Password Security

TEC Products

Information Security Selection Software Evaluation Reports http://rfp.technologyevaluation.com/rfi.asp?catid=SEC Information Security RFP Templates http://rfp.technologyevaluation.com/store.asp?catid=6 Information Security Software Evaluation Center http://security.technologyevaluation.com/

E*Trade Ignores Private Security Warning, But Public Hullaballoo ...

by P. Catz ... In late August computer programmer Jeff Baker discovered scenarios in which cybercriminals could compromise the password security of the users of E*Trade, an ... http:/.../research/researchhighlights/security/2000/10/news_analysis/na_st_pc_10_27_00_1.asp - 8k - 2000-10-27 Summary: E*Trade was notified about a cookie vulnerability in August, but the correction wasn't made until after the problem became public.

Fixing Security Backdoors:<br> Red Hat 1, Microsoft 0

by C. McNulty ... and will execute any extra, embedded commands included with the password change. Red Hat should be commended for their swift response to the security hole. ... http:/.../Research/ResearchHighlights/HardwareOS/2000/05/news_analysis/NA_HW_CFM_05_09_00_1.asp - 7k - 2000-05-09 Summary: April is the cruelest month for operating system security holes. Red Hat posted a fix within six hours, but Microsoft leaves us… still waiting!

Social Engineering Can Thwart the Best Laid Security Plans

by Brien Posey ... by now, the hacker has gotten the user to relax and let their guard down enough that the user will spell the password without even thinking about security. ... http:/.../Research/ResearchHighlights/Security/2001/12/research_notes/MN_ST_XBP_12_23_01_1.asp - 16k - 2001-12-22 Summary: There are a lot of different social engineering techniques, but they all have the same basic idea. The trick behind social engineering is to get the user to give up valuable information without them suspecting anything.

The Future of Secure Remote Password (SRP)

by Brenda Coulson ... More than likely, the user will need to write down the password to remember it, thereby compromising its security if the piece of paper gets into the wrong ... http:/.../Research/ResearchHighlights/Security/2003/03/research_notes/MI_ST_XBC_03_03_03_1.asp - 20k - 2003-03-03 Summary: The Secure Remote Password (SRP) holds great promise as a way to strongly authenticate a user without the usual risks of dictionary attack(s) faced by other password-based authentication schemes. Yet the industry de-facto standard remains the password-based authentication scheme. This article explores th

TEC: Firewall Software Evaluation Center

... run the risk of company-wide threats to security: Unauthorized users, both internal and external, can access private networks through password theft and ... http://security.technologyevaluation.com/firewall/ - 48k - 2009-08-31

The Future of Secure Remote Password (SRP) Part Two: Overcoming ...

by Brenda Coulson ... The Secure Remote Password Protocol , Proceedings of the 1998 Internet Society Network and Distributed System Security Symposium, San Diego, March 1998, pp. ... http:/.../Research/ResearchHighlights/Security/2003/03/research_notes/MI_ST_XBC_03_04_03_1.asp - 20k - 2003-03-04 Summary: This article explores the possibilities for the Secure Remote Password (SRP) in today’s multi-channel world, specifically how it improves upon the inherent insecurity of password authentication and the obstacles to overcome to succeed.

ElcomSoft Co.Ltd.

... ElcomSoft markets password recovery products for Microsoft Office products (including Word ... to recover from systems crashes, Advanced NT Security Explorer, an ... http://directory.technologyevaluation.com/profile.aspx?vid=11236 - 5k

ACCPAC -- Being Much More Than Meets The Eye Part Two ...

by P.J. Jakovljevic ... This release also incorporates increased password security and a new check log report that allows small business owners to keep tight control and monitoring of ... http:/.../Research/ResearchHighlights/Erp/2003/02/research_notes/EN_ER_PJ_02_05_03_1.asp - 21k - 2003-02-05 Summary: ACCPAC continues to expand its products footprint and operations worldwide.

Information Security 101: an Introduction to Being Compliant and ...

... use of vendor-supplied password defaults, to minimize the possibility of password breaches; With data forensic abilities, information security solutions can ... blog.technologyevaluation.com/.../ - 47k - 2008-01-25

Lost Your Laptop? The CyberAngel® Brings It Back

by L. Taylor ... Using a password entry system, The CyberAngel communicates to the security monitoring server whenever the password entry is violated, reporting the phone ... http:/.../Research/ResearchHighlights/Security/2001/12/research_notes/PN_ST_XLT_12_16_01_1.asp - 12k - 2001-12-17 Summary: A company known as Computer Sentry Software, Inc. has designed an innovative option for laptop recovery. With laptop theft on the rise, investing in an affordable laptop recovery package is well worth the investment.