Layered Approach to Security is the Only Way.

Reading this oracle presentation, it takes you through very clearly multifaceted interactions of employees across a business. The best defense it says is a and I totally agree is multi-dimensional and multi-level approach.

http://slidesha.re/jM0TI2

If nothing else click through to the slide 'obvious but often overlooked' so many businesses focus on firewall and encryption paying little attention to authentication, believing user-name and password are enough, anyone reading my blog will know this is not the case. Identification is most definitely not authentication.

Christian Hessler debates this so well in his blogs:

Top 10 Habits of Highly Effective Security Solutions

1-3 http://bit.ly/f69F9l
4-6. READ ON! http://bit.ly/f91Jyo
7-10 FINALE! http://bit.ly/gSyf3p

An interesting presentation.

Ecommerce Expo, National Hall Olympia..Next week

I am looking forward to attending next weeks, E Commerce Expo it is the industry event for the UK and, increasingly, Europe. It ranks as one of the largest gatherings of E Commerce professionals in Europe and boasts over 140 exhibiting companies plus a comprehensive conference programme.

http://www.ecommerceexpo.co.uk/page.cfm/Action=Seminars/SeminarDate=10_19_2010/goSection=4


Scanning the session list there are really great people telling their stories, I am looking forward to hearing from:

Steve Willey, Group Head of Product Development, moneysupermarket.com

Joe Leech, Principal Consultant, cxpartners

Matt Henderson, Director of Merchant Services, Amazon

Tjipto Sugijoto, Managing Director for Americas, Intershop.

Very surprised to see we are the only best of breed security vendor in attendance... and that there is no session talking about authenticating and protecting your user. With consumers being targeted by hackers, phishing and pharming attacks I would have expected at least one session.

"Relying on static, user-generated passwords to outwit expert hackers leaves ecommerce site severely at risk for data theft," said Christian Hessler, CTO, LiveEnsure™. "Ethical organizations are recognising the need for authentication security. We have made our solution affordable, accessible and quickly deployable for ecommerce sites."

http://www.liveensure.com/getit.html


NOTE to Show organisers... the regulators are really coming down on companies who don't protect their online consumers. A Session would have been good, Christian our CTO would have covered the importance of online authentication and I am sure Stewart Room the leading legal light in data protection would have covered changes in Legislation.

www.christianhessler.com/

http://www.stewartroom.com/