Sean Michael Kerner

APIs are widely used in the modern web world to connect users and sites to disparate sources of data, content, and functionality. APIs also represent a window into infrastructure and as such can also be an attack vector ripe for exploitation, unless properly protected. The topic of API security is one that is often an […]

Security threats are everywhere — so what is the appropriate response, given that you can’t block everything? One approach: Focus on user identity. According to Mike Denning, General Manager of the Security Customer Solutions Unit at CA Technology, enterprises need to understand who their users are if they want to provide real security. Denning delivered […]

With the exhaustion of the public pool of available IPv4 addresses in 2011, the need for networks to move to the next generation IPv6 system of Internet addresses is becoming increasingly important. Moving to IPv6, comes with a host of challenges not the least of which are security related. While IPv6 provides vastly more address […]

The year 2011 was full of data breaches — and 2012 may well be even worse, according to Qualys CEO Philippe Courtot. Courtot delivered a keynote address at the RSA security conference in San Francisco on Wednesday, outlining his views on the need for a more effective approach to security. He also officially launched a […]

The cloud offers enterprises big and small, the opportunity to lower capital costs and improve efficiency, but it might be coming at a cost of speed, for some organizations. In an effort to help accelerate cloud connections, networking vendor Riverbed has partnered with content delivery network provider Akamai in a new joint solution. The Steelhead […]

Google has officially withdrawn its sponsorship from the 2012 Pwn2Own security challenge. According to Google, they pulled out after they discovered that exploits demonstrated at the event did not have to be disclosed to the affected vendors. HP’s TippingPoint which runs the annual event, disagrees. “Affected vendors always receive full details for vulnerabilities discovered during […]

From the ‘Bender from the Future’ files: Over the last several years, github has become the premier development hub for all things open source.  So when the github platform as a whole has a security problem, open source developers really need to take notice. Late last week, a flaw in the underlying github ruby code […]

“Trust in our digital world is in jeopardy” RSA Executive Chairman Art Coviello in his keynote address, kicking off this year’s RSA 2012 Conference (InternetNews)     “You will want to create an IPv6 security policy that sort of mirrors your IPv4 security policy” Check Point Fellow, Robert Hinden,explaining why IPv6 security isn’t all that […]

From the ‘Open Source Language of the Web’ files: PHP 5.4 has just officially been release – and it’s a really big deal. I’ve been tracking the development of PHP 5.4 since at least November of 2010 and the early alpha milestones. This is the first major PHP update since PHP 5.3 came out in […]

RSA Security kicked off its namesake security conference Tuesday with a keynote presentation outlining how the world has changed in the last 12 months. For RSA, it’s a world in which they suffered a serious security breach that left the company exposed. In his opening keynote, RSA Executive Chairman Art Coviello made the point that […]

Symantec (NASDAQ: SYMC) is rolling out a new platform called O3 Cloud Identity and Access Control to help enterprises better control their employees’ access to the cloud. With a general availability announcement today at the RSA Conference, Symantec is aiming to make it safer and easier for enterprises to embrace cloud services. “O3 is a […]

Firewalls have long operated on the model of providing deep packet inspection in order to protect IT assets. Deep packet inspection, however, has often lacked a key attribute: context awareness. Cisco is now advancing its context awareness agenda with the release of the ASA CX upgrade for its hardware firewall portfolio. The ASA CX is […]