Malta Info Security

In 2004 Government launched the Electronic Identity (e-ID) as part of its programme to create a strong eGovernment infrastructure based on sound identity management. Government drives the initiative in collaboration with the private sector by championing a strong and secure authentication mechanism that can evolve from the key to eGovernment to the trust behind eCommerce. (1)

Malta's eGovernment services portal relies on the e-ID (the single most trusted authentication mechanism) to provide a one-stop-shop for all eGovernment services. The portal allows the management of the user’s e-ID profile which contains personal details as well as functions for assignment and delegation. Citizens may “delegate” their eServices to other citizens (who have an e-ID) or to registered organisations. Through www.mygov.mt, the e-ID may also be used by organisations (e.g. businesses and administrations) which may “assign” the management of the eServices to an “Organisation Manager” who has an e-ID.(2)

Over the coming 6 months, the governments e-ID system will be implementing a new password policy which will help increase the security of the system for the benefit of its users.

The effect of this new policy is that you will have to reset your password every 90 days.

The e-ID system requires you to provide a strong password that meets the following criteria.
The password must not contain your full e-ID number, first or last name
The password must be at least 8 characters in length
The password must contain English uppercase characters (A through Z)
The password must contain English lowercase characters (a through z)
The password must contain base 10 digits (0 through 9)
The password must not be the same as any of your previous passwords

Here at maltainfosec.org we thought of providing four easy steps to achieve the above:

1. Read-up on how to choose a secure password
2. Avoid common password pitfalls
3. Access a random password generator and pick a password that's secure and easy to remember
4. Finally, cross-check how secure the password you chose actually is

Read on for some more suggestions on how to choose a secure password..

Continue reading "Malta Electronic Identity Password Information"

Posted by Donald Tabone

A few updates on what's happening on maltainfosec.org

We realised that we tend to retweet a lot of tweets from HelpNetSecurity due to the obvious relevance of their articles --- as such instead of RT their posts, we added a new column to the right of our webpage linking to the RSS article feed of HelpNetSecurity. 'Caps off' to the guys at HelpNetSecurity!

We have new competition rules in the pipeline --- we'll be releasing a short article on this shortly --- thanks to our Sponsors!

Meanwhile, a short note to promote an excellent magazine which has released its fourth issue just today.

Digital Forensics Magazine, one of the fastest growing resources available for IT security specialists, launches its fourth edition. With a global coverage, the print and online magazine is fast establishing itself as the must-have magazine for practitioners and students of digital forensics.

Being a subscriber from issue 1 and a DF tutor on behalf of NCC, another 'caps off' & kudos to this excellent magazine which focuses on very relevant topics hitting the nail on the head by striking the right balance between legal aspect of Information Security and Forensics and technical review content. If you haven't subscribed yet, we recommend you visit their website and sign-up - http://www.digitalforensicsmagazine.com/

Issue 4, released online on August 1st 2010, takes a look at how effective traditional digital forensic techniques are at obtaining forensically sound data in scenarios where computer misuse has been used in attempts to frame the innocent. The DFM team also investigates and details the state of digital forensics in law enforcement around the world identifying which countries are doing well and which have much to do, highlighting the disparity in skills and qualifications between each. In a world that is getting ever more interconnected and one in which international online crime is on the increase, the industry should look to establish and apply minimum standards .

The rest of the article gives some more information and article tasters from Issue 4...

Continue reading "Site news"

Posted by Donald Tabone