Skybox updates risk management wares
691695
BOSTON - New software from Skybox Security will help companies monitor their networks and comply with U.S. federal and state data security regulations, and even help them prepare networks for dangerous new Internet worms, according to the company.
571214
The software maker has released a downloadable version of its financial package for consumers.
323582
STAF Version 3.2.0 is now available.  The Software Testing Automation Framework (STAF) is a framework designed to improve the level of reuse and automation in test cases and test environments. The goal of STAF is to provide a complete end-to-end automation solution for testers.   You can find more information and download the binaries from the official STAF web site at http://staf.sourceforge.net/ .  There are several new features in this version, including:  - Added support for Windows Vista.  STAF now works on Windows Vista when logged on as a standard user or an administrator with User Account Controls (UAC) enabled.  - Upgraded the STAF InstallShield installers to use InstallShield MultiPlatform 11.5  There are also many bug fixes in this version.  In particular, note that the libstdc++ and libgcc libraries are no longer packaged in the Linux and Solaris STAF installers.  For more information on this, see section "3.13 Operating System Library Compatability (Linux/Solaris)" in the STAF User's Guide at http://staf.sourceforge.net/current/STAFUG.htm#HDROSCOMPATIBILITY.  Here's a summary of all the changes made:  ------------------------------------------------------------------------------- History Log for STAF        Legend:    - Fixes    + Features    = Internal changes    * Changes required to migrate from one release to another  -------------------------------------------------------------------------------  Version 3.2.0: 10/31/2006    - Fixed install failure on Windows Me and Windows NT (Bug #1524852)   - Fixed a problem where STAFProc fails to start on Linux PPC64-32 / IA64,     and HP-UX IA64-32 with a SIGSEGV due to a connection provider name     resolution issue (Bugs #1556689 and #1371304)   - Fixed a problem where the Process service's temp file creation for stdout/     stderr may fail if the default data directory is overridden (Bug #1556715)   - Updated the STAF FAQ to add information about running the Windows ftp     executable via a PROCESS START request (Bug #1546780)   - Updated the STAF User's Guide to make sure that we document all the options     for PROCESS service requests that resolve variables (Bug #1548850)   - Enabled the keepalive option for client sockets in the TCP connection     provider to fix a problem where some copy requests that had failed with     RC 22 were never being removed from the output of FS LIST COPYREQUESTS on     the "TO" machine (Bug #1559514)   - Improved the performance for C++, Python and Jython marshall and     formatObject methods and for the Java marshall method (Bug #1559277)   - Fixed a typo in C++ example for creating a STAF handle (Bug #1567835)   - Added info to the STAF FAQ about SHLIB_PATH and "set -u" in the HP-UX     profile (Bug #1569958)   - Fixed problems in C++, Java, Python, and Jython marshall and formatObject     methods handling maps with non-existant map classes (Bug #1437654)   - Fixed problems in Python and Jython marshall and formatObject methods to     handle a map class object that doesn't contain all the keys defined in its     map class definition (Bug #1280017)   - Fixed a problem that caused STAF requests to hang due to a deadlock issue     in STAFHandleManager::handleProcessTerminated() (Bug #1571224)     - Added an entry to our FAQ about LD_LIBRARY_PATH not being set on RHEL4-U4     when directly logging into the desktop (Bug #1559586)   + Provided STAF return code constants for Jython and added to Jython version     2.1-staf-v3 provided with STAX, Cron, and EM (Feature #1571762)   + Upgraded the STAF InstallShield installers to use InstallShield     MultiPlatform 11.5 (Feature #1545393)   - Removed the libstdc++ and libgcc libraries from the Linux and Solaris     STAF installers (Bug #1554498)   - Provided more documentation on the trust levels required for the machines     involved in a FS COPY request in the STAF User's Guide (Bug #1584732)   - Provided a PROCESS START example in the STAF User's Guide for a Windows     .bat file that uses the /B option on a EXIT command to show how to get the     real exitCode assigned to the process RC (Bug #1584756)   + Added support for Windows Vista with UAC enabled.  Changed the local IPC     connection provider to use named pipes for interprocess communication     instead of global shared memory on Windows Vista (Feature #1517278)   - Fixed a problem on Windows where logging in via Remote Desktop Connection     would terminate the existing instance of STAFProc (Bug #1553533)  -------------------------------------------------------------------------------
702542
Compuware announced plans yesterday to release two new products: one to purge new applications of security vulnerabilities, and a second to test applications against common errors.
207328
Compuware on Tuesday will announce tools providing fault simulation and security analysis for developers building applications on the Microsoft platform.ADVERTISEMENTReducing the Total Cost of OwnershipLearn how to reduce the total coast of ownership in enterprise data management in this case study.
412547
IBM will announced the pre-release of several tools for SMEs designed to speed development of solutions built on IBM middleware. The tools support the IBM Solutions Builder Express Portfolio, which provides
765941
Unimax, a leading provider of voice administration applications, today announced the general availability of Version 6.4 of its patented 2nd Nature(R) software. The latest release supports compatibility with newer versions of call management platforms from Avaya and Cisco.
725665
New tools let nontechnical users build modules, and security is improved, among other additions.
300950
Update addresses potential denial-of-service vulnerabilities as well as a flaw in QuickTime.
623486
SaaS (software as a service) platform vendor NetSuite&#160;has released SuiteBundler, a tool its partner ISVs and VARs can use to create reusable applications for verticals.&quot;It&#39;s more important for our partners than it is for NetSuite,&quot; NetSuite CEO Zach Nelson said of the release, which provides a wizard-like interface for combining assets built on the NetSuite platform. It also includes distribution and installation tools and access to a repository of these &quot;SuiteBundles.&quot;Software development firm EBS-RAD LLC, based in Tampa, Florida, created a custom NetSuite app, i-Seaports Management, for its customer, Harbour Mastery. That firm in turn will market the software to seaports and marinas around the world, said EBS-RAD CEO George Walters.&quot;We&#39;re effectively making it very easy for services companies to get into the software business,&quot; Nelson said.Bundles have been created for a number of other verticals, including agricultural equipment dealerships, retail point-of-sale, and wholesale electronics distribution, according to the company.NetSuite&#39;s announcement drew a cautious nod from one industry observer Wednesday. &quot;At a 60,000 foot view, it seems like a good thing,&quot; said Michael Speyer, a Forrester Research senior analyst covering SMB&#160;and IT distribution issues. &quot;Especially for the larger midmarket clients. They&#39;re going to resist adopting apps that aren&#39;t customizable to their own existing processes.&quot;That makes sense because NetSuite has specifically targeted such customers. &quot;We think the midmarket is the huge opportunity,&quot; Nelson said. &quot;We believe NetSuite will be the SAP of the midmarket.&quot;But Speyer sounded a note of skepticism against such a lofty goal. &quot;Well, SAP is pretty firmly in the midmarket now,&quot; he said, noting offerings like Business All-in-One and Business One. &quot;So they are running head-on into SAP.&quot;NetSuite&#39;s approach to extending its SaaS platform stands in contrast to competitor Salesforce.com, which has aggressively promoted its programming language and development platform for creating new enterprise apps.&quot;Our environment is all about extending our applications,&quot; Nelson said. &quot;The mid-market doesn&#39;t want to build applications. They want to run businesses. Enterprises? They&#39;ll build applications all day.&quot;Nelson said one possible enterprise use of SuiteBuilder lies in application testing. NetSuite customers could try out new custom combinations in sandboxes before deploying them, he said.NetSuite previously announced it intends to issue an IPO. Earlier this year, it provided access to its services through the Apple iPhone.
751372
Research and Markets (http://www.researchandmarkets.com/reports/c49651)  has announces the addition of Frost & Sullivan's  new report Advances in Hazardous Waste Management to their offering.
46795
HypervisorShield, a new service of Catbirdâs V-Security suite, extends security protections to the hypervisor layer in a virtual environment.
550562
The company said Thursday that it will release security bulletins and accompanying patches for its products on 18 January, 12 April, 12 July and 18 October.
674795
(InfoWorld) - Itâs not easy being Ben Fathi. As corporate vice president of Microsoftâs Security Technology Unit, Fathi took the place of longtime STU leader Mike Nash in March amid a larger management shake-up just days after Microsoft announced that the shipment date for Vista was slipping yet again. After Nashâs high-profile tenure, Fathiâs charge is more subtle: building what he calls a âtrust ecosystemâ around Vista and its new security features and promoting the companyâs secure development practices. But first he must help get Vista out the door. Fathi sat down to talk with InfoWorld Senior Editor Paul Roberts at the recent Security Standard Conference in Boston about Vistaâs progress, and the world after Vista. InfoWorld: Recently thereâs been some back and forth with Symantec about issues such as Vistaâs Kernel Patch Protection feature for 64-bit systems, as well as some public criticism of Vista code for having security holes. What should enterprise folks make of that? Ben Fathi: First, on the paper Symantec published: We thank them for their input. I think itâs unusual for a partner to go public with a paper like this on a beta product, but they did identify a few issues. To the best of my knowledge, all those were already fixed in more recent beta releases. We love to hear feedback on beta products. Thatâs why weâre in beta. Itâs a test. Weâll fix them as long as they report them to us. As for the kernel patching, we fundamentally believe that the current model of kernel patching is broken and not sustainable. We never recommended it or supported it on any version of our operating systems. As weâve been telling our vendor partners, this is the only chance we have, as 64-bit computing becomes available, to start with a clean architecture and build on top of that. We want to work with you to find ways to extend the kernel functionality by having a clean architecture, APIs, and filters. â¦ instead of patching instructions and data structures in the kernel. In the long term, what we want to do is move a lot of these functionalities to a hypervisor that sits under the kernel to make the kernel even smaller and the trusted computing base even more secure. We still have a window of opportunity here. â¦ and weâre working with two or three vendors in the space to come up with that kind of architecture. One of the other comments thatâs been made is that [Kernel Patch Protection] is anti-trust. That weâll go back in with our own products and get around it. Thatâs absolutely not true. Weâd never do that. IW: You recently patched a beta version of Vista. Is it a bad sign that youâre patching beta Vista? BF: I believe that Vista is significantly more secure than any version of XP or anything else weâve shipped in the past. Just SDL (secure development lifecycle) in general and the process of penetration testing and hardening kernel services. These all created a stronger, defense in depth strategy. What I would say is, Yeah, there will be patches and vulnerabilities as we move forward. What weâre hoping is that by creating these layers of defense, weâre giving customers, especially enterprise customers, a longer time to test and make sure things are not broken. IW: Do you see your job description and responsibilities changing after Vista? BF: There are six different areas that we call âBig Betsâ that have been identified in my division. I will mention two. The first, Application ID, is a way to identify an application that includes an executable, the library it uses, configuration files, registry settings, any patches that are applied to it. So youâll have a cryptographically signed version of the application, and youâll be able to identify that and whitelist or blacklist that. When we talk about a trust ecosystem today, the ability to trust people based on an ID and trust machines based on an ID, we canât do that with applications. If itâs called powerpoint.exe, we go and run it. So having strong IDs based on the application and [making] sure they havenât been tampered with after download is an important investment for us. The second area is isolation. Creating guest operating systems that sit on top of hypervisors allow us to create better isolation mechanisms so that even if malware comes in, it only affects one subset of the machine and not everything else. Weâve done some great work on server hypervisors and server virtualization. We need to extend that to the client. Weâre seeing partners do that already, and so weâre going to invest in that space.
427624
Spirent Communications plc (NYSE:SPM) (LSE:SPT), a global provider of  performance analysis and service management solutions, announced the  release of ThreatEx 2.50, which offers the most powerful security  testing functionality available today.
373746
Automated tool contrast policies with behaviour IBM has finally finished digesting Consul InSight, the risk management software that it bought last December, and has re-released it in expanded form as Tivoli Compliance Insight Manager.â¦
124175
The SAS Institute has updated its products for data mining and forecasting.The releases represent a greater leap in functionality over other recent revisions, according to Mary Grace Crissey, a product marketing manager for SAS. The earlier versions were &quot;much more GUI-driven,&quot; she said.Enterprise Miner 5.3 features 15 new analytical tools and additional algorithms, the company said. An accompanying Text Miner product can analyze unstructured data, such as blogs or customer feedback forms.Forecast Server 2.1, another updated product, includes improved filtering, more than a dozen additional project management macros, and scalability improvements for working with large data sets.One satisfied customer is Tim Rey, manager of the data-mining and modeling group at Dow Chemical. He said that the firm took &quot;a considerable amount of time to study both Enterprise Miner and Forecast Server before we purchased.... The products are well-designed, supporting many robust methods that are enabled by easy-to-use interfaces and supported by functional graphics.&quot;Rey&#39;s company has not yet deployed the newest versions, but it has &quot;reviewed what was coming and thinks they are welcome additions,&quot; he said.Dow is using Forecast Server to build forecasting models for a variety of scenarios, such as demand and raw materials costs. The firm is using Enterprise Miner in a number of areas, including finance, fraud, engineering, research and development, supply chain, and human resources, he said.Rey noted that &quot;in both products, you have to have your data in SAS format prior to using them.&quot;To that end, Enterprise Miner 5.3 includes a new wizard designed to make it easier for users to push their data into SAS&#39; software, Crissey said. Longtime SAS customers tend to keep preformatted data sets at the ready, she said.Enterprise Miner licensing starts at $120,000, with the Text Miner add-on costing an additional $80,000. There is a desktop version of the product that costs $40,000, plus $20,000 for the text-mining option. Enterprise Forecaster pricing begins at roughly $150,000. SAS charges annual renewal fees that are a percentage of the initial cost, according to a company spokesman.