Category Archives: Security
Identity Evolves [AusCERT Conference Presentation Abstract]
This is the abstract for my paper that has been accepted in the main program...
Identities are brittle but crystal clear
This blog was updated and re-posted on 12 June 2012. I have been blogging and...
Simplifying assumptions for digital identity
I have criticised federated identity for being over-engineered, and described the Laws of Identity as...
An improved frame for understanding Digital Identity
I’ve always been uneasy about the term “ecosystem” being coopted when what is really meant...
Total cost of ownership of Multiple Identities
Federated Identity and before that, Single Sign On (SSO), are responses to the password plague....
Policy fads and policy failures
In cyber security, user awareness, education and training have long gone past their Use By...
No such thing as a passport
What do you call it when a metaphor or analogy outgrows the word it is...
Over-engineering a No-No except in Digital Identity!
Why should digital identity be so tricky? The past decade is littered with earnest initiatives...
Its not for nothing we call them Identity Silos
Interoperability slides off the tongue as a must-have in identity systems but is it really self-evidently...
There is no algorithm for good management
There is a malaise in security. One problem is that as a “profession”, we’ve tried...