InfoSecurity India's First Magazine on Comprehensive IT Security
Menu Bar
InfoSecurity March 2010
Technology News


Websense unveils TRITON architecture

Websense introduced the new Websense TRITON unified security architecture, combining Websense Web, data and email security technologies into a single platform delivering unified content analysis and management. The Websense TRITON architecture integrates the real-time Web content analysis and malware protection of the industry-leading Websense Web Security Gateway with industry-leading Websense Data Security Suite and Websense Email Security to protect organizations and their essential information from blended threats and targeted attacks while easing administration and lowering total cost of ownership.

TRITON is the first security architecture to integrate enterprise-class data loss prevention (DLP) technology into Web security gateway and email security solutions, delivering TruContent intelligence -- the real-time analysis and classification of inbound and outbound content for protection from inbound threats including zero-day Web exploits and malware, and outbound risk such as data loss, acceptable use violations and non-compliance for regulated data.
 
In addition to unifying market-leading Web, data and email security technology, TRITON is the industry’s only security platform to deliver TruHybrid – unifying policy management and reporting infrastructure across on-premise, security-as-a-service (SaaS) and hybrid deployment models. TRITON allows organizations to set persistent security policies across geographically dispersed offices and remote workers, and easily manage those policies from a single management console for both their on-premise and SaaS Web, data and email security solutions.

Back to Top


Juniper Networks licenses IBM Tivoli Netcool software

Juniper Networks and IBM announced an OEM agreement that enables Juniper to license and integrate IBM software into its open application networking platform for partners and clients.

With this news, Juniper plans to integrate IBM Tivoli Netcool service management software into its Junos Space application platform that will allow customers to more easily develop applications that leverage the network.

Expected to be available in third-quarter 2010, Juniper’s new Junos Space Fault Suite will provide enterprises and communication service providers with a turnkey fault and network management solution that is cost-effective, scalable and highly upgradeable. IBM’s Tivoli Netcool software allows customers to gain real-time, centralized monitoring and network discovery capabilities. The software helps service providers operate more effectively by gaining greater network intelligence and business insight into their networking infrastructures.

 Juniper’s Junos Space will include IBM Tivoli Netcool/OMNIbus and Network Manager technology to help service providers manage service quality and reduce operational costs and time-to-market. IBM Tivoli Netcool software helps more than 100 service providers address emerging opportunities in next-generation network transformation, fixed/mobile convergence and IP Multimedia Subsystems deployment.

Back to Top


Unisys announces winners of Cloud 20/20

Unisys India recently announced the results of the Cloud 20/20 Student Technical Paper Contest, designed to encourage innovative ideas and recognize the emerging technical talent from India's leading engineering colleges.

Deepak Karunakaran from International Institute of Information Technology(IIIT) Bangalore was awarded the first prize for his entry on the topic Optimizing Workloads for Cloud Computing, and walked away as the proud owner of an Apple Macbook Air laptop. The first runner-up, Kiran GVR from International Institute of Information Technology (IIIT) Hyderabad, won a Sony Vaio laptop for his entry on the topic Application Modernization, and the second runner-up, Karthik Sankar from National Institute of Technology (NIT), Tiruchirappalli, won a Nokia N97 mobile phone for his paper on the topic Application Development for the Cloud. Apple iPod Nanos were given out as consolation prizes to three other deserving participants.

The three winners have also been offered an internship to explore career opportunities with Unisys India. Almost 1500 submissions were received from more than 570 national educational institutions, including premier institutions such as the Indian Institutes of Technology (IITs), National Institute of Technology (NIT) and Birla Institute of Technology and Sciences (BITS), Pilani.

The technical papers were reviewed by a panel of eminent judges, including: Cloud computing expert Dr. Michael A. Salsburg, Chief Architect, Unisys Technology, Consulting and Integration Solutions; and Renowned academics Dr. Shrisha Rao, Professor at International Institute of Information Technology (IIIT), Bangalore and Dr. D. Janakiram, Professor at Indian Institute of Technology (IIT), Madras.

The contestants went through several rigorous rounds of evaluation, including a technical paper challenge, interviews and final presentations, before the judges selected the winners.

Back to Top


Indusface launches IndusGuard

Indusface announced its new solution IndusGuard (www.indusguard.com). IndusGuard is an innovative zero touch, non-intrusive, cost effective, web based solution for safeguarding business websites, business reputation and online revenues. IndusGuard helps keeping the customer's data and information secure by daily scanning a website for presence of malware, viruses, vulnerabilities, and Web application flaws that open the door to hackers. By leveraging a Security-as-a-Service (SaaS) architecture in the cloud there is no hardware or software to install and the IndusGuard service is instantly accessible allowing customers to begin securing their website within minutes.

With its unique combination of trust-building features, the IndusGuard service delivers value to the end user and its customers. No hardware or software installation is required. It helps activation of the service in quick time. Free 15 day trial offer, which helps understanding of the concept of the service and its usefulness. Strong scanning Engines are there to detect and report application and network vulnerabilities and malwares along with unique Malware Detection capability, which helps being secure from zero day attacks too and protects against blacklisting

IndusGuard annual subscriptions are available at an extremely competitive and attractive cost of INR 25,000 / USD 550 (international pricing) per web site. To sign up for this service, visit http://www.indusguard.com/indusguard_registration.php

Back to Top


HP announces new security services portfolio

HP announced a comprehensive security services portfolio to empower organizations to more effectively manage risk, protect critical infrastructure, safeguard the continuity of operations and maintain regulatory compliance.

HP also introduced two new services in the portfolio: the Cloud Computing Security Assessment and Application Security Center of Excellence (CoE) Services. The portfolio and new services are part of HP Secure Advantage, HP’s portfolio of security products and services. The addition of new services and solutions to the HP Secure Advantage portfolio helps customers establish a comprehensive security strategy encompassing key areas of the technology infrastructure – from the data center to desktops and printers – across the enterprise and via the cloud.

To reduce complexity and manage costs holistically across these areas, the portfolio uses the HP Information Security Service Management (ISSM) reference model, an IT Infrastructure Library (ITIL) based architecture. Through this approach, HP is able to align the technology environment to each business’s objectives.

The new Cloud Computing Security Assessment enables HP to help mitigate security risk as clients adopt cloud computing. This assessment joins HP’s existing Cloud Discovery Workshop and HP Cloud Assure. HP also has launched the new Application Security Center of Excellence (CoE) Services to prevent security attacks that target web applications. This service includes a workshop and assessment services that help organizations define their strategy and develop a roadmap for implementing an application security program across the application life cycle.

Back to Top


Cloud Computing an opportunity for security professionals

During the opening keynote address at RSA Conference 2010, Art Coviello, President of RSA urged his colleagues in the security industry to embrace the challenges and opportunities presented by increasingly virtual infrastructures and adopt a more expansive security vision by focusing on the IT transformations associated with cloud computing.

The 15-year information security veteran noted that having a virtual layer embedded in the technology stack provides the industry with a rare opportunity to get a security ‘do over’ capable of providing even better security than we have in physical infrastructures today. As a result, organizations can shift from infrastructure-centric to information-centric policy and concentrate on what is most important – the information and who gets access – rather than a meaningless perimeter or mere plumbing.

During the address Coviello encouraged the industry to work towards facilitating private cloud infrastructures that are secure, compliant, and governed in a manner that provides confidentiality, integrity, and availability of information.

Coviello concluded, “If we can get security built into the virtual infrastructure from the get-go we can not only have visibility and manageability but risk decision points, and controls everywhere. In short, the cloud will turn the way we deliver security inside out. And information security will enable cloud computing to take full advantage of the Internet turning our current IT models inside out as well. This means we can deliver new waves of efficiency, agility and collaboration for organizations of all sizes.”

Back to Top


Cyberoam strengthens SSL VPN security offerings

Cyberoam has announced the integration of its SSL VPN solution on a virtual VMware platform, besides offering it as a dedicated appliance and through an installer on customer machines. With this launch, Cyberoam is among very few players in the remote office security solutions space that run separate SSL VPN platforms to provide greater flexibility to organizations in purchasing solutions that meet their individual security guidelines and infrastructure.

Cyberoam’s SSL VPN solutions allows clientless browser-based access to geographically-distributed networks through common web browsers, with an “in-office” experience for internal applications including Microsoft Outlook, Intranets, web applications, FTP and more. Also, local desktops and laptop can securely traverse existing UTMs/firewalls in the network to access remote data services, without any risk of exposing the confidential information to hackers.

These solutions deliver high performance with strong end-point security and granular access control for enterprises, helping them remain compliant with regulatory requirements. Identity-based logs of network access enable organizations to securely extend their networks with complete knowledge of “who is remotely accessing what in their network”. With client-less configuration, they offer high ROI, high performance and secure remote access.

Back to Top


IBM X-Force report reveals dramatic rising of threats

IBM released results from its annual 2009 X-Force Trend and Risk Report. The report's findings show that existing threats such as phishing and document format vulnerabilities have continued to expand, even as clients have generally made strides to improve security.

The X-Force report reveals three main threats that demonstrate how in 2009 attackers increasingly targeted people using the Internet for monetary gain or data theft. The appearance of new malicious Web links has skyrocketed globally in the past year. Phishing attacks or sending email that falsely claims to be from a legitimate organization, also increased dramatically in the second half of 2009. It surpassed the monthly volume seen in 2008, with activity coming from countries that had not previously been in the game.

Vulnerability disclosures for document readers and editors also continued to soar. Of the two predominant types of document vulnerabilities - office documents including spreadsheets and presentations and Portable Document Format (PDF) documents - the latter has continued to dominate the charts.

The X-Force research team has been cataloguing, analyzing and researching vulnerability disclosures since 1997. With more than 48,000 security vulnerabilities catalogued, it has the largest vulnerability database in the world. This unique database helps X-Force researchers to understand the dynamics that make up vulnerability discovery and disclosure.

For more security trends and predictions from IBM, including graphical representations of security statistics, download the 2009 IBM X-Force Trend and Risk Report.

Back to Top


Home   |   Current Issue   |   Archives   |   Subscription   |   Advertisement   |   Contacts

© 2006-07 'InfoSecurity' magazine. All rights reserved.
Website designed, developed and maintained by Fanatic Media