The latest version of the Web Services Security (WS-Security) specification is being submitted to international standards body Organization for the Advancement of Structured Information Standards ...

Runtime Application Self Protection (RASP) is a next-generation cyber security technology designed to redress some of the weak points of application security. Unlike firewalls or code analysis, ...

The title of this blog is far from unique. Tracking security flaws in Java is like counting grains of sand on a beach. As I write this on January 27, 2013, the flaw in question is new. It is known by ...

As I mentioned in previous columns, there’s a new set of draft documents from the Computer Security Resource Center (CSRC) of the U.S. National Institute of Standards and Technology (NIST). SP 800-95, ...