<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel>
        <title>Certivox RSS-feed</title>
        <link>http://localhost/dd/</link>
    <description></description><language>en-en</language><generator>Blog RSS export running on TYPO3 4.3.0</generator><docs>http://blogs.law.harvard.edu/tech/rss</docs><copyright>%Y Certivox</copyright><managingEditor>example@example.org (Example User)</managingEditor><webMaster>example@example.org (Example User)</webMaster><image>
        <title>Certivox RSS-feed</title>
        <url>http://www.example.org/typo3conf/ext/t3blog/icons/rss.png</url>
        <link>http://localhost/dd/</link>
    <description></description></image><item>
    <title>Introducing the CertiVox API Beta</title>
    <author> (Tim Carmichael)</author>
    <link>http://www.certivox.com/blog/blog-post/2010/04/18/introducing-the-certivox-api-beta.html</link>
<guid>http://www.certivox.com/blog/blog-post/2010/04/18/introducing-the-certivox-api-beta.html</guid>
<pubDate>Sun, 18 Apr 2010 00:00:00 +0200</pubDate>
<description> The CertiVox Service is built entirely on the CertiVox API. Once you are granted access, you can actually build your own client, integrate CertiVox functionality into your application, or into othe</description><content:encoded><![CDATA[ The CertiVox Service is built entirely on the CertiVox API. Once you are granted access, you can actually build your own client, integrate CertiVox functionality into your application, or into other 3rd party applications like Microsoft SharePoint.
Because the API is so pervasive in our application you must have a developer token to be able to take advantage of the functionality, but once you have a token you can use this in your own applications and call any available CertiVox function.
So what can you do with the API? Well you can perform any of our functions by using the underlying CertiVox API call such as Protect() which will take a set of parameters defining the documents being protected, the recipients, password, sunrise and sunset, etc. The web service simply receives the call and validates it before passing it to the client to process.
The API goes beyond just customising and integrating the creation of secure documents media, you can also query account data such as document usage data and audit information.
What do you need to start using the API beta?• A developer Token• The client • A valid CertiVox account
Now you can start using Certivox functionality the way you want to.]]></content:encoded></item><item>
<title>A Different Kind of Information Security Company</title>
<author> (Brian Spector)</author>
<link>http://www.certivox.com/blog/blog-post/2010/02/22/a-different-kind-of-information-security-company.html</link>
<guid>http://www.certivox.com/blog/blog-post/2010/02/22/a-different-kind-of-information-security-company.html</guid>
<pubDate>Mon, 22 Feb 2010 12:43:00 +0200</pubDate>
<description> When my friends and I thought about the company we wanted to create, we all agreed we would want it to be the opposite of most I.T. companies in existence today.First, we wanted to be free from the </description><content:encoded><![CDATA[ When my friends and I thought about the company we wanted to create, we all agreed we would want it to be the opposite of most I.T. companies in existence today.First, we wanted to be free from the “old school” business model that most enterprise software companies occupy. That is, let’s market heavily using traditional and expensive means; staff a costly enterprise sales force that generally does a poor job of representing the customer’s interests, make a sale, and move on to the next opportunity. From experience, we know this is poor way to align your organization to the objectives of your customers. The traditional business model found in the information technology industry can distort the relationship between a vendor and customer, sometimes to the point of being adversarial.We also know from experience, working at these types of companies, after a while, it's simply not fun. For me, it was a rare moment when I could walk away with a significant sense of doing something worthwhile. To us, selfishly perhaps, this is our biggest driver. We wanted to create an information security platform that had a direct relationship with the customers and communities it served and protected, that lived and died by how well it solved the needs of customers and communities. We also felt that we had to reflect the new ways people were communicating, how online work and social lives are fusing together, and leverage the connectivity of these new networks.By taking the approach that CertiVox is serving communities of business professionals, consumers and publishers, we believe we can attach our existence directly to solving the needs of those groups, and do it in a more meaningful and productive way.As an example, CertiVox will make available, for free, API access under various licenses so that members of those communities using our software can implement their own capabilities, thereby avoiding the bottlenecks found in traditional development cycles that plauge I.T. vendors.Secondly, our platform will always have a free version in addition to our paid subscriptions. In one sense, it's really altruism as we truly believe that privacy, securing information easily and productively, shouldn't be the domain of a few. I don't agree with Mark Zuckerberg or Scott McNealy; Privacy, to me, isn't an outdated concept. This really hit home for me when we celebrated the birth of our first born a few months ago. I think anybody with kids will agree with me on the need to retain these basic rights in our society. Leaving altruism aside, we still plan to recoup our costs. On free accounts, CertiVox will do this from sponsorships and branding on top of the secured and packaged content apps sent through our network. In another post, I will describe this in detail so it's clear how this model works, without sacrificing any of the privacy and security that our customers, both free and premium, will come to expect.Further, CertiVox won’t be investing heavily in traditional sales and marketing activities. We just simply don’t believe in them, and you probably don’t believe the messages. What we will be investing heavily in is technology and programs that can enhance our ability to listen and react to the feedback of the communities we serve.If we do our jobs right, we’ll deliver the platform that communities trust and will use, and we will be allowed to carry on. If not, the communities will leave us, and we will cease to exist. CertiVox won’t be dependent on how successful we are at selling marketing messages to potential customers; CertiVox will be dependent on serving and protecting communities.Finally, CertiVox offers the same Marketing Manager platform to its Professional subscribers that it uses to manage our own brand and sponsorship runs on free accounts. This means a distributor of protected content apps who uses the CertiVox platform has an opportunity to remove all costs associated with information security, content delivery and digital rights management. In fact, by leveraging the content-use analytics in the dashboard, and by running branding and advertising sponsorships on their own protected content apps, they can turn information security into a profit center. Now wouldn't that be cool?]]></content:encoded></item><item>
<title>The CertiVox Secure Content App Protection Process</title>
<author> (Tim Carmichael)</author>
<link>http://www.certivox.com/blog/blog-post/2010/02/21/the-certivox-secure-protection-process.html</link>
<guid>http://www.certivox.com/blog/blog-post/2010/02/21/the-certivox-secure-protection-process.html</guid>
<pubDate>Sun, 21 Feb 2010 00:00:00 +0200</pubDate>
<description> So what is the process that occurs when you actually secure documents and media using CertiVox Secure Content Apps? Firstly the service is really two parts:• Web based control and auditing• C</description><content:encoded><![CDATA[ So what is the process that occurs when you actually secure documents and media using CertiVox Secure Content Apps? Firstly the service is really two parts:• Web based control and auditing• Client based protection
Once you have signed up for the CertiVox service, you can download the client. This performs the actual content app protection and packaging process locally on your machine. This is so that your content never leaves your machine or your control during the critical protection / encryption process. When you are ready to protect and have selected your target, the web service records the settings you have chosen and creates a special instruction to send to the client telling it what to do and who the recipients are.
These specially encrypted and single use parameters instruct the clients how to proceed and begin the protection process. Once complete the audit information is confirmed, and the secure content app is ready for distribution. The content app can be distributed many ways including physical media, email or a file storage location such as Amazon S3.
Going on beyond the protection process takes us to the CertiVox Network, a secure XMPP based membership system to help certify and deliver the access and authorisation information as well as to notify the recipient of the location of the secure content app. We’ll look at the Certivox Network in more detail in a future blog.]]></content:encoded></item><item>
<title>The inspiration behind CertiVox</title>
<author> (Tim Carmichael)</author>
<link>http://www.certivox.com/blog/blog-post/2010/01/01/the-inspiration-behind-certivox.html</link>
<guid>http://www.certivox.com/blog/blog-post/2010/01/01/the-inspiration-behind-certivox.html</guid>
<pubDate>Fri, 01 Jan 2010 03:37:00 +0200</pubDate>
<description> The inspiration behind CertiVox So why did the CertiVox technology come into being?Well simply put, I was continuously frustrated how presentations and ideas I presented to customers or partners wou</description><content:encoded><![CDATA[ The inspiration behind CertiVox So why did the CertiVox technology come into being?
Well simply put, I was continuously frustrated how presentations and ideas I presented to customers or partners would end up being copied and sometimes shown to me by other customers, received from another company!
So I wanted to achieve two goals; Firstly, to make my content traceable so that when it turned up somewhere else I had a way to identify where my leak occurred, i.e., classic DLP; Secondly, to have better control on the content as to when it could be viewed and who by, i.e. authentication and authorization.
The first incarnation was Rhapzode, a compiler for PowerPoint. This helped prove the technology and build in the right content type support. The Rhapzode technology was extended to handle other content types like Windows Media, MPEG, Flash and PDF.
This was then extended to Document Protector, which we wanted to bring on as an online SaaS based solution which allowed users to manage their content dynamically, tracing access down to slide/page/frame level and added policy based capabilities such as redaction.
CertiVox finally closed the loop on the online solution by utilizing XMPP, a secure messaging system to manage the delivery of authentication data and effectively create a spam free trusted network for publishing secure content.
Incidentally it appears we weren’t alone in becoming fans of XMPP, Google built Wave on top of the XMPP protocol as well (Google Wave Federation Server).
Today, I can feel pretty comfortable believe that CertiVox is the most advanced Web 2.0 security service for document and media content protection. Not just from a technology standpoint, but from a usability factor as well. We will see shortly! ]]></content:encoded></item><item>
<title>Using Auditing in CertiVox</title>
<author> (Tim Carmichael)</author>
<link>http://www.certivox.com/blog/blog-post/2010/02/15/using-auditing-in-certivox.html</link>
<guid>http://www.certivox.com/blog/blog-post/2010/02/15/using-auditing-in-certivox.html</guid>
<pubDate>Mon, 15 Feb 2010 00:00:00 +0200</pubDate>
<description> Using Auditing in CertiVox One of the great benefits of the CertiVox service is that you can audit the delivery, usage and access of your secured documents and media as they are consumed through your</description><content:encoded><![CDATA[ Using Auditing in CertiVox One of the great benefits of the CertiVox service is that you can audit the delivery, usage and access of your secured documents and media as they are consumed through your CertiVox secure content app. This is a massive benefit when you are trying to perform forensic investigation on data leaks, but it’s also a great way to understand how your documents and media are used. For example: A training course which has been secured will reveal which pages have been viewed, how often and for how long. This can yield valuable metrics to help you understand where people have spent their time because of interest or possibly because the information was not clear.
The auditing information can then be used as a basis for targeted analysis and user surveying, focusing on the areas you already know are hot spots of access. You can also see what information was either ignored or passed over quickly and perform similar feedback gathering.
By using the API you can also automate this process so that you can perform real-time and long lasting analytics which are not only relevant but accurately reflect the true usage of your documents and media through the secure content app.]]></content:encoded></item></channel></rss>