Interesting Information Security Bits for 01/23/2009

What have we got today? Well, super secret spy writing, justification for implementing security measures, be careful with publicly talking about your infrastructure, some PCI discussion, ENISA is looking for some writers, and nice article about making the web more secure.

1. Super secret spy writing technique brought to by Ax0n. Pretty nifty.
   HiR Information Report: "Secret" messages with Pilot Frixion
   Tags: ( general )
2. Another way or framework for justifying implementation of security measures. They will be talking about it over the course of several blog posts and releasing the paper soon.
   The Business Justification For Data Security | securosis.com
   Tags: ( risk business justification )
3. Tom makes are really good point. Be careful how much information you share about your infrastructure publicly. Particularly if you have some challenges to overcome.
   spylogic.net - Who's managing information security in your city?
   Tags: ( data gathering general )
4. Michael puts forth his perspective on what PCI compliance really means. Then there is some interesting discussion in the comments. You should read it.
   Society of Payment Security Professionals - Compliance Demystified >> Blog Archive >> What PCI compliance really means
   Tags: ( pci )
5. ENISA is looking for articles for the ENISA Quarterly Review. Topic preference: "Resilience and Security of Communication Networks"
   ENISA Call For Articles
   Tags: ( cfp enisa )
6. Very nice article with some good ideas on how to better accomplish making the web more secure.
   Blog :: by Wade Woolwine >> Blog Archive >> RE: Alignment of Interests in Web Security
   Tags: ( general )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

Tagged as: enisa, pci, risk