A user with a BYOD is still able to access the email system, even after the user account has been disabled and password changed. Since it's clear that a re-authentication event doesn't continually ...
I need help understanding what is required by the phrase "a comparison of the relative costs involved in making changes to the current organizational security procedures". Am I to compare the cost ...
Are there any examples of how GPS coordinate (or any location data really) can be used to detect suspicious locations or validate well known locations? Specifically Highlighting new or unusual ...
Inconsistencies found in OpenID Provider's HTTP Headers. Which one is the most secure that I should imitate in my STS, and Relying Party?
I'm comparing the HTTP headers of the various providers (LiveID, Google, Yahoo, etc) and notice a broad inconsistency in implementation on the sign in page, sign out page, and subsequent pages. ...