QuietMove http://www.quietmove.com Mon, 02 Jun 2008 03:16:53 +0000 http://wordpress.org/?v=2.1.2 en Adam Muntner speaking about web application security threats at 3rd Annual Arizona Entrepreneurship Conference http://www.quietmove.com/events/adam-muntner-speaking-about-web-application-security-threats-at-3rd-annual-arizona-entrepreneurship-conference/ http://www.quietmove.com/events/adam-muntner-speaking-about-web-application-security-threats-at-3rd-annual-arizona-entrepreneurship-conference/#comments Mon, 02 Jun 2008 02:47:15 +0000 admin http://www.quietmove.com/events/adam-muntner-speaking-about-web-application-security-threats-at-3rd-annual-arizona-entrepreneurship-conference/  Arizona Entrepreneurship Conferences are designed to help build the critical mass of the Arizona entrepreneurial community.

They are an exciting way for entrepreneurs to meet each other, connect with resources, and gather information.

All proceeds benefit the Opportunity Through Entrepreneurship Foundation.

The Third Annual Arizona Entrepreneurship Conference will be held on
November 19th, 2008 from 7:30am - 7pmAll prior conferences have sold out, so be sure to sign up now (and you will also get the “Early Bird” special discount!)

http://www.azentrepreneurship.com/

]]> http://www.quietmove.com/events/adam-muntner-speaking-about-web-application-security-threats-at-3rd-annual-arizona-entrepreneurship-conference/feed/ Adam Muntner speaking at Southwest Security Conference 2008 http://www.quietmove.com/events/adam-muntner-speaking-at-southwest-security-conference-2008/ http://www.quietmove.com/events/adam-muntner-speaking-at-southwest-security-conference-2008/#comments Wed, 23 Apr 2008 16:49:18 +0000 adam http://www.quietmove.com/events/adam-muntner-speaking-at-southwest-security-conference-2008/ http://phoenix.issa.org/conference2008/index.htm

Advancing your education at an unbeatable price!

• Learn from leading edge industry professionals
• Network with peers in the security community
• Included: Breakfast, lunch, snacks
• More than 20 speakers!!
• Attendee packet
• Lots of door prizes!
• Vendor Expo
• CPE credits
• State of the art venue
• Convenient location close to airport, downtown and Interstate 10.
• Free parking

Adam Muntner, Managing Partner of QuietMove, is presenting a talk entitled ” Rethinking the Perimeter.”

]]> http://www.quietmove.com/events/adam-muntner-speaking-at-southwest-security-conference-2008/feed/ PCI Security Standards Council Clarifies Web Application Security Requirements http://www.quietmove.com/news/pci-security-standards-council-clarifies-web-application-security-requirements/ http://www.quietmove.com/news/pci-security-standards-council-clarifies-web-application-security-requirements/#comments Wed, 23 Apr 2008 15:46:19 +0000 adam http://www.quietmove.com/news/pci-security-standards-council-clarifies-web-application-security-requirements/ The clarification document is available here:  https://www.pcisecuritystandards.org/pdfs/infosupp_6_6_applicationfirewalls_codereviews.pdf

A few comments:

We are very pleased that the document highlights the value of defense in depth strategies.

While it specifies that testing can be performed by internal resources, so long as they are independent from the development organization, it also clarifies the role of 3rd party testing organizations like QuietMove:

 ”While the final sign-off/approval of the review/scan results must be done by an
independent organization, it is recommended that reviews and scans also be performed
as early as possible in the development process. Tools should be made available to
software developers and integrated into their development suite as much as practical.”

The Web Application Firewall product selection and configuration criteria are also defined in depth.

Bravo to PCI SSC for clarifying these requirements.

]]> http://www.quietmove.com/news/pci-security-standards-council-clarifies-web-application-security-requirements/feed/