Liudvikas Bukys

Wireless Networks Lure Hackers. ZDNet Jul 12 2001 4:33PM ET
More WEP weaknesses
[via Moreover Computer security news]

ZDNet – U.S. military backs open-source security. Continuing its support of open-source operating systems, the U.S. Department of Defense granted $1.2 million to a community project aimed at adding advanced security features to FreeBSD, an open-source variant of Unix. [Privacy Digest]

Can WinXP Product Activation be reverse engineered?. It’s beginning to look possible… [The Register]

Security firms asleep at the firewall [via Security Focus]

Security Issues: Hackers rootkit for NT. CNET Jul 5 2001 2:09AM ET [Computer security news]

Introduction to Network-Based Intrusion Detection Systems Using Snort (paper) [Security Focus]

Computerworld: Visa sets technical specifications for online authentication. Visa International Inc. this week announced the worldwide rollout of technical specifications designed to support payment authentication services for online credit card transactions while leaving retailers free to use their own mechanisms for processing payments. [Tomalak’s Realm]

Defective Sign & Encrypt in S/MIME, PKCS#7, MOSS, PEM, PGP, and XML (paper) [Security Focus]

Nokia Unveils the Industrys First Multi-Gigabit Platform Delivering Breakthrough Check Point FireWall-1 Throug. HUGIN Online Jun 26 2001 4:49AM ET [Computer security news]

Guidelines for Academic Medical Centers on Security and Privacy:
Practical Strategies for Addressing the
Health Insurance Portability and Accountability Act (HIPAA)

The privacy and security regulations stemming from the Health
Insurance Portability and Accountability Act of 1996 (HIPAA) have
captured the attention of the healthcare community. The cumulative cost
of compliance with these regulations is variously estimated to cost from
somewhere between the equivalent of Y2K preparation for the community
to many times that amount. A recent study commissioned by the American
Hospital Association placed costs at $22.5 billion over the next five
years. To assist medical schools and teaching hospitals in addressing
the new regulations, The National Library
of Medicine (NLM) funded a series of workshops engaging the membership
of several organizations: AAMC’s Group on Information
Resources, Internet 2, Object
Management Group, and Workgroup on Electronic
Data Interchange. The workshop participants analyzed current health
information security and privacy polices, made recommendations, and developed
this resource of best practices for healthcare security and privacy. The
Guidelines for Academic Medical Centers on Security and Privacy: Practical
Strategies for Addressing the Health Insurance Portability and Accountability
Act (HIPAA) addresses the unique concerns of academic medical centers.

The traditional tripartite mission – patient care, education, and research
– distinguishes academic medical centers (AMC) from their peer institutions,
which focus primarily on patient care services. In the past two decades
the ability of academic medical centers to balance and sustain these multiple
missions has been severely tested by changes in health care financing
and regulation. The implementation of the HIPAA regulations will create
barriers unique to these environments. Because of their multiple missions
and collegial concerns, AMCs have come together in an effort to create
the guidelines – to ensure the privacy, security and confidentiality of
patient information.

[Association of Americal Medical Colleges (AAMC)]