Skip to main content

The WiKID Blog

Viewing posts from January, 2009

banks-need-strong-authentication-desparately

Forrester Research is urging banks to adopt additional security to fight phishing and other forms of fraud, including strong authentication.

7-easy-steps-to-maximizing-your-fraudulent-stock

The SEC has noticed a dramatic rise in fraud against online brokerage accounts. This is a very interesting article in that it shows how an attacker can take over accounts and make money without necessarily removing money from those accounts. All they need is a couple of "legitimate" account that the fraudsters open, a thinly traded small-cap stock and to control a couple of pwned accounts with enough money to manipulate the targeted stock. The article describes "pumping" as using pwned accounts to drive up the price of stocks that you hold. However, you can also make money on the way down:

How-much-to-spend-on-data-breach-protection

In a previous post, I discussed how much to spend on information security based on Gordon & Loeb's book Managing Cybersecurity Resources: A Cost-Benefit Analysis. The crux: spend no more than 37% of your expected loss.

dhs-predicts-more-brokerage-attacks

The DHS is joining in on one of my earlier predictions: Brokerage accounts will be increasing targeted in the coming year. According to their post they are tempting accounts because they typically have more money in them. Further, typical anti-fraud transaction analysis doesn't really work because of the infrequency of transfers.

I'm convinced that brokerage accounts and other heavy transactions accounts will need cryptographically secure transaction authentication in addition to session and host/mutual authentication.

schwarzenegger-vetoes-pci-esque-legislation

Legislation that would have made merchants responsible for card-reissuance and other identity theft costs was vetoed by Gov. Schwarzenegger.

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom