J u n e 1994
CyberSAFE Challenger 5.2.1 Following its n a m e c h a n g e from the Open Computing Security Group Inc. to CyberSAFE Corporation, the c o m p a n y also c h a n g e d the n a m e of its OCSG/Kerberos product line to CyberSAFE Challenger. New ports were a n n o u n c e d of Challenger to the Solaris 2.3 and Windows NT 3.1 operating systems, and the availability of version 5.2.1. New features include a GUI tool, CyberSAFE Navigator, for administration of the Kerberos principal d a t a b a s e and support for Security Dynamics' SecurlD token card for stronger authentication. New principals m a y be a d d e d one at a time, or in bulk m o d e from a text file. Default principal settings c a n be used, or adjusted for e a c h principal. Inquiry functions allow for search a n d display of d a t a b a s e contents and it also propagates the master principal d a t a b a s e to any slave servers that m a y exist on the network. For further information, contact: Bob Gassen, CyberSAFE Corp; tel: + 1 206 883 8721; fax: + 1 206 883 6951; E-mail: bobg@ocsg, com.
SDI secures Shiva LANs Brian Riggs Security Dynamics Inc. (SDI) has recently t e a m e d up with Shiva Corp. to increase LAN server security. Release 3.0 of Shiva's remote access server software will incorporate SDI's ACE/Server network security software. With the SDI software in Shiva's LanRover servers, "Shiva is able to offer a comprehensive, secure solution to remote access, and r e d u c e d m a n a g e m e n t requirements", a c c o r d i n g to SDI's James
@1994 Elsevier Science Ltd
N e t w o r k Security
Geary. The software upgrade, which will cost users around US$250, will be integrated into Shiva's LanRover/E, LanRover/T, and LanRover PLUS servers this June. SDI's ACE/Server software records e a c h a t t e m p t to Iogon to the network, which helps network managers d e t e c t unauthorized access attempts. The software works in conjunction with SDI's credit card-sized SecurlD Card, which randomly generates a new access c o d e number every minute. By entering a personal identification number and the number a p p e a r i n g on the card's liquid crystal display - via either keyboard or touch-tone phone - users gain access to their computers and at the same time are assured that hackers cannot guess the number at any given moment. This use of the SDI software will eliminate LanRover products' current need for externally l o c a t e d security devices between the m o d e m and remote access server.
Security Manager March Systems Consultancy Ltd. has launched Security Manager. This security m a n a g e m e n t tool addresses the security deficiencies of open, Unix SVR4-based systems. ICL has recognized the need for a d d e d security in Unix systems and has a d d e d the product to its portfolio of Systems Security M a n a g e m e n t services. Security Manager is a customizable software tool that is said to improve tlqe inherent protection features of Unix, addressing the need for a d d e d security amongst business users. The system provides identification and explanation for potential security exposures, assessment of their likely i m p a c t and, if required, suggestions for subsequent resolution and
regular further monitoring. The system is installed i n d e p e n d e n t of the core operating systems a n d a p p l i c a t i o n software. It c a n be run on an a d hoc basis or as part of regular b a t c h processes to minimize the systems resource usage and leave control of its utilization to the systems manager. Security M a n a g e r is a v a i l a b l e on ICL DRS/NX versions 6 and 7, Sun Solaris 2.3, HP-UX a n d IBM AIX 2.3 systems. For further information c o n t a c t Terry Pudwell on +44 734 304224.
Increased NetSP security IBM has launched a new version of NetSP. NetSP version 1 release 2 centralizes security in a third-party server, rather than spreading security authentication across desktops and other access points throughout the network. Access is granted to users through a single, secured sign-on, said Ginger Merkle, IBM NetSP marketing manager, and all Iogon attempts can be monitored. Previously, NetSP could only provide security for IBM AIX/6000, OS/2, and DOS operating systems. The new version has e x t e n d e d its c o v e r a g e to include HP-UX 9.0, Sun Solaris 1.1 and DOS/Windows, said Merkle. The NetSP 1.2 ensures d a t a confidentiality through the C o m m e r c i a l Data Masking Facility, a d a t a encryption tool. It also provides a password 'aging' c a p a b i l i t y which can suspend or resume user access, password expiration, and forced password c h a n g e to suit the business' security policy. The program will be a v a i l a b l e by August this year, and priced per user. Merkle said the a v e r a g e cost per user would be a b o u t US$20, or a flat fee of US$7008.
7