Follow us
Category Archives: IBM i Security
A hot debate over the inherent security benefits of open source software — or lack thereof — has been raging (again) since the “heartbleed” bug came to light last spring. So…..from a security expert’s point of view (yes, mine!), is … Continue reading
Posted in Botz Blog, Cloud Security, Compliance, Encryption, IBM i Security, Info Security Mgmt, Information Security, Mobile Security
Tagged AIX, AIX Security, AS/400, Closed Source, cloud security, compliance, cybersecurity, data security, encryption, Information Security, information security management, Open Source, Proprietary, security management
2 Comments
Patrick Townsend and I had a chance to catch up at COMMON earlier this year. I was psyched to learn that Townsend Security is now offering Two Factor Authentication (2FA) for the IBM i. When we started talking about … Continue reading
Or…How a security expert can fall for a phishing scheme Think no one will target your business with phishing attacks? Think again… This confession is a bit hard for me. Just recently I was the target of a phishing attack. … Continue reading
Posted in Botz Blog, Cloud Security, IBM i Security, Info Security Mgmt, Information Security, Mobile Security, Social Engineering
Tagged authentication, cloud security, cybersecurity, data security, IBM i Security, IBMi, info security management, Information Security, information security management, password management, phishing, security management, spear phishing
Leave a comment
From the title you might be thinking that the theme of this article is something like “information security is war.” But that’s not it.
The new IBM i 7.2 release brings several security-related enhancements. Two of them are the ability to use SSO from an IBM i green screen to a remote Telnet or FTP server that also supports Kerberos.
Have you ever encountered a situation where a user needed to use an application that displayed all of the rows in a file, but the user really should be restricted from seeing certain rows in that file?
Posted in Announcement, Botz Blog, Compliance, IBM i Security, Info Security Mgmt, Information Security, Mobile Security
Tagged AS/400, cloud security, compliance, cybersecurity, data security, IBM i 7.2, IBM i Security, IBM i V7R2, IBMi, info security management, Information Security, information security management, V7R2
Leave a comment
OR….. How Jobs Get Authority to Objects Words have consequences. Saying things like “we’re going to tighten security” or “we’re going to remove public (or default) authority” or “we’re going to remove direct access to data” will almost invariably lead … Continue reading
Posted in Botz Blog, IBM i Security, Info Security Mgmt, Information Security, Mobile Security
Tagged AS/400, cloud security, cybersecurity, data security, IBM i Security, IBMi, info security management, Information Security, information security management, security management, security policy
Leave a comment
Lately I’ve been fielding a lot of questions on single sign-on (SSO) and high availability. This post provides basic advice and considerations for using these two strategies together.
OR…. How I Finally Got to Use Some Really Cool EIM Security Functions to Enable SSO for a SaaS Implementation I love working on single sign-on projects that stretch the capabilities of Kerberos and EIM. Love them even more when … Continue reading
Recently I’ve written several blog posts about biometric authentication in IT Shops (see “Target Attack Leads to Discussion of Biometric Authentication“, “IT Shop Requirements for Exploiting Biometrics“, “Biometrics and SSO“). This post discusses a couple of secondary factors.
Posted in Biometrics, Botz Blog, Cloud Security, IBM i Security, Info Security Mgmt, Information Security, Mobile Security, Single Sign-On (SSO)
Tagged AIX, AIX Security, AS/400, biometric authentication, biometrics, cloud security, data security, IBM i Security, IBM i v7r1, IBMi, information security management, single sign on, Single Signon, sso, SSO Stat!
Leave a comment
