RSA: Security firms evolve to tackle new threats
496503
(InfoWorld) - Evolutionary biologists have long theorized that the pace of evolution quickens when a species faces great environmental stress. This idea, of course, is a tough one to âprove,â but we can see examples of it all around us. Just look at the IT security industry, where something akin to drastic environmental change is happening right now: Organized cybercrime groups are punching truck-size holes in enterprise security defenses as regulators, shareholders, and attorneys general are putting pressure on companies to lock down sensitive data. The pressure for change will make this weekâs RSA Security Conference in San Francisco less an industry shindig than a live experiment in evolutionary biology. So walk quietly and keep your field glasses handy to spot some exotic new species in these areas: Anti-Virus Anti-virus technology at both the desktop and gateway is a staple of todayâs enterprise security strategy, as it has been for nearly a decade. But anti-virus vendors such as Symantec, McAfee, and Trend Micro are under intense pressure to keep up with threats such as exploits of previously unknown (âzero dayâ) software application holes, as well as fast-evolving and stealthy Trojan horse and rootkit programs that can ferry sensitive data off of enterprise networks unnoticed. McAfee will use RSA to wade into the data protection market with a clutch of smaller vendors, including Pointsec, Vontu, Provilla, Code Green, and Tizor. McAfee unveiled a new product: DLP (Data Loss Prevention) Host, an end point protection product that will prevent data loss from e-mail, instant messaging, printed documents, USB drives, CD-ROMs, and so on. Smaller players in the AV industry are recognizing the need to offer data leak protection as well. Kaspersky Labs will unveil Kaspersky Open Space Security (KOSS), a suite of products to manage the security of enterprise systems and mobile devices outside the firewall. Kaspersky also offers InfoWatch, a leak prevention service, to customers in Russia and will start rolling it out to the German market in February, CEO Eugene Kaspersky said. Data leak protection is a necessity in a world where threats might come from inside a company, or be targeted at one specific company, or even one machine within a company, rather than from the Internet at large, Kaspersky told InfoWorld. Network Access Control Itâs been more than three years since NAC -- Network Admission Control -- wiggled out of the primordial ooze that was Ciscoâs post-boom inventory glut. Since then, however, the idea of marrying policy enforcement and client health screening to network admission has sprouted legs and started walking around on its own. This yearâs RSA will shine a light on the hordes of NAC solutions out there today, and also on the changing dialogue around NAC, which is as much about policy enforcement after network admission as before it. At the top of the list, Juniper, Cisco, and Microsoft will all be keen to demonstrate third party support for their competing NAC technologies. Microsoft started the ball rolling last week, announcing 100 networking and security companies that support the companyâs Network Access Protection (NAP) technology in Vista and Longhorn Server. Juniper will use RSA to show off integrations between its Universal Access Control NAC technology and providers of end point, network infrastructure, IAM and other content-centric security solutions. A workshop by members of the Trusted Computing Groupâs Trusted Network Connect on Monday will touch on many of the same themes, with demonstrations of how to use trusted computing applications network access control and data protection using the TNC architecture and TPM (Trusted Platform Module) hardware. But a host of other companies in the NAC space will also be displaying their wares. Anti-virus firm Sophos will unveil the first fruits of its purchase of NAC software firm Endforce at the show, and Symantec will announce end point policy enforcement features for its SNAC (Symantec Network Access Control) product.
15635
Virus Throttler, unveiled by HP in February, was one of two new security services developed by company researchers that debuted at the RSA Security Conference.
510256
A survey released Thursday by RSA revealed that about a fifth of corporate wireless access points in London, New York and Paris are open to anyone who taps in. But security is on the upswing everywhere.
633524
Enterprise security decision makers have long been more likely to be swayed by flashy new technologies than by the notion of comprehensive IT restructuring to protect data and other corporate assets, but the situation is evolving rapidly, according to experts participating in Forrester Research's ongoing Security Forum.
35029
Unpatched vulnerabilities may leave computers open to remote attacks.
657408
(Source: Arsenal Digital)  Hackers, disgruntled and careless employees, equipment failure, broken pipes, fires, and natural disasters all pose threats to your data. Savvy IT and business managers have recognized that in order to deal with these challenges, they need to deploy a company-wide data protection infrastructure. Unfortunately, traditional data protection strategies that rely on tape backup are often too expensive and too difficult to manage in today's business environment where an increasing amount of data resides in branch offices and on employees' PCs and laptops. To help IT managers conquer their biggest data protection challenges, Arsenal Digital has released "Solving the Distributed Data Problem: The Rise of Remote Data Protection Services." This report discusses: - The changing corporate environment where more and more business-critical information is generated and stored outside of headquarters - The growing need to protect data for compliance, customer assurance, and business continuity reasons - The advantages of using an on-demand, distributed data protection service that automatically, reliably, and securely backs up off-site PCs and servers.
508318
Security heaven without all the seams Capitalizing on the spate of embarrassing data breaches over the past year, Cisco Systems and RSA/EMC are working together to make it easier for organizations to encrypt confidential information by integrating technologies that currently sold separately.â¦
147798
Companies disclosed a flurry of new security breaches, highlighting the need for IT managers to focus more on securing their data -- not just their corporate networks.
508385
I need to expand my idea of a secure computing ecosystem into the real world. Let me explain.
273123
The annual [&lt;a href="http://www.networkworld.com/news/financial/rsa.html"&gt;RSA&lt;/a&gt;] Conference, expected to draw 15,000 security professionals and more than 325 vendors from around the world to San Francisco's Moscone Center exhibit hall, kicks off this week with keynotes from industry luminaries Bill Gates and Larry Ellison.
758171
Multifactor authentication is all the rage these days, thanks to increasingly sophisticated trojans and phishing attacks and even rootkits aimed at stealing passwords and sensitive data. High-stakes online crime has even spurred financial services companies and some enterprises to consider new, "risk-based authentication" solutions, which examine behavioral patterns and session characteristics to identify rogue users.ADVERTISEMENTIBM Information On Demand 2006Industrial Industry Leaders, please join us at IBM's premier information management global event, IBM Information On Demand 2006, October 15-20, Anaheim, CA. More IBM business and technical solutions content in one place than ever before! Select from  over 800 sessions. Register today!
244754
IT security vendors and analysts reported an increase in the number of cyberattacks being targeted at specific companies doing business online. An ongoing denial-of-service attack against payment processor Authorize.Net is a prime example.
76513
Cisco plans to introduce a range of new, better-integrated security products at the RSA Conference this week.
401192
More companies are turning to strategies that address network management and security at the same time.
43316
British net firms are starting to put in place defences that can spot and stop attacks on websites.
612424
With so much focus on security in the enterprise, it might have been inevitable. A Swiss security research lab is testing the market for zero-day vulnerabilities at an auction site called WSLabi. Security researchers stateside are skeptical.
70508
Side-channel code break Security researchers have developed a new approach to breaking the RSA algorithm that creates new problems for the development of effective rights management software.â¦