Connect with us

E-Business

Google, Intel, Others Form IEEE’s Software Design Center

Published

on

Google-logo.jpg
Kindly share this post

The IEEE Computer Society, an association for computing professionals, has launched a cybersecurity initiative with the aim of expanding its ongoing involvement in cybersecurity, according to InfoSecurity report.

As part of that initiative, the IEEE Center for Secure Design (CSD) has been formed, welcoming experts from a diverse group of organizations to discuss software security design flaws that they had identified in their own internal design reviews.

Proper security design has been the Achilles’ heel of security engineering for decades, mostly because it is difficult and requires deep expertise beyond simply identifying vulnerabilities, the report contained. 

As part of its coming out celebration, CSD has offered an assessment of the top 10 most significant software security design issues that occur.

“The Center for Secure Design will play a key role in refocusing software security on some of the most challenging open design problems in security,” said Neil Daswani of the security engineering team at Twitter, in a statement. “By putting focus on security design and not just focusing on implementation bugs in code, the CSD does even the most advanced companies in the space a huge service.”

Participants in the foundational workshop included representatives from Twitter; Google; Cigital; HP; the Ministry of Science, Technology and Productive Innovation of Argentina; George Washington University; Intel/McAfee; RSA; University of Washington; Izar Tarandach, EMC; Cigital; Harvard University; and Athens University of Economics and Business.

In terms of security design pitfalls, they came up with the such positions as earn or give, but never assume, trust; use an authentication mechanism that cannot be bypassed or tampered with; authorize after you authenticate and strictly separate data and control instructions, and never process control instructions received from untrusted sources.

They also said, define an approach that ensures all data are explicitly validated; use cryptography correctly; identify sensitive data and how they should be handled; always consider the users; understand how integrating external components changes your attack surface and be flexible when considering future changes to objects and actors.

The group has laid out details on each of these on the website.

For instance, in terms of data validation, CSD explained that software systems and components commonly make assumptions about data they operate on.

It is important to explicitly ensure that such assumptions hold: Vulnerabilities frequently arise from implicit assumptions about data, which can be exploited if an attacker can subvert and invalidate these assumptions.

As such, it is important to design software systems to ensure that comprehensive data validation actually takes place and that all assumptions about data have been validated when they are used.

“Bugs and flaws are two very different types of security defects,” said Gary McGraw, CTO at Cigital. “We believe there has been quite a bit more focus on common bugs than there has been on secure design and the avoidance of flaws, which is worrying since design flaws account for 50% of software security issues. The IEEE Center for Secure Design allows us a chance to refocus, to gather real data, and to share our results with the world at large,” the InfoSecurity Magazine contained.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Kaspersky Launches OT Calculator to Align Cybersecurity Investments with Business Goals

Published

on

Kindly share this post

Kaspersky’s new online tool has been specially developed for industrial organisations to assess the potential costs associated with insufficient operational technology (OT) security.

By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions regarding security investments.

Industrial organisations increasingly depend on interconnected systems, elevating cybersecurity to a critical factor in business resilience and profitability.

According to VDC Research, over 60% of industrial companies last year reported that cybersecurity breaches had led to significant costs. Despite this, a persistent disconnect remains between security teams and executive leadership as security professionals focus on minimising risk, while executives must balance cybersecurity concerns with broader business objectives. This misalignment often results in competing priorities and underfunded security initiatives.

To bridge this gap, Kaspersky has launched the OT Cybersecurity Savings Calculator, an innovative online tool designed specifically for industrial organisations to assess the potential costs of inadequate operational technology (OT) security¹.

The primary aim of this tool is to translate cyber risks into tangible financial metrics and support strategic discussions around priorities and budget allocation. By entering details such as their sector, sub-sector, region, company size, breach history, and existing cybersecurity measures, organisations can estimate their potential cost savings and receive customised, actionable recommendations.

The calculator benchmarks performance against industry peers and highlights the company’s position within the current threat landscape.

“We believe this calculator is a powerful resource for transforming complex cyber risk data into straightforward financial insights. It enables OT leaders, security professionals, and executive teams to develop clear, data-driven business cases and recognise the value of cybersecurity investments. With actionable guidance, it promotes a comprehensive approach to resource management and strengthens overall organisational resilience,” comments Andrey Strelkov, Head of Industrial Cybersecurity Product line at Kaspersky.


Kindly share this post
Continue Reading

E-Business

Local App Developers Rake $1m in Sales in 2025- NOTAP

Published

on

Kindly share this post

National Office for Technology Acquisition and Promotion (NOTAP) has said Nigerian software developers have reached significant milestones with locally made applications generating over one million Dollar in sales across domestic and regional markets.

Local App Developers Rake $1m in Sales in 2025- NOTAP

Dr Obiageli Amadiobi, director-general of NOTAP, said this in an interview with the News Agency of Nigeria (NAN), on Thursday in Abuja.

Amadiobi said the development signified the growing strength of Nigeria’s digital innovation ecosystem and how local innovation powers digital growth.

She said it was also a direct outcome of targeted support initiatives led by NOTAP.

She added that the initiative helped to build capacity, protect intellectual property, and connect developers to market opportunities.

According to the NOTAP boss, the journey from concept to impact started with understanding and securing intellectual property (IP) rights, a step many local innovators missed.

“Whether it’s a literary work, a laboratory invention, or a creative digital product, the process of bringing an idea to life demands immense time, skill, and dedication.

“An innovator might wake up with a solution to a pressing problem; spend months testing and refining it and achieve remarkable results; so it is their fundamental right to patent that creation and claim ownership.

“Without this protection, someone else could easily replicate their work; patent it in their name; and legally control what was built with Nigerian brainpower,” she said.

Amadiobi said that the challenge was compounded by widespread digital piracy and counterfeiting, which hit the ICT sector hardest.

“From copied software applications to replicated content on social platforms like TikTok, unauthorised duplication has become a major barrier to growth.

“We see talented young creators develop unique digital content or tools, only to watch others rebrand and profit from their work within weeks,” she said.

The DG noted that most popular online personalities with distinctive styles often don’t realise they could protect their original contributions through IP registration.

She said that to address these gaps and unlock the value of Nigerian innovation, NOTAP implemented a multi-pronged strategy,- a cornerstone initiative – which is the Local Vendor Policy.

“The Local Vendor Policy mandates that foreign technology firms entering Nigeria partner with domestic counterparts,’’ she said.

Amadiobi said that among the performing apps are solutions addressing critical local challenges such as a mobile health platform that now serves 750,000 users across six states.

“There is also the agricultural marketplace connecting smallholder farmers to buyers; and an educational tool that has been adopted by 200 schools to improve learning outcomes,” she said.

She added that the apps were developed by teams that gained skills and resources through NOTAP’s Local Vendor Policy.

According to her, the policy requires foreign technology firms operating in Nigeria to allocate a portion of their technical service fees to local partners.

“Three years ago, many of these developers were only providing support services to foreign companies.

“But today, they are building their own products that compete globally. 60 per cent of last year’s sales came from other African countries, showing our developers can lead on the continent,” she said.

The D-G explained that the one million dollar figure represented sales from over 50 locally developed apps, with individual developers earning between 5,000 dollars and 80,000 dollars from their products.

“Looking ahead, NOTAP aims to double these sales figures by 2027, with plans to expand support to developers focusing on fintech, renewable energy management, and climate adaptation tools.

“These are the sectors identified as high-growth opportunities for Nigerian innovation,’’ Amadiobi said


Kindly share this post
Continue Reading

E-Business

Gold Hits Record $5,110/Ounce Amid Trump Tariff Threats, Geopolitical Fears

Published

on

Kindly share this post

Gold prices smashed through $5,100 per ounce on Monday, January 26, surging to a historic peak of $5,110.50 as investors rushed into the safe-haven asset amid escalating geopolitical tensions and U.S. policy volatility.

Gold Hits Record $5,110/Ounce Amid Trump Tariff Threats, Geopolitical Fears

Gold

Spot gold climbed 2.2% to $5,089.78 by 0656 GMT, while U.S. February futures rose similarly to $5,086.30. The metal, up 64% in 2025—its strongest annual gain since 1979—has now advanced over 18% year-to-date, fueled by safe-haven buying, anticipated U.S. rate cuts, China’s 14th consecutive month of central bank purchases in December, and massive ETF inflows.

Analysts point to a crisis of confidence in U.S. assets, sparked by President Trump’s erratic threats last week. He retreated from tariffs on European allies to pressure Greenland seizure, then vowed 100% tariffs on Canada over a potential China trade deal and 200% on French wines to push President Emmanuel Macron toward a “Board of Peace” initiative.

“This Trump administration has caused a permanent rupture in global norms, driving everyone to gold as the sole refuge,” said Kyle Rodda, senior market analyst at Capital.com.

A weakening dollar—hit by a rising yen and pre-Fed meeting caution—further boosted gold’s appeal for non-dollar holders, with markets eyeing possible yen intervention.


Kindly share this post
Continue Reading

Trending