Click here to RSVP to WHIR Events: Denver – Aug 26, 2010 Phoenix – Sept 23, 2010 Washington, DC – Oct 21 Five Most Recent Posts Blogs: Interview with Ian McClarty of Phoenix NAP News: VeriSign Launches Cloud-Based Managed DNS Service News: Q&A: Alert Logic Co-Founder and CTO Misha Govshteyn News: Citrix Ships FIPS-2 Compliant NetScaler Appliances to Meet Government Security Demands News: Tech Data Opens Cisco Unified Computing System Data Center (WEB HOST INDUSTRY REVIEW) — In an effort to meet the requirements of the Department of Defense and federal civilian agencies with strict security requirements, Citrix Systems’ ( www.citrix.com ) application acceleration, load balancing and Web-security system Citrix Netscaler MPX has had its latest appliances achieve compliance with the  Federal Information Processing Standard (FIPS) 140-2 Level 2. In an effort to meet the requirements of the Department of Defense and federal civilian agencies with strict security requirements,  Issued by the National Institute of Standards and Technology, the FIPS 140-2 standard defines information technology security accreditation for cryptographic modules produced by private sector vendors for use in government departments and regulated industries that collect, store, transfer, share or disseminate “sensitive but unclassified” information.

Today in the small town of Culpeper, Virginia, ICANN technical staff played host to an unusual and somewhat arcane event. Volunteers from over ten countries made their way by plane, train and automobile to witness and participate in the generation of the cryptographic key that will be used to secure the root zone of the Domain Name System using DNSSEC for the first time

New Crypto-Cracking Tool To Target Databases Researchers last week introduced a new penetration-testing tool that makes it possible to capture poorly encrypted Web session data — such as cookies and HTML parameters. Now they say they’re looking into how similar attacks against Web applications can be used to advance attacks against Web-facing databases with sloppy encryption-key deployment. Demonstrated this spring at Black Hat Europe and officially released last week, the Padding Oracle Exploit Tool (Poet) takes advantage of and automates a side-channel attack called a Padding Oracle Attack, which was introduced to the cryptographic community in 2002.