Opening up this month's Linux Journal and seeing Doc Searl's article(subscription required) on the Identity Metasystem and an architecture diagram from MS(!) and IBM was too cool. This looks like an important step towards interoperable security standards and it elevates the discussion away from religious wars and towards business, technical, social, and risk management issues -- hopefully other thinkers will weigh in as well.
Recent Posts
- Security Champions Guide to Web Application Security
- Security > 140 Conversation with Pamela Dingle on Identity
- 6 Things I Learned from Robert Garigue
- The Curious Case of API Security
- Security Capability Engineering
- Ought implies can
- Security > 140 Chat with T. Rob Wyatt on MQ and Middleware Security
- Privilege User Management Bubble?
- The part where security products solve the problem
- Four Often Overlooked Factors to Give Your Security Team a Fighting Chance
Blogroll
- Adding Simplicity - An Engineering Mantra
- Adventures of an Eternal Optimist
- Andy Steingruebl
- Andy Thurai
- Anton Chuvakin
- Beyond the Beyond
- cat slave diary
- Ceci n'est pas un Bob
- ConnectID
- Cryptosmith
- Emergent Chaos: Musings from Adam Shostack on security, privacy, and economics
- Enterprise Integration Patterns: Gregor's Ramblings
- Financial Cryptography
- infosec daily: blogs
- Jack Daniel
- James Kobielus
- James McGovern
- John Hagel
- Justice League [Cigital]
- Kim Cameron's Identity Weblog
- Krypted - Charles Edge's Notes from the Field
- Lenny Zeltser
- Light Blue Touchpaper
- Mark O'Neill
- Off by On
- ongoing
- Patrick Harding
- Perilocity
- Pushing String
- Rational Survivability
- rdist: setuid just for you
- RedMonk
- RiskAnalys.is
- Rudy Rucker
- Software For All Seasons
- Spire Security Viewpoint
- TaoSecurity
- The New School of Information Security
- Windley's Technometria
- zenpundit
« The Word "Security" Considered Harmful | Main | Identity: Where Subjective Meets Objective »
The comments to this entry are closed.
SOS: Service Oriented Security
- The Curious Case of API Security
- Getting OWASP Top Ten Right with Dynamic Authorization
- Top 10 API Security Considerations
- Mobile AppSec Triathlon
- Measure Your Margin of Safety
- Top 10 Security Considerations for Internet of Things
- Security Checklists
- Cloud Security: The Federated Identity Factor
- Dark Reading IAM
- API Gateway Secuirty
- Directions in Incident Detection and Response
- Security > 140
- Open Group Security Architecture
- Reference Monitor for the Internet of Things
- Don't Trust. And Verify.
Comments