Paul Melson's Blog

OK, I'm about to do something dumb and talk about cryptography and cryptanalysis. I'm an expert in neither of these things. But d...

A colleague of mine sent me this article , which should be of interest to pretty much everyone in the health care or human resources fields....

So, I can't decide what this study really means. The short version is that Deloitte did a survey of security & privacy staff from ...

Symantec bought Vontu . Never heard of Vontu? They are an established player in the data-leakage security niche. Primarily deployed on ne...

Palisades hospital in New Jersey has suspended 27 employees for accessing actor George Clooney's medical record after he was treated th...

According to a German court it is. (via Eric Fitzgerald's blog ) The remedy that this ruling implies - not logging IP addresses to a w...

So I commented yesterday about a post Richard made about outcome-based security metrics. In short, Richard likes outcome-based security me...

HIPAA isn't new, but - and maybe because I work in an environment where it's the primary regulatory standard - I regularly have con...

So, one of my guilty pleasures is I like to read and answer the Information Security questions people ask on LinkedIn. It's like infose...

Lots and lots of people have declared HIPAA irrelevant and ineffective because of the lack of direct federal oversight and the percepti...

Dr. Anton Chuvakin was kind enough to share with me a copy of his 2-part paper on database log analysis, which was published in CSI Alert N...