October 2019 - nexa - server-nexa.polito.it

Tavola ISO 25000 sui nuovi standard di prodotto del software, web e app, dati e servizi IT

by Antonio Vetro'

Segnalo, per chi fosse interessato alla tematica, che il 30 ottobre p.v. a Roma si terrà il sesto evento ISO/IEC JTC1 SC7 WG6 in Italia: "Tavola rotonda ISO 25000 sui nuovi standard di prodotto del software, web e app, dati e servizi IT” organizzato da UNINFO con il patrocinio di AGID. Presentazione dell’evento (contiene link per la registrazione) https://www.uninfo.it/index_pages/news/eventi/1564580989144.html <https://www.uninfo.it/index_pages/news/eventi/1564580989144.html> Programma: https://www.uninfo.it/index_pages/news/eventi/docs/1564580989144_EventoTavo… <https://www.uninfo.it/index_pages/news/eventi/docs/1564580989144_EventoTavo…> In particolare la sessione "Studi, sperimentazioni, standardizzazioni e attuazioni” tratterà di temi spesso toccati in questa lista. av

Oct. 2, 2019

educazione alla cybersafety

by Matteo Vabanesi

Forse un po' naive (e un po' capitalismo della sorveglianza), ma in Olanda ho trovato un'interessante iniziativa sull'educazione alla cybersafety, proposta dal gruppo Cybersafety4u In allegato un paio di immagini, il link all'iniziativa: https://cybersafety4u.nl/ Un saluto a tutti -- Matteo Vabanesi Giornalista +39.3391498932 vabanesimatteo(a)tiscali.it Con Tiscali Mobile Smart 30 hai minuti illimitati, 30 Giga e 100 SMS a soli 7,99€ al mese. L'attivazione è gratis e disdici quando vuoi. http://tisca.li/smart30

Oct. 2, 2019

Re: [nexa] Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide Released

by Aldo Pedico

Suggerisco di scaricare questi 3 volumi, in versione finale, del NIST su:"Cybersecurity Framework Manufacturing Profile Low Impact Level Example - Implementations Guide". Riporto per chiarezza una parte dell'abstract. "This guide provides general implementation guidance and example proof-of-concept solutions demonstrating how available open-source and commercial off-the-shelf (COTS) products could be implemented in manufacturing environments to satisfy the requirements in the Cybersecurity Framework (CSF) Manufacturing Profile Low Impact Level. ...." Cordialità, Aldo Pedico Mobile +39.3482244924 a.pedico(a)teleion.it<https://owa.teleion.it/OWA/redir.aspx?SURL=DUZCqLdUdoandbWpBmWHxyBfsbaJ9ubk…> TELEION s.r.l. Via Ferrero 31 – 10098 Rivoli (TO) www.teleion.it<http://www.teleion.it> ________________________________ From: NIST Computer Security Division <csrc.nist(a)service.govdelivery.com> Sent: martedì 1 ottobre 2019 16:10 To: Aldo Pedico Subject: Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide Released An Implementation Guide for the Cybersecurity Framework (CSF) Manufacturing Profile Low Impact Level has been developed for manufacturers managing cybersecurity risk that is aligned with manufacturing sector goals and industry best practices. Many small and medium-sized manufacturers have expressed challenges in implementing a standards-based cybersecurity program. The Guide drives the CSF Manufacturing Profile to practice and will enable manufacturers to select and deploy cybersecurity tools and techniques that best fit their needs while addressing the demanding system operational performance, reliability, and safety requirements. The Guide provides general implementation guidance (Volume 1) and two complete example proof-of-concept solutions demonstrating how available open-source and commercial off-the-shelf products can be implemented in manufacturing environments to satisfy the Guide’s requirements. Also included are the complete example proof-of-concept solutions with measured network, device, and operational performance impacts for a process-based manufacturing environment (Volume 2), and a discrete-based manufacturing environment (Volume 3), as well as example proof-of-concept cybersecurity policy and procedure documents. The volumes of this Guide (NISTIR 8183A, Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide) include: * Volume 1, General Implementation Guidance * Volume 2, Process-based Manufacturing System Use Case * Volume 3, Discrete-based Manufacturing System Use Case The CSF Manufacturing Profile—specified in NISTIR 8183—provides a voluntary, risk-based approach for managing cybersecurity activities and cyber risk to manufacturing systems. The Manufacturing Profile is meant to complement but not replace current cybersecurity standards and industry guidelines that the manufacturer is embracing. Publication details for NISTIR 8183A: *Volume 1: https://csrc.nist.gov/publications/detail/nistir/8183a/vol-1/final<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> *Volume 2: https://csrc.nist.gov/publications/detail/nistir/8183a/vol-2/final<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> *Volume 3: https://csrc.nist.gov/publications/detail/nistir/8183a/vol-3/final<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> Related publication: *NISTIR 8183, Cybersecurity Framework Manufacturing Profile: https://csrc.nist.gov/publications/detail/nistir/8183/final<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> __________ Notification Sent By: NIST Computer Security Division (CSD) P. O'Reilly, NIST CSD webmaster-csrc(a)nist.gov<mailto:webmaster-csrc@nist.gov> (Attn: NISTIR 8183 Authors) ________________________________ [NIST]<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> Questions? Contact Us<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> STAY CONNECTED: [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/6492…] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/6492…] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/6493…] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/6492…] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/6493…] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> SUBSCRIBER SERVICES: Manage Preferences<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> | Unsubscribe<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> | Help<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…> ________________________________ If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…>. Technical questions? Contact inquiries(a)nist.gov<mailto:inquiries@nist.gov>. (301) 975-NIST (6478). This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, MD 20899 · 301-975-6478 [GovDelivery logo] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZ…>

Oct. 1, 2019

Fwd: Corte UE: Per l’installazione di cookie è necessario il consenso attivo degli utenti di Internet (sentenza C-673/17)

by Marco Ciurcina

Di interesse per la lista. Penso che obblighi a rivedere (e già oggi a rileggere in senso molto restrittivo) il disposto del provvedimento del Garante dell'8.5.2014 (dove dice che "la prosecuzione della navigazione mediante accesso ad altra area del sito o selezione di un elemento dello stesso (ad esempio, di un'immagine o di un link) comporta la prestazione del consenso all'uso dei cookie"). m.c. --------- Messaggio inoltrato --------- Oggetto: Corte UE: Per l’installazione di cookie è necessario il consenso attivo degli utenti di Internet (sentenza C-673/17) Data: martedì 1 ottobre 2019, 07:43:37 CEST Da: Cavassa Marilena <Marilena.Cavassa(a)curia.europa.eu> A: Pappalettere Eleonora <Eleonora.Pappalettere(a)curia.europa.eu> Per l’installazione di cookie è necessario il consenso attivo degli utenti di Internet Una casella di spunta preselezionata è pertanto insufficiente (Sentenza nella causa C-673/17, Bundesverband der Verbraucherzentralen und Verbraucherverbände ̶ Verbraucherzentrale Bundesverband eV / Planet49 GmbH ) Immagini della pronuncia della sentenza sono disponibili su «Europe by Satellite<http://ec.europa.eu/avservices/ebs/schedule.cfm?page=1&sitelang=en>» • (+32) 2 2964106 In allegato il comunicato stampa in italiano. Marilena Cavassa Assistente Direzione della Comunicazione Unità Stampa e Informazione [cid:image003.png@01D577A8.411194E0] Rue du Fort Niedergrünewald L-2925 Luxembourg curia.europa.eu<https://www.curia.europa.eu/> Tél : +352 4303 3552 Email : marilena.cavassa(a)curia.europa.eu<mailto:marilena.cavassa@curia.europa.eu> [twitter_on]<https://twitter.com/eucourtpress?ref_src=twsrc%5etfw> [youtube_on] <https://www.youtube.com/channel/UCTfyrAlsJRZF1nGLLgnDiMA> [cid:image008.png@01D577A8.411194E0] <https://itunes.apple.com/lu/app/cvria/ id1099088434?l=fr&mt=8> [cid:image009.png@01D577A8.411194E0] <https:// play.google.com/store/apps/details? id=eu.europa.publications.cjeu&hl=en&pcampaignid=MKT-Other-global-all-co- prtnr-py-PartBadge-Mar2515-1> ------------------------------------------

Oct. 1, 2019

Intelligenza artificiale e riconoscimento facciale: perché la società della sorveglianza digitale non è più accettabile – Valigia Blu

by J.C. DE MARTIN

Di Fabio Chiusi (fellow Nexa nonché speaker al Festival della Tecnologia di Torino, 7-10 novembre, www.festivaltecnologia.it) https://www.valigiablu.it/riconoscimento-facciale-intelligenza-artificiale/ (Sent from my wireless device; please excuse brevity and typos (if any))

Oct. 1, 2019