Mobile Payment Industry News: Howard Schmidt

Showing posts with label Howard Schmidt. Show all posts

Wednesday, July 7, 2010

5TH Annual Online Trust to Feature Howard Schmidt as Keynote Speaker

Online Trust & Cybersecurity Forum

Special Assistant to the President and Cybersecurity Coordinator Howard Schmidt Invited to Keynote

Nation's business, government and technology executives in collaborate around consumer trust, privacy and security

Seattle, WA – July 7, 2010 – The Online Trust Alliance (OTA) today announced keynotes and speakers for the 5th Annual Online Trust and Cybersecurity Forum being hosted at Georgetown University September 22-24 in Washington DC. White House Cybersecurity leader and presidential advisor Howard Schmidt had been invited to provide the kickoff keynote. Later that morning, Greg Link of Franklin Covey who will provide a keynote on the Speed of Trust, the New York Times best seller.

They will be joined by Mark Bregman, Chief Technical Officer of Symantec, Josh Glantz, VP and General Manager of Publishers Clearing House and Randall Rothenberg, CEO of the Interactive Advertising Bureau. Additional plenary and panel speakers include Trevor Hughes, Executive Director IAPP; Larry Clinton, President of the Internet Security Alliance; Ari Schwartz, VP and COO, Center for Democracy & Technology; Jessica Rich, Deputy Director, Federal Trade Commission and James Van Dyke of Javelin Research.

“Consumer trust is one of the primary enablers for continuing the global economic growth driven by the Internet,” said Mark Bregman, Executive Vice President And Chief Technology Officer, Symantec Corporation. “A strong public/private partnership between government and business is a key element for ensuring online trust for consumers. Events such as the Online Trust and Cybersecurity Forum help develop the framework necessary for the exchange of information needed to make that kind of partnership successful.”

The goal of the Forum is to help e-commerce companies, governmental agencies, financial institutions, and marketers enhance consumer protection while protecting their brands from emerging threats. Through a mix of keynote, plenary and breakout sessions, attendees will learn the latest techniques and best practices, evolving issues in security, privacy and data governance, and strategies for decision-makers to use to align business and marketing goals with technical solutions.

"For more than 50 years Publishers Clearing House has been a leader in direct marketing. It is precisely because we are experts in online consumer privacy and data governance that we have been able to retain and grow our audience as our business evolves to multiple-channel direct marketing," said Josh Glantz. "I am looking forward to sharing this knowledge and helping marketers better understand how to protect their brand and their consumers from potential threats."

A highlight of the Forum will be the annual Online Safety Awards program. Co-sponsored by Symantec and Message Systems, these awards recognize companies, individuals and organizations for their contributions to the trust ecosystem. Nominations are being accepted until August 31st.

“As consumers increasingly assert their sovereignty over their data and preferences, building and retaining consumer trust has never been more important,” said Craig Spiezle, executive director of OTA. “Left unchecked we risk a consumer trust meltdown. The Forum will elevate critical business practices that show promise towards protecting users, the Nation’s critical infrastructure and the long-term vitality of the Internet.”

In conjunction with the Forum, OTA will be hosting the OTA Training Academy on Wednesday Sept 22, offering two half-day training programs on email authentication and email regulatory compliance. Taught by industry leaders, the Academy is a mix of curriculum based instruction, theory, practical applications and hands-on exercises. Participants will have the option to take a certification exam at the conclusion of the program with recognition at the Award’s program.

The Forum will be held on September 22 -24 at Georgetown University in Washington DC. Registration is open to the public. Register by August 1st and save $200. https://otalliance.org/dc.html

The event is being sponsored by OTA members including; Better Advertising, Box Sentry, Direct Marketing Association, DigiCert, Infragard, Intersections, Internet Identity, Lashback, MarkMonitor, Message Systems, Microsoft, Perkins Coie, PreferenceCentral, Return Path, Symantec and TRUSTe.

Speakers:

Keynote, Plenary Session Speakers & Visionaries

Howard Schmidt - White House Cyber Security Coordinator *

Greg Link, President & Co-Founder, Global Speed of Trust (Franklin Covey)

Scott Meyer, CEO, Better Advertising Inc.

Ari Schwartz, VP & COO, Center for Democracy & Technology

Vance Hitch, CIO US Department of Justice & Co-Chair Federal CIO Council

Jessica Rich, Deputy Director, Federal Trade Commission

Trevor Hughes, Executive Director, IAPP

James Van Dyke, President & Founder, Javelin Research

Randall Rothenberg, President , Interactive Advertising Bureau

Larry Clinton, President & CEO, Internet Security Alliance

Michael Stanfield, Chairman and CEO, Intersections Inc.

John Scarrow, General Manager, Microsoft

Craig Spiezle, Founder & Executive Director, Online Trust Alliance

Jules Polonetsky, Co-Chair & Director, Future-of Privacy Forum

David Daniels, CEO, The Relevancy Group

Michael Barrett CISO, PayPal

Josh Glantz, VP, General Manager, Publishers Clearing House

Mark Bregman, CTO, Symantec

Fran Maier, President, TRUSTeand over 20 other industry, business and policy leaders

About The Online Trust Alliance (OTA) https://otalliance.org/

OTA’s mission is to create and promote business practices and technologies to enhance online trust and the vitality of ecommerce and online services. Formed in 2004 to counter email deception and online abuse, today OTA is a global non-profit organization representing the Internet ecosystem supporting user choice and controls, protection of critical infrastructure, privacy and data governance, promoting marketing best practices, balanced legislation and self-governance.

Open and collaborative, relationships with business, industry, govt and non-governmental agencies are key pillars to helping address online threats. OTA is a member and or partners with leading organizations including the Anti-Phishing Working Group, (APWG), Direct Marketing Association (DMA), Email Experience Council, (eec), Email Service Provider Coalition (ESPC), eco, The German Internet Association, Digital PhishNet, InfraGard, Singapore Direct Marketing Association, US Chamber of Commerce and the London Action Plan (LAP).

For media-related inquiries contact:

Elizabeth Shambaugh

Online Trust Alliance (OTA)

Lizs@otalliance.org

The Death of Internet Anonymity

Contributed By:

Anthony M. Freed

After a year-long analysis of the state of Internet security led by the National Security council, President Obama's cybersecurity coordinator Howard Schmidt has released details of the administration's plan to protect the masses from cyberscumbags by creating a federal system for online identity authentication.

The Financial Times reported that "the creation of a system for identity management that would allow citizens to use additional authentication techniques, such as physical tokens or modules on mobile phones, to verify who they are before buying things online or accessing such sensitive information as health or banking records."

Good intentions aside, implementing a program of this nature could have repercussions far beyond combating phishers and scammers - it could put an end to any notion of online privacy and anonymity.

Electronic payment fraud and identity theft are serious problems, and are a drag on our economy which we could surely do without. But is this really where we need to begin?

Software continues to be produced with vulnerabilities written into the code, confidential information continues to be compromised on a daily basis due to lax security policies and employee unfamiliarity across a spectrum of industries, and information technology continues the shift to outsourced managed services in the cloud.

These realities create more opportunities for data loss on a massive scale.

So why pursue authentication issues as the first order of business? And why is a federally issued "cyber identity" being touted as the optimal solution, over and above a slew of commercial epayment security options already available?

At the risk of seeming like a tinfoil hat wearing paranoid, I ran across an article in the TeamCymru newsfeed from Prison Planet that really struck a nerve.

If you take away all the allusions to evil ulterior motives that pervades the article and simply look at the rant as an examination of some potential consequences from a federal cyber identity mandate, it quickly becomes clear that this may not be the best solution - for all of us Internet users anyway.

The article titled Cybersecurity Measures Will Mandate Government ID Tokens To Use The Internet was written by Paul Joseph Watson and Alex Jones, and asserts that "under the guise of cybersecurity, the government is moving to discredit and shut down the existing Internet infrastructure in the pursuit of a new, centralized, regulated world wide web."

Whether or not the true intention is to "discredit" the Internet, the more than forty cybersecurity related bills before Congress and the elevation of cybersecurity to the Czar level at the White House are clear evidence that the government is moving to "centralize and regulate" the Internet to some degree.

The article goes on to say that "similar legislation aimed at imposing Chinese-style censorship of the Internet and giving the state the power to shut down networks has already been passed globally, including in the UK, New Zealand and Australia."

While "Chinese-style censorship" is not specifically outlined in Schmidt's strategy, the proposal does entail requiring everyone who wants to access the Internet to register with the government, creating yet another layer of bureaucracy at potentially enormous cost to taxpayers.

If the government has to say "yes" to your request for access to the Internet, then they also have the power to say "no."

And there are many other issues that will arise from such a system, like whether the government will monitor and collect data on individual usage, and what steps would be taken to protect the system itself from being compromised.

Even if your access to the web remains unfettered, the requirement to register for and use a federal cyber identity would mean an end to one of the Internet's most lauded features - the ability to remain (relatively) anonymous.

The Prison Planet article claims that "abolition of anonymity is used to chill free speech,"and they may be on to something here.

Though, I think the authors meant "freedom of speech" - but the term "free" might be more apt, as access to a web that is under federal control will undoubtedly cost users more than it does today.

Americans for Tax Reform sees federal control of the Internet as just another example of a backdoor tax that will make access to the Internet more expensive:

"Everyone will pay rates for service that the government sets. And everything passing through your Internet, TV, or phone would become subject to the FCC's consistent regulatory whim..."

Sorry Alex and company, it probably just comes down to the mighty dollar, and the opportunity to garner profits, fees and taxes.

Although, just because someone is paranoid, it does not mean someone else is not really out to get him.

Monday, June 28, 2010

Submit an Idea to the National Strategy for Trusted Identities in Cyberspace

Agreed

1vote

Rank45

Idea#169

This idea is active.

SECURITY »

Authenticate Outside the Browser Space with Card Reader

Which section of the strategy are you posting about?:: Security and Encryption

I suggest that banks issue personal card readers with PIN Pads (PCI 2.1 certified of course) which enable users to swipe their card and enter their PIN in a secure environment "outside the browser space."

If we stop "typing" our sensitive data (usernames, passwords, credit/debit card numbers) into the inherently dangerous browser space, and start swiping so that the data is 3DES DUKPT end-to-end-encrypted, we solve myriad problems. For example, "phishing" would be virtually eliminated because there would be nothing to "phish phor."

For more info on a "low cost" PCI 2.1 Certified PIN Enttry Device designed specifically for e-Commerce use, visit http://PINDebit.blogspot.com or http://ePaymentNews.blogspot.com

The plan is to issue a smart identity card anyway, so how is is going to be "read" without a card reader? In Europe, almost 30% of online banking customers use a card reader to log-in and Kaspersky Labs has called for the mass adoption of peripheral card readers and implied that banks could be huge drivers of this technology.

We don't write our credit/debit card numbers down on a piece of paper and leave it at the retailers POS, we swipe our cards and enter our PINs. Why should it be any different for the web? Again, the root of the problem is that we are typing sensitive data into an insecure browser making it easy for the bad guys to steal our credentials via keylogging or infecting our PC with malware. Common sense says "stop typing and start swiping. If someone's going to "swipe" your card data shouldn't it be you instead of the bad guys?

tags: homeatm pin debit bbpos pin debit blog

Comment

Submitted by You 40 minutes ago