federal legislation considers facsimiles of an original signature and recorded agreements over the telephone as forms of electronic signatures. However, it doesn't dictate whether an electronic signature needs to be secured, nor does it specify a type of technology. To further complicate matters, the law also lets each state regulate its own authentication technology. The link for this article located at CNN is no longer available. . Starting on October 1st, the Digital Signature Act will endorse digital signatures, influencing verification technology and legal frameworks.. E-Sign Act, Authentication Technology, Digital Signatures, Electronic Agreements. . Anthony Pell
There are plenty of options for user authentication, but none is a "one-size-fits-all" solution. With so many available technologies, how do you select the right one for your organization's needs? "Systems architects sometimes get stuck on security planning, because it's hard . . . . There are plenty of options for user authentication, but none is a "one-size-fits-all" solution. With so many available technologies, how do you select the right one for your organization's needs? "Systems architects sometimes get stuck on security planning, because it's hard to choose among all the competing products and technologies. And nothing is tougher than finding a reliable means to identify and authenticate the user population. Reliable authentication is essential, of course, because so many security mechanisms base their accept/reject decisions on user identity. But there's no overall consensus about methods-that is, about the best way to authenticate someone in a given setting. Some security "experts" will tout a particular technology (biometrics, for instance, or PKI) as a one-size-fits-all solution. Others may rely on whatever off-the-shelf technology lies immediately at hand. The problem is that selecting a specific technology before you implement the general structure or "design pattern" of the solution is like putting the cart in front of the horse." . Investigate different methodologies for user identity verification, and discover customized approaches to strengthen your cybersecurity framework.. User Authentication, Trust Frameworks, Security Planning. . Anthony Pell
The world of James Bond may be inching toward reality. A new generation of biometric devices -- gadgets that identify you by scanning your face, fingerprint, or voice, have a distinctly futuristic look and feel, but have yet to make much . . . . The world of James Bond may be inching toward reality. A new generation of biometric devices -- gadgets that identify you by scanning your face, fingerprint, or voice, have a distinctly futuristic look and feel, but have yet to make much of a wave in the market. But, integrators and vendors at PC Expo's "Biometropolis" exhibit were upbeat about the prospects for such wares. The link for this article located at TechWeb is no longer available. . The rise of biometric devices like fingerprint scanners and facial recognition has transformed secure identification, enhancing security beyond traditional methods. biometric solutions, secure identification, cybersecurity innovations. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.