Tax Day and Security

Today is tax day for Americans. A day everyone just loves :-)   When I think of April 15th, I think of security and how it is more important than ever.  There is an article today that I just saw on Yahoo!

Hackers grabbed more than 285M records in 2008

  • By JORDAN ROBERTSON, AP Technology Writer - Wed Apr 15, 2009 12:05AM EDT

Jordan Robertson states:   "Hackers made off with at least 285 million electronic records in 2008, more than in the four previous years combined, according to a new study that shows identity thieves are getting better at exploiting careless mistakes that leave companies vulnerable to attack."

The rest of the arrticle can be read here. 

I believe the  days of single factor  authentication are over and the days of securing at the pipe level alone are over as well.  As much as I am not a proponent of big government, I do think there are many valuable services that government has and will do for society.  Does the Internet happen if not for DARPA funding?  I don't think so.  When I think of the right way to do identity management, I think of the DoD's Common Access Card (CAC)  program.

Sun Microsystems was a big part of the CAC program and, we at Sun have taken a similar approach with our Java Card.

Now for a controversial suggestion :-)  Have the US government follow DoD's lead and issue CAC to every single US citizen above the age of 6.  I have kevlar underwear on for this one :-)

Getting away from policy and back to technology, two extremely important standards going forward for security will be SAML and XACML.   More on those in coming days....

Comments:

Dear Sir / Madame,

I am looking for a Javacard Consultant.
Principal activities: - Development and unitary test of components software applet Javacard. - Evolution and maintenance of components software applet Javacard. - Evaluation of plateformes Javacard (performances, security). - Development of tools of assistance to the development software and production smart card. - Compilation of the associated documentations. - Etablissement of an uniform reporting.

Competences required: - 4 to 5 years in the function of engineer of development of software Javacard. - good knowledge of the API SIMTOOLKIT and OPEN platform - operational English.

I can be contacted on zulfi@influenceit.co.uk. Tel: 0044 7553 071019.

Posted by Zulfi Khan on May 19, 2009 at 12:55 AM EDT #

Post a Comment:
  • HTML Syntax: NOT allowed
About

This is Dave Edstrom's, Chief Technologist for Sun's Global Systems Engineering's Software LOB, blog about Sun technology, technology in general and some fun stuff like Corvettes :-)

Search

Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today