2009年10月12日星期一

Time to throw all your security in one box?



Matocha Associates' IT shop found it's easier to manage two multi-purpose security appliances when you're only dealing with one vendor per box. Its firewall , VPN, intrusion detection and gateway antivirus tools sit in one appliance from SonicWALL. The Oakbrook Terrace, Ill.-based company uses another from Trend Micro for Web, e-mail and spam filtering, plus additional antivirus protection.


Keeping it to two large vendors means the company doesn't have to scramble to figure out what technology needs upgrading and which vendor needs to take care of it, IT director Jeffrey Jarzabek said. It's also more cost-efficient to keep the vendor count low.


Would Jarzabek ever consider cramming devices from several different vendors into one appliance? Not anytime soon.


"This would be like having a BMW with a Mercedes interior and Audi exterior," Jarzabek, whose firm specializes in architecture, engineering, general contracting and construction management, said in an e-mail interview. "It isn't going to happen because it's not cost effective and it isn't reliable. This is the solution: one appliance, one vendor; another appliance, another vendor."


If a new survey from New York-based research firm TheInfoPro Inc. is any indication, Jarzabek's skepticism is not universal. A majority of IT professionals the firm interviewed in March and April said they would like to have one appliance that incorporates the functions of multiple vendors. Regardless of how many vendors are in one box, the survey makes this much clear: More enterprise IT departments are thinking about using multi-faceted appliances than they were a year ago.


Related links


Mad as Hell Series: Appliances vs. theory of everything


Burton analyst: One vendor for everything a bad idea


Radicati 'suite' success in question


"Appliances are maturing and are getting easier to use," said Myron Kerstetter, senior vice president of TheInfoPro Inc. "The message of the survey is that because of this maturity, more people are considering acquiring an appliance than in the past."


TheInfoPro (TIP) interviewed 102 enterprise IT professionals across a variety of industries on behalf of San Jose, Calif.-based Secure Computing. The firm used enterprises that belong to its TIPNetwork as a primary source of contacts. Respondents were not told that Secure Computing was involved in the study. In many cases, Kerstetter said he spoke with people who don't have an appliance right now. But among them, he said, "There seems to be a strong interest."


Among the findings:


Almost 50% of respondents indicated "more" or "much more" interest in multi-function security appliances compared to a year ago.


A majority of respondents -- 55% -- said they'd prefer that functions on a single security appliance be from more than one vendor. Another 31% prefer that all functions come from one vendor while another 14% were neutral.


More than 60% voiced some or serious consideration about using a security appliance for multiple security functions; another 10% already do or plan to.


More than 70% rated a single management interface, integrated reports and lower costs as somewhat or very important factors in a security appliance.


Most were not concerned about using fewer security vendors. Just over a third said it is somewhat or very important to use fewer.


A "very large majority" of enterprises use more than a single vendor of information security products. Forty-two percent use six to 10 vendors; 40% use five vendors or less.


Less than 20% had definite plans to decrease the number of security vendors they use; another 15% said they might decrease their number.




Having that many vendors is not beneficial to the bottom line… How is the management of them going? Not good? I didn't think so!


Jeffrey Jarzabek


IT Director, Matocha Associates




Noting that 42% of respondents said they use six or more vendors and that 66% said they won't reduce the number of vendors they how have, Jarzabek said, "Having that many vendors is not beneficial to the bottom line… How is the management of them going? Not good? I didn't think so!"


Skeptics of all-in-one appliances have argued the machines aren't as simple as they appear on the outside. What's an IT practitioner to do when a glitch crops up in such an all-encompassing machine? Critics say it's much more difficult to address the problem when the affected software is buried in the belly of a big appliance.


But Kerstetter said that concern appears to be easing. One analogy is that in the old days, an IT administrator would need a hard hat and screwdriver to fix something run amuck within an appliance. Now, Kerstetter said, "Technology has matured and fixing a problem is as easy as pressing a button and rebooting."


Paul DeBernarbi, director of product marketing for Secure Computing , agreed. "The technology has caught up with demand," he said. "Today's hardware and software is such that you can have one platform that can deliver on multiple needs."




Technorati : ,

Del.icio.us : ,

Zooomr : ,

Flickr : ,

2009年10月11日星期日

McAfee sued for patent infringement

Antivirus vendor McAfee Inc . is being sued by Dallas-based security firm DeepNines Inc. because of alleged patent infringement and false product marking.


DeepNines said it was issued U.S. patent number 7,058,976 in June for its Security Edge Platform (SEP), a unified threat management product that integrates firewall, behavior- and signature-based intrusion detection (IDS) and prevention (IPS), antivirus and traffic management into a single device.


But, DeepNines claims, Santa Clara, Calif.-based McAfee has been marking and selling about nine separate products that claim the patent as its own, including McAfee IntruShield and Total Protection, which the vendor released in April to much fanfare.


As a result, DeepNines is seeking damages and a permanent injunction to prevent McAfee from marketing and selling the infringing products, company president Dan Jackson said in a phone interview Thursday morning. Law firm Fish & Richardson P.C. is representing DeepNines, and the lawsuit has been filed in United States District Court in the Eastern District of Texas.


"We intend to protect our intellectual property, just as we respect the intellectual property rights of others" he said. "Although DeepNines continuously monitors the products of its competitors, at this point, our focus remains on McAfee for both infringing our patent and falsely marking its products with a patent that is invalid and purports to claim the same invention covered by our patent."


Jackson would not specify what damages his company is seeking. DeepNines was founded in 1999 and claims to have more than 200 product installations across industries such as financial services, education, energy and government.


McAfee spokesperson Siobhan MacDermott declined to offer a detailed response about the lawsuit because she had not yet seen a copy of the full document. She did note that McAfee has its own lawsuit pending against DeepNines, but she couldn't offer details about that lawsuit, other than that it was filed in January.




Technorati : , , ,

Del.icio.us : , , ,

Zooomr : , , ,

Flickr : , , ,

2009年9月24日星期四

Spam, encryption to drive security spending

New ways of tackling spam and a general need for better overall IT security are pushing a growth in spending for security products, according to one market research firm.


In a new study, The Radicati Group Inc., of Palo Alto, Calif., said security products are now at the top of the list for IT spending, while spending for other technologies is still somewhat sluggish. The study said total revenue from enterprise security products will grow from $2.9 billion in 2004 to $6.6 billion in 2008 -- an average rate of 24% each year.


"It's a market that has picked up steam," said Sara Radicati, the company's president and CEO. "In the past we had predicted 10% to 15% growth."


One of the trends cited by the study is the move away from products that do one task and toward software suites that tackle a whole range of security problems. Revenue for such security software suites is expected to jump from $185 million in 2004 to $492 million in 2008, the research firm said.


Clearswift Ltd.'s Mimesweeper, Tumbleweed Communications Corp.'s Mailgate and CipherTrust Inc.'s Ironmail are all examples of products that combine various technologies such as firewalls and antivirus and antispam software , Radicati said.


The all-in-one product segment has an advantage in that it is more convenient and can be less costly to operate. "It simplifies the overall management infrastructure and they are easier to install," she said. "The downside is they may be less specialized than a point [product]. Point [products] will always be a tad ahead."


Antispam software is experiencing steady growth, too. Revenues are expected to increase from $979 million in 2004 to $1.7 billion in 2008 -- an average rate increase of 16% over four years.


Antispam technology in general is experiencing an evolution. Microsoft is making some moves in this regard with the planned release of Sender ID technology built into Exchange Edge Services, which is due out in 2005. Sender ID, a draft specification that is currently before the Internet Engineering Task Force, is designed to help reduce the problem of domain spoofing and protect against phishing schemes.


"Everyone is realizing that the real issue isn't just spam but the integrity of Internet communications," Radicati said.




Technorati : , , , ,

Del.icio.us : , , , ,

Zooomr : , , , ,

Flickr : , , , ,

2009年9月23日星期三

Antivirus researcher Gullotto leaves Symantec for Microsoft

Microsoft has hired one of the industry's top antivirus researchers to run its nascent antivirus research and response team.


Vinny Gullotto, who had been at Symantec Corp. since earlier this year, started work at Microsoft this week. His charge at Microsoft will be to help the software giant get its virus response team up to speed with those run by the major antivirus vendors.


Gullotto will be the general manager of Security Research and Response, a separate unit from the Microsoft Security Response Center (MSRC); both teams fall under Microsoft's Security Technology Unit.


Gullotto has more than a decade of experience in the antivirus industry , and has been well-traveled as of late. Until late 2005, he was the vice president of McAfee Inc.'s Anti-Virus Emergency Response Team (AVERT). He left McAfee to join Cupertino, Calif.-based Symantec this past spring and helped run its well-known Symantec Security Response unit.


He is one of a handful of virus researchers, including David Perry at Trend Micro Inc., Vincent Weafer at Symantec and Nick FitzGerald of Computer Virus Consulting, who have been at the forefront of antivirus research during the last decade.


Microsoft's hiring of Gullotto is yet another sign of how seriously the Redmond, Wash.-based vendor is taking its move into the antivirus market. It launched its Windows Live OneCare antivirus and antispyware suite in May and will include those protections in Windows Vista, due for release this fall. This move has ruffled a lot of feathers among the antivirus vendor community, most of whom have been Microsoft partners for years. Hiring Gullotto away from Symantec is unlikely to smooth any of those bad feelings.


Symantec declined to comment on Gullotto's departure.


Gullotto is not the only high-profile security researcher that Microsoft has hired lately. Adam Shostack, a well-known security and privacy expert and author who worked at pioneering privacy-software developer Zero-Knowledge Systems, joined Microsoft in June and is working on the Security Development Lifecycle, a set of software design theories designed to help developers build software that can withstand attacks.


Microsoft for several years has used the MSRC to work with antivirus vendors , customers and industry organizations during virus and worm outbreaks. But now that Microsoft has its own antivirus offering, the company apparently has decided it is time to start a dedicated in-house virus response team.


"Microsoft is very excited that Vincent Gullotto will be joining Microsoft as the general manager of Security Research and Response and we look forward to working with him in his new role," a Microsoft spokesman said in an emailed statement.




Technorati : ,

Del.icio.us : ,

Zooomr : ,

Flickr : ,

2009年9月21日星期一

Symantec to release security software that protects consumers during online transactions

A new security program should prevent personal data leaks when consumers are conducting online transactions, protecting valuable financial information .


Some features of Symantec's Norton Confidential include the ability to detect and remove malware, which Symantic refers to as "crimeware," such as keylogging programs that can steal credit card numbers, login names and passwords. During a secure purchase made with a credit card, Confidential will block any program that is trying to access the keyboard and monitor display.


Other features include an electronic wallet that can store credit card and online purchase information in an encrypted file, which will allow consumers to auto-fill transaction forms and keep their data in a secure place on their PC. It will also store a safe list of SSL certificates used by a few e-commerce sites and high-traffic banks. This means Confidential will not only alert users to sites that are unsecured, but it will be able to confirm that the site they are visiting is genuine, thereby helping combat pharming sites.


Not only will Confidential be able to eliminate the malware that it has been programmed to recognize, but it will also be able to recognize other malware using new behavioral technology from WholeSecurity, which Symantec obtained last year.


"[WholeSecurity software] is a complement to Symantec's antivirus software , and it's also the first Symantec product to work with other antivirus products from other vendors," Symantec product manager Olivia Schmelzle said.


Norton Confidential is set to beta test in July and go on sale in October




Technorati : ,

Del.icio.us : ,

Zooomr : ,

Flickr : ,

2009年9月18日星期五

BT presses the accelerator for broadband speed

BT offers millions of customers the chance to boost their broadband speed for free with the launch of faster headline speeds of up to 20Mb/s and the BT Broadband Accelerator .




BT Retail broadband customers already enjoy download speeds of up to 8Mb/s, but in enabled areas that will leap to up to 20Mb/s to deliver consistently faster broadband all day and night even at peak times. Upload speeds will also increase from up to 448Kb/s to up to 1Mb.




Unlike other broadband providers, BT Retail is offering the faster speeds at no extra cost. The cheapest broadband option is just £7.78 a month for the first three months.




Faster speeds will initially be available through 549 exchanges serving 10 million - or 40 per cent - of the UK's homes and businesses. Coverage will increase to 55 per cent by March 2010.




The BT Broadband Accelerator - a speed booster pack worth £15 - will be free for BT Total Broadband customers who order it online, with postage of just £1.20. The BT Broadband Accelerator includes a small plate that customers, who have more than one phone socket, can easily insert into their main telephone socket to reduce the impact of electrical interference; this may increase broadband speed by 1.5Mb. It also comes with an easy self-install guide as well as a comprehensive 10-step guide on how to optimise broadband speeds and will help customers get the most out of their broadband connection.




BT research shows that one of the main causes of slow broadband is customers' home wiring. The BT Broadband Accelerator plate, also known as the I-Plate, isolates a redundant wire in the socket which can slow connections. Although speed improvements are likely, they cannot be guaranteed. Even if it does not improve speed the device can help stabilise broadband lines making them even more reliable.




John Petter, managing director of BT's Consumer division, said: "The BT Broadband Accelerator can make a big difference to the speed of your broadband. We think it is so important we've taken the decision to offer it to our customers for just the cost of the postage.




"Between that and us more than doubling headline speeds for millions of homes and businesses, most customers should start to see a rapid boost in the performance of their connection. We have a track record of not charging customers any more when we increase the speed and this time is no different. BT broadband customers won't have to pay any more to get higher speeds.




"These two moves demonstrate our commitment to helping the UK move closer to the kind of widely-available speeds published in the Digital Britain report."


ADSL2+ - BT Consumer




New customers or re-contracting BT Total Broadband customers in an enabled exchange area will automatically be eligible for up to 20Mb/s broadband service from as little as £7.78 per month. Customers will be able to order or simply find out when they can get up to 20Mb/s and what speed they can expect via BT.com. Existing customers will be asked to sign a new contract.




The BT Broadband Accelerator will be offered free to BT Total broadband customers who order it online.


ADSL2+ - BT Business




New or re-contracting BT Business Broadband customer in an enabled exchange area will automatically be eligible for the up to 20Mb/s service. Orders can be placed by customers direct online, or via any offline business sales channel. Customers will not pay any more for the new service, which offers up to 20Mb/s downstream speeds. The upstream (customer to exchange) line speed will improve to 1Mb/s.




The BT Business Total Broadband tariff also remains the same and includes BT Openzone Wi-Fi minutes. BT Business Option 3 customers also receive free mobile broadband and other business services worth over £750. BT Business Total Broadband is available from £12.50 (ex VAT) per month including 24/7 UK freephone business support. Businesses also have the flexibility to build their own communications package by bundling their broadband with calls to UK landlines, mobiles and international numbers from only £27.50.




The BT Broadband Accelerator will be offered free to customers in instances where BT believes performance can be improved.




Technorati : , , , , ,

Del.icio.us : , , , , ,

Zooomr : , , , , ,

Flickr : , , , , ,

2009年9月16日星期三

How to Back Up Your Data-the Options

Backing Up Your Business Data or Personal Files is an Essential Part of the Modern Day Workflow


Backing up your business data or personal files is an essential part of the modern day workflow. There are choices on how you can best store your information, from data back up services online to the traditional cd or DVD burning solution. Data back up systems can also be employed in the form of external hard drives.


External Hard drives.


When choosing this option, there is a need to avoid cheap external hard drives.


The best way to go with external hard drives is to do the necessary research and find out what are the top 10 external hard drives. It is advisable to go with a reputed name like Seagate or Western Digital for reliability. For your most valuable data, I would suggest burning DVD or copies as a stable data backup solution. The reason for this is DVD's are very reliable if taken care of. If you are not too worried about the sensitivity of your information, then you might consider a data backup company. There such services if one Googles "backup online".


USB Flash Drives


The chief limitation of using a USB flash drive is the amount of storage you get. Unless you are backing up small files such as Spreadsheets and Word files, the USB flash disk will not be too much use for backing up your movie collection. USB Flash Drives have grown in capacity over the years, now carrying up to 16GB (from the paltry 250 MB of yesteryear.) One might want to consider researching the best 64gb USB flash drives.


The major fall back on USB flash drives is loss of the device due to its size. This is however counter-balanced by its portability.


Recovery of data.


It is always a good idea to invest in backup disaster recovery software . This usually enables a personal recovery solution if you lose your data but your drives are not damaged. For a price you could get a very good backup and recovery system installed onto your computer. This facilitates the whole process of data back up.


Considering the fact that information files are getting larger and larger. From movies and bought online (iTunes for instance). To personal projects such as home videos. There is a need to consider how you would want to back up your data. All systems of backing up have their own hang ups (External hard drives may fail, DVD's and CD's may become scratched etc), therefore choice of what system to use will greatly depend on what value you put on your data.




Technorati : , , , ,

Del.icio.us : , , , ,

Zooomr : , , , ,

Flickr : , , , ,