[Sigia-l] Security Questions/Methods

[A. Simon Mielniczuk]

I'd like to add to the question. In addtion to security question wording,
authentication and registration schemes, are there other IA security focused
practices that decrease the vulnerability of online systems and especially
the data behind them? I'm not including the obvious programming related
responses. Do certain structural and page arrangements, designs, content
messages add or detract from security risks?

__________________________________
A. Simon Mielniczuk - Solutions Architect
ITS Co-operative Inc. Toronto, ON. Canada
www.itscooperative.com
416.828.2118 - simon at itscooperative.com

 

-----Original Message-----
From: sigia-l-bounces at asis.org [mailto:sigia-l-bounces at asis.org] On Behalf
Of nathan at nathancurtis.com
Sent: January 27, 2006 9:38 AM
To: sigia-l at asis.org
Subject: [Sigia-l] Security Questions/Methods

Know of any available non-proprietary research, patterns, or case studies on
optimal security questions and methods for site registration,
authentication, and forgot username/password?

...