Tim O'Reilly on Web 2.0 -- "data is the Intel Inside", which is exactly why SSL doesn't cut it as your main security mechanism. Security must be applied at the message level to protect the data.
Recent Posts
- Security Champions Guide to Web Application Security
- Security > 140 Conversation with Pamela Dingle on Identity
- 6 Things I Learned from Robert Garigue
- The Curious Case of API Security
- Security Capability Engineering
- Ought implies can
- Security > 140 Chat with T. Rob Wyatt on MQ and Middleware Security
- Privilege User Management Bubble?
- The part where security products solve the problem
- Four Often Overlooked Factors to Give Your Security Team a Fighting Chance
Blogroll
- Adding Simplicity - An Engineering Mantra
- Adventures of an Eternal Optimist
- Andy Steingruebl
- Andy Thurai
- Anton Chuvakin
- Beyond the Beyond
- cat slave diary
- Ceci n'est pas un Bob
- ConnectID
- Cryptosmith
- Emergent Chaos: Musings from Adam Shostack on security, privacy, and economics
- Enterprise Integration Patterns: Gregor's Ramblings
- Financial Cryptography
- infosec daily: blogs
- Jack Daniel
- James Kobielus
- James McGovern
- John Hagel
- Justice League [Cigital]
- Kim Cameron's Identity Weblog
- Krypted - Charles Edge's Notes from the Field
- Lenny Zeltser
- Light Blue Touchpaper
- Mark O'Neill
- Off by On
- ongoing
- Patrick Harding
- Perilocity
- Pushing String
- Rational Survivability
- rdist: setuid just for you
- RedMonk
- RiskAnalys.is
- Rudy Rucker
- Software For All Seasons
- Spire Security Viewpoint
- TaoSecurity
- The New School of Information Security
- Windley's Technometria
- zenpundit
« Lawyering Security In | Main | Build Security Into Your Web Apps and Web Services »
The comments to this entry are closed.
SOS: Service Oriented Security
- The Curious Case of API Security
- Getting OWASP Top Ten Right with Dynamic Authorization
- Top 10 API Security Considerations
- Mobile AppSec Triathlon
- Measure Your Margin of Safety
- Top 10 Security Considerations for Internet of Things
- Security Checklists
- Cloud Security: The Federated Identity Factor
- Dark Reading IAM
- API Gateway Secuirty
- Directions in Incident Detection and Response
- Security > 140
- Open Group Security Architecture
- Reference Monitor for the Internet of Things
- Don't Trust. And Verify.
Comments