Password Management and Policy

MUST READ Identity and Access Management Services, Systems and Technologies SECURITY SCHOOL - This Security School explores critical topics related to helping security practitioners establish and maintain an effective identity and access management plan.

VIDEO: 1 - 2 of 2

	PCI compliance requirement 8: Unique IDs SearchSecurity.com | 01 Jun 2009 VIDEO - In a nutshell, Requirement 8 of the Payment Card Industry Data Security Standard calls for individual identification for anyone and everyone who has access to cardholder data.

	PCI compliance requirement 2: Defaults SearchSecurity.com | 01 Jun 2009 VIDEO - PCI pros Diana Kelley and Ed Moyle review Requirement 2 of the Payment Card Industry Data Security Standard: Defaults.

	VIEW ALL VIDEO ON PASSWORD MANAGEMENT AND POLICY

NEWS: 1 - 3 of 37

	Two-factor authentication, vigilance foil password theft SearchSecurity.com | 11.04.2009 OPINION - Password stealing Trojans, keyloggers and other malware are reaping account credentials by the thousands forcing some to rethink password policies and develop new defenses.

	Group to shed light on secure identity management threats SearchSecurity.com | 27 Oct 2009 ARTICLE - Identity management technologies are struggling to keep pace with constantly evolving nature of attacks, according to the Center for Applied Identity Management Research (CAIMR).

	Brute force attacks target Yahoo email accounts SearchSecurity.com | 15 Sep 2009 ARTICLE - Attackers target a background Web services authentication application used by ISPs and Web applications to authenticate users.

	VIEW ALL NEWS ON PASSWORD MANAGEMENT AND POLICY

EXPERT TECHNICAL ADVICE: 1 - 3 of 65

PASSWORD MANAGEMENT AND POLICY EXPERTS
			Randall Gamby, featured expert ASK A QUESTION

	Making the case for enterprise IAM centralized access control 07 Jul 2009 TIP - Central access to multiple applications and systems can raise the level of security while getting rid of red tape, so how do you go about creating central access management?

	How to prevent brute force webmail attacks 05 Jul 2009 EXPERT ANSWER - Expert Sherri Davidoff explains why brute-force attacks on webmail accounts are such a popular hacking technique.

	Best practices for a privileged access policy to secure user accounts 09 Jun 2009 TIP - Enterprises need to secure accounts belonging to actual users by reviewing and monitoring their privileged access.

	VIEW ALL EXPERT TECHNICAL ADVICE ON PASSWORD MANAGEMENT AND POLICY

REFERENCE & LEARNING: 1 - 3 of 11

	Using IAM, password and provisioning management tools for compliance SearchSecurity.com | 31 Jan 2007 IDENTITY AND ACCESS MANAGEMENT SECURITY SCHOOL - In this new lesson, expert Tom Bowers will teach you how provisioning and password management can reduce help desk calls, ease compliance woes and save corporate cash.

	Endpoint security protection: Policies for endpoint control 17 Jul 2006 IDENTITY AND ACCESS MANAGEMENT SECURITY SCHOOL - Guest instructor Ben Rothke, provides tactics for endpoint security, policies for controlling endpoints and insight as to where endpoint security technology is headed.

	How to break into a computer that is right at your fingertips 29th Street Press | 04 Oct 2005 BOOK CHAPTER - Stressing the importance of physical security, Joel Dubin explains how a hacker can bypass a BIOS password and break into a computer.

	VIEW ALL REFERENCE & LEARNING ON PASSWORD MANAGEMENT AND POLICY

MAGAZINE CONTENT (free subscription required): 1 - 3 of 12

	Best Identity and Access Management Products Information Security Magazine | 03 Sep 2009 Readers vote on the best identity and access management products, including user identity access privilege and authorization management, single sign-on and more.

	Privileged account management critical to data security Information Security Magazine | 08 Jul 2009 FEATURES - Regulatory requirements and economic realities are pressuring enterprises to secure their privileged accounts.

	Mature SIMs do more than log aggregation and correlation Information Security Magazine | 04 Jun 2009 FEATURES - They've come a long way from the early days of log aggregation and correlation; enterprises now glean value from SIMs for compliance, visualization and business intelligence.

	VIEW ALL MAGAZINE CONTENT ON PASSWORD MANAGEMENT AND POLICY

WEBCASTS: 1 - 2 of 2

	Using Voice Verification to Securely Automate Password Resets - Vendor Webcast VIEW WEBCAST PREMIERED:   10 NOV 2005, 14:00 EST (19:00, GMT) SUMMARY:   Are you struggling to find an efficient, secure and simple password reset solution? Register to attend this webcast and explore automated solutions that can make password reset headaches disappear!

Secure Password Management with USB Strong Authentication - Vendor Webcast VIEW WEBCAST PREMIERED:   28 OCT 2004, 12:00 EDT (16:00, GMT) SUMMARY:   This webcast showcases how token-based Reduced Sign-On (RSO) can significantly improve password management and security across your organization. You discover how token-based RSO solutions are effectively delivering on much of the promise of Enterprise Single Sign-On (SSO) - without the hidden costs people have long associated with SSO.

	VIEW ALL WEBCASTS ON PASSWORD MANAGEMENT AND POLICY

DEFINITIONS: 1 - 3 of 13

	single-factor authentication (SFA) 27 Mar 2007 WORD - Single-factor authentication (SFA) is the traditional security process that requires a user name and password before granting access to the user. SFA security relies on the diligence of the user, who should take additional ...

	session replay 06 Mar 2006 WORD - Session replay is a scheme an intruder uses to masquerade as an authorized user on an interactive Web site. By stealing the user's session ID, the intruder gains access and the ability to do anything the authorized user can ...

	graphical password 22 Aug 2004 WORD - A graphical password is an authentication system that works by having the user select from images, in a specific order, presented in a graphical user interface (GUI). For this reason, the graphical-password approach is ...

	VIEW ALL DEFINITIONS ON PASSWORD MANAGEMENT AND POLICY

	SEE ALSO - Topics Related to Password Management and Policy:  Active Directory and LDAP Security, Enterprise User Provisioning Tools