
	Where results make sense

Topic: Information leakage

In the News (Fri 9 Jan 09)

Brad Pitt

Jennifer Garner

Boston College

Steve Ballmer

Rod Blagojevich

Phil Schiller

Gaza City

Jermain Defoe

Lindsay Lohan

Bill Richardson

	MFL Topical Report - Main Document
		Flux leakage at a metal-loss region is caused by a local decrease in the thickness of the pipe wall.
		In flux leakage testing, the term saturation is often used to imply permeability is decreasing and flux leakage is occurring.
		In general, the length of the flux leakage signal is better related to the average length of the defect than it is to surface length of a metal-loss defect.
	www.battelle.org /pipetechnology/MFL/MFL98Main.html (9956 words)

	Information leakage a.k.a. competitive intelligence
		Deliberate disclosure of false information is one of the more active countermeasures we can discuss - and conversely, of course, this demonstrates the need to be wary of information obtained from third parties.
		Given the sheer amount of information circulating in most companies, it is important to focus the effort - we therefore normally assess the overall extent of information leakage and undertake an impact assessment to identify the most important risk areas.
		Information security awareness is an extremely important control against this threat.
	www.isect.com /html/info_leakage.html (388 words)

	[Information Leakage] Threat Classification - Web Application Security Consortium (Site not responding. Last check: 2007-10-26)
		Information Leakage is when a web site reveals sensitive data, such as developer comments or error messages, which may aid an attacker in exploiting the system.
		In the first case of information leakage (comments left in the code, verbose error messages, etc.), the leak may give intelligence to the attacker with contextual information of directory structure, SQL query structure, and the names of key processes used by the web site.
		Information Leakage in this context deals with exposure of key user data deemed confidential or secret that should not be exposed in plain view even to the user.
	www.webappsec.org /projects/threat/classes/information_leakage.shtml (599 words)

	NTI - Data Risk - Information Leakage
		The purpose of this course is to provide IT with the understanding to implement the policies and knowledge necessary to address risk from information leakage.
		The information security risk perspectives presented in course are ideal to cover issues that must be addressed as part of GLB, HIPAA, Sarbanes-Oxley and FISMA.
		In addition to the policy information provided above, this course covers known data hiding methods, e.g., steganography, it also focuses on several non-traditional data hiding methods that are effective and easy to implement.
	www.forensics-intl.com /datahide.html (1008 words)

	[Full-Disclosure] Seti@home information leakage and remote compromise
		Information leakage and remotely __________________________________ exploitable buffer overflow in various SETI at home..cc.
		This information includes the processor type and the operating system of the machine seti at home is running on.
		THE TECHNIQUE-------------------------------------------------------------- 1) Sniffing the information exposed by the seti at home client is trivial and very usefull to a malicious person planning an attack on a network.
	lists.grok.org.uk /pipermail/full-disclosure/2003-April/004383.html (946 words)

	Information Leakage (Site not responding. Last check: 2007-10-26)
		Information may be power, but only if it is used.
		If you put items 1 and 2 together, there seems to be a strong hint of leakage of information from the XYZ company via John to a Smalltown jewellery gang.
		According to Morris-Suzuki, 'the economy of information production is an open system, into which non-commodities enter as inputs and whose outputs may eventually escape from the cycle of commercial exchange.' She contrasts this with the traditional closed system of production, associated with Piero Sraffa.
	www.users.globalnet.co.uk /~rxv/infomgt/leakage.htm (863 words)

	Information leakage - Wikipedia, the free encyclopedia
		Information leakage happens whenever a system that is designed to be closed to an eavesdropper reveals some information to unauthorized parties nonetheless.
		During the Second World War, the Japanese for a while were using secret codes such as PURPLE; even before such codes were cracked, some basic information could be extracted about the content of the messages by looking at which relay stations sent a message onwards.
		Information leakage can subtly or completely destroy the security of an otherwise bulletproof system.
	en.wikipedia.org /wiki/Information_leakage (372 words)

	Information Leakage: What You Need To Know - News
		Information leakage is often beyond your control, and the leaker needs to have the good sense to notify you so you can protect yourself.
		Ameriprise assured clients that the theft was likely a random act and it was doubtful the information would even be found on the laptop, much less decrypted and used.
		If the stolen information includes your driver's license or other government-issued identification, contact the agencies that issued the documents and follow their procedures to cancel a document and get a replacement.
	www.wnbc.com /news/8343480/detail.html (504 words)

	NEC Information Leakage Prevention Solution
		Information Leakage Prevention uses procedures that are almost no different from what has been done in the past.
		Information Leakage Prevention by NEC protects confidential data, files and directories against illegal access and unintentional transfer.
		Information Leakage Prevention makes it easy for you to avert potential security vulnerabilities with comparatively little effort — extremely rapidly.
	www.de.nec.de /productdetail.php/id/1623 (328 words)

	adq_pdb1.htm: PDB Information Leakage (Site not responding. Last check: 2007-10-26)
		PdbDump does not output line number information, but it is likely that this is present as well.
		You can remove the information from these by disabling debug information generation completely when compiling the source files for the library.
		I would recommend using PdbDump as a tool to check for information leakage in your commercially released PDB files, and also enusuring that no debug information is creeping into released.OBJ/.LIB files.
	www.searchlores.org /adq_pdb1.htm (828 words)

	Sun.Star Iloilo - Raid information leakage acted on
		Though Balquin said he has not yet received information that his men are involved, he still wants to make sure they are sincere in their fight against illegal drugs.
		He said since he took over as Pdea regional director, most of their raids with search warrants turned out negative thus, they are now shifting their operation to buy-busts, most of which have positive results.
		It is either the assets give advance information to the subjects or target pushers, the court leaks the information on the issuance of search warrants or there are persons paid by drug suspects to monitor the court.
	www.sunstar.com.ph /static/ilo/2005/04/08/news/raid.information.leakage.acted.on.html (239 words)

	Security Firm @stake Says Your Network May Be Leaking Sensitive Data - News by InformationWeek (Site not responding. Last check: 2007-10-26)
		Jan 7, 2003 12:00 AM Security researchers at the firm @stake say they've found a flaw in how network device drivers send information that could create an "information leakage vulnerability" that may let hackers collect sensitive information sent from vulnerable devices.
		Researchers from @stake say their tests reveal that instead of worthless packets stuffing the remaining bytes, potentially sensitive corporate information stored in memory buffers on the network interface card, static system memory controlled by the network driver, or kernel memory is sent instead.
		While at-risk networks will greatly reduce this vulnerability's impact through encryption, they warn, sensitive information leaked from such sources as kernel memory can still be viewed by prying eyes.
	www.informationweek.com /story/IWK20030107S0003 (447 words)

	Events: Information Leakage Seminar Bios
		Nancy's main interests are directories and identity management, email archiving and retention, messaging project management, regulation and compliance, and collaborative applications such as calendaring, scheduling and team spaces.
		Prior to Ferris Research Nancy managed Information Systems for Walt Disney World, performing strategic planning and implementation of metadirectory services, messaging, calendaring, workflow and e-business technologies for 55,000 users.
		She holds a BS in Education from the University of Georgia and an MBA in Information Systems from the Florida Institute of Technology.
	www.entrust.com /events/information-leakage-may06-bios.htm (320 words)

	Access Management System prevents information leakage., ControlGuard Inc.
		It is imperative for organizations to protect vulnerable endpoints to manage and control the use of removable media, comply with most federal regulations and prevent information leakage.
		"Securing the data and preventing information leakage is high on our priority list," said John Sroka, CIO at Duane Morris, one of the largest 100 law firms in the country and a ControlGuard customer.
		ControlGuard is a leading provider of enterprise-grade security solutions that protect, manage and secure enterprises from endpoint vulnerabilities such as security breaches, information leakage and data theft.
	news.thomasnet.com /fullstory/479961 (1039 words)

	US-CERT Vulnerability Note VU#412115
		Many network device drivers reuse old frame buffer data to pad packets, resulting in an information leakage vulnerability that may allow remote attackers to harvest sensitive information from affected devices.
		This constitutes an information leakage vulnerability that may allow remote attackers to harvest potentially sensitive information.
		Depending upon the implementation of an affected device driver, the leaked information may originate from dynamic kernel memory, from static system memory allocated to the device driver, or from a hardware buffer located on the network interface card.
	www.kb.cert.org /vuls/id/412115 (378 words)

	Events: Information Leakage Seminar
		With the ever-increasing use of electronic communications in business today, the potential for loss of intellectual property is a daunting threat to every enterprise—and business owners and compliance officers can't rely on employees to take the necessary actions to ensure both corporate governance and compliance with all the latest information privacy regulations.
		Enterprises need a way to monitor the flow of inbound and outbound content and secure sensitive information when necessary to prevent a potential breach.
		Entrust offers easy-to-use solutions that can enable you to implement enforceable corporate policies in a real-time environment to proactively identify and manage content as it enters and before it leaves your enterprise, while even stopping e-mails that accidentally contravene policy—before they have the chance to cause serious damage.
	www.entrust.com /events/information-leakage-may06.htm (209 words)

	How to hash for verification but prevent information leakage? - Dev Shed
		I want to prevent this leakage of information (even if it's very small).
		At the same time, I don't want to truncate the hash too much, because then the probability of a collision becomes too high, and the user, who knows the 32 bytes, will be unable to verify with high probability that they have correctly re-generated the 32 bytes of data (from a pass phrase using PBKDF2).
		A pinned buffer per processor is used along with instrumentation to capture kernel performance-related information.
	forums.devshed.com /security-and-cryptography-17/how-to-hash-for-verification-but-prevent-information-leakage-344601.html#post1466460 (746 words)

	Corporate Open Source Information Leakage
		Or that this information can represent a major threat and could possibly be used for open source intelligence by providing quick profiles of the enterprise (footprinting).
		If IT employees from a given enterprise are frequently posting technical problems in Usenet groups, a particular query can be used to collect this information and analyze it to reveal the technical flaws in the enterprise´s infrastructure, possibly even uncovering confidential information.
		It is the author´s goal to introduce this particular prototype, and possibly to initiate a discussion on the possibility of a national independent benchmark authority that would assess the corporate level of transparency.
	www.iwar.org.uk /infocon/corporate-open-source.htm (457 words)

	Power and Information Leakage in Organizations
		This paper offers a model to study the trade-off between the efficiency enhancements of information exchanges and the risk of information leakage in organizations.
		Information exchanges can be efficient since, in the absence of legal enforcement, the voluntary disclosure of personal information generates an endogenous enforcement device, and hence can promote cooperation.
		On the other hand, because of the presence of external threats (for instance, a competitor), too much information exchange can increase the risk of information leakage.
	ideas.repec.org /p/red/sed004/71.html (277 words)

	The Hindu : National : Navy to probe information leakage
		"There has been a leakage and we are investigating," he said during a brief interaction with the media.
		The Deputy Chief of the Naval Staff Sureesh Mehta told newspersons that but for procedural lapses, no secret or operational plan of movement of warships or submarines had been leaked in an unauthorised download of sensitive matter in the Navy's war room in the South Block.
		In a statement, the Navy said authorities were working in close cooperation with security agencies to ascertain the motives for downloading the information and whether it had been made available to commercial interests.
	www.hindu.com /2005/08/02/stories/2005080215481200.htm (277 words)

	Software prevents information leakage., PortAuthority Technologies
		"Losing confidential information and IP is a growing concern in the industry, and our expanding customer base is looking for a solution to keep them out of the headlines as the next company with an issue," said Mike Conley, VP of Sales at Forsythe.
		PortAuthority delivers enhanced information leak prevention capabilities, including real-time monitoring and reporting, granular policy management for selective blocking and enforcement, automated data protection using PortAuthority's patented PreciseID(TM) for databases containing sensitive information, and plug-and-play appliances purpose-built for data security.
		PortAuthority Technologies is the leading provider of Information Leak Prevention security solutions that reliably and accurately control the unauthorized distribution of sensitive information for data privacy, confidential information protection and true compliance.
	news.thomasnet.com /fullstory/491071/rss (1418 words)

	Managing the Evolving Risk of Information Leakage by Fidelis Security Systems - A Vendor White Paper - InfoWorld ... (Site not responding. Last check: 2007-10-26)
		This increase in data leakage and the negative impact associated with it has become a large problem for major organizations.
		The risk of information leakage is very real today--it seems as if we read about an unintended disclosure in the paper every week.
		This paper discusses this evolving risk of information leakage and the factors contributing to it.
	productfinder.infoworld.com /infoworld/search/viewabstract/77120/index.jsp (477 words)

	Information leakage prevention, device block
		Securing the data and preventing information leakage (Data Leakage) is high on our priority list.
		“Minimizing the risk of information leakage (Data Leakage) and compliance with security regulations are critical business objectives.
		Awareness of information security is an integral part of being at the forefront of technology.
	www.controlguard.com /infor.asp?id=Testimonials&father=Company (565 words)

	Jo rattray - Information Leakage
		The proliferation and the staggering increase in capacity of removable media devices, and the advancement in printing and scanning technologies, has lead to an explosion of new security threats within the enterprise..
		Jo specialises in consulting in information security issues with a particular emphasis on infrastructure in both the commercial and operational areas of businesses.
		Here is an opportunity to get the latest information directly from the source.
	www.nzcs.org.nz /SITE_Default/branches/SITE_wellington/Archives/2006_Wgtn_Events/ISSIG606A.asp (267 words)

	Information Leakage Detection and Prevention - Wikipedia, the free encyclopedia
		Information Leakage Detection and Prevention (ILDandP or ILDP) is a computer security term referring to systems designed to detect and prevent the unauthorized transmission of information from the computer systems of an organization to outsiders.
		The term Information Leakage Detection and Prevention was coined by IDC.
		They can also provide more fine-grained information such as the application attempting to access or transmit the information.
	en.wikipedia.org /wiki/Information_Leakage_Detection_and_Prevention (215 words)

	[Full-disclosure] [DR018] Quartz Composer / QuickTime 7 information leakage
		This issue has not been addressed by Apple yet, and because details of the potential exploit appeard in a public forum shortly after I had notified the vendor, a fix may still be some time away.
		When the (D) patch is activated, it will access the URI (output of (C)), thus leaking the restricted information to an HTTP host of the attacker's choice.
		Following a discussion of this problem on the public quartzcomposer-dev mailinglist (initiated by a third- party), the full details of the problems were released on May 11.
	lists.grok.org.uk /pipermail/full-disclosure/2005-May/033985.html (577 words)

	Surplus Disk Drive Vulnerability – Information leakage (Site not responding. Last check: 2007-10-26)
		This paper is intended to illustrate the general techniques used to analyze or audit a PC disk that has been sent to surplus.
		This information is intended exclusively for the use of individual who are properly authorized to perform audit or forensic work on a given system.
		It is also possible to use the dd utility to dump an image of some or all of the RAM on a Windows system.
	www.auditor.ky.gov /Public/Technology/ForensicNotes.html (3240 words)

	SSRN-The Effects of Regulation Fair Disclosure on Information Leakage by Chi Mac (Site not responding. Last check: 2007-10-26)
		If this had been pervasive practice prior to Reg FD, then there should have been information leakage through price run-up before official earnings announcements.
		There is also evidence that information leakage was already subsiding before Reg FD became effective, possibly because of voluntary compliance or the demands of the increasing number of individual investors.
		Mac, Chi T., "The Effects of Regulation Fair Disclosure on Information Leakage" (September 10, 2002).
	papers.ssrn.com /sol3/papers.cfm?abstract_id=329632 (274 words)

Try your search on: Qwika (all wikis)