Security A Key Issue For Tech Systems By Ara C. Trembly When I attended the Comdex technology exposition last November in Las Vegas, I was among an estimated 100,000-plus attendees who found a much more security-conscious environment awaiting them. I had to deal with metal detectors, bag searches, and even bomb-sniffing dogs each time I entered the convention space. Clearly concerned about physical security in the post-Sept. 11 environment, organizers of the computer industry conference—held from Nov. 11 through Nov. 16—mandated strict guidelines that included not allowing any bags onto the show floor. Media personnel were exempted from that rule, but any bags brought in by reporters, editors and analysts were subject to search. The emphasis on security has also been evident in the spate of security-related technology product introductions, ranging from identity authentication devices, to firewalls, to backup and disaster recovery solutions. Griffin Technologies LLC announced that it has begun shipping "SecuriKey," a "Universal Serial Bus" (USB)-based user authentication system for personal computers. USB ports are used to connect peripheral devices—such as a mouse, modem or keyboard—to a computer. According to Lawrence, Kan.-based Griffin, SecuriKey combines a small "key-like" USB device with password protection. "The system provides an effective, low-cost alternative to [public key infrastructure] technology," the company said, "protecting companies and organizations against unauthorized computer use." PKI systems depend on digital certificates and companies that act as registration authorities to verify and authenticate the validity of each party involved in an Internet transaction. SecuriKey’s USB "token" attaches to a key ring and plugs into a computer’s USB port, Griffin explained. The system combines physical and informational requirements (in the form of a password) to offer a two-layer solution for protecting computers against unauthorized use. According to Bennett Griffin, president and founder of Griffin Technologies, SecuriKey "can be implemented in a single day, yet offers complete internal security within the corporate firewall." Encryption "inside the key itself" guarantees that only the person with the correct password and the matching SecuriKey can log on to a protected computer, said the company. While detailed pricing information was not provided, Mr. Griffin said the cost of the SecuriKey system "is much less than half that of a comparable PKI solution." (Further details are available at www.griftech.com.) Two security vendors—PowerWallz Network Security Inc., and McAfee.com—have announced new firewall products. Canada's PowerWallz, based in Vancouver, British Columbia, introduced the "ProShield X100DMZ," a firewall appliance targeted to small- and mid-sized businesses. The new product features a separate DMZ interface and can be fully customized for network security protection, the company said. A DMZ, or demilitarized zone, sits between the Internet and an internal network's line of defenses, which usually includes a firewall. A firewall is a system designed to prevent unauthorized access to a private network, such as that of a business. Firewalls may be implemented as hardware, software or a combination of the two. Among other features, the ProShield X100DMZ provides protection against denial of service attacks and offers logging and reporting functions, the company said. Pricing was not provided. (Further information is available at www.powerwallz.com.) McAfee announced its latest McAfee.com "Personal Firewall" (MPF), which the company said "will incorporate advanced intrusion detection," and will be compatible with Microsoft’s new Windows XP operating system. According to Sunnyvale, Calif.-based McAfee.com, the intrusion detection feature gives MPF users the ability to identify and analyze "unusual network traffic trying to circumvent the user’s firewall." This allows users to collect information on intercepted hacker attacks, determine who is attacking and what type of attack is being used, as well as how many times it has been used. The MPF also includes a graphical trace utility, enabling users to trace incoming traffic and potential attacks and to obtain information on the network used by culprits and the geographical location of their computers, said McAfee. The company added that the new firewall will be closely integrated with www.hackerwatch.org, a database of hacker activities and rogue network traffic. Using information collected from the firewall’s intrusion detection and trace features, the database may be able to assist law enforcement agencies and other agencies looking to curb hacking activities. The new MPF will be available in 2002 at a price of $29.95, with a Pro version available at $39.95, said McAfee. (Further information is available at www.mcafee.com.) McAfee.com has also introduced "VirusScan Online" for Windows XP, a Web-based security service designed for use on the new Microsoft operating system. The service offers managed protection from viruses, Trojan horses and "other malicious code." The new service "will fully utilize the integrated .NET features provided in the new operating system, including notification, Passport integration, XML and SOAP support," said McAfee. SOAP (Simple Object Access Protocol) provides a way for applications to communicate with each other over the Internet, regardless of the application platform. VirusScan Online is available immediately for a yearly subscription of $24.95, said McAfee. In other Internet security developments, Multi-Tech Systems, Inc. announced "RouteFinder RF650VPN," a security appliance for virtual private network security. A VPN is a network that is constructed by using public wires to connect network nodes. These systems use data encryption and other methods to ensure that only authorized users can access the network. The RF650VPN uses encryption, user authentication and the Internet to connect telecommuters, remote offices, suppliers and others, while "avoiding the cost of private leased lines or dial-up charges," said Minneapolis-based Multi-Tech. The product includes firewall security, along with optional e-mail anti-virus software and IPSec software. IPSec (Internet Protocol security) is a set of protocols that support secure exchange of packets of information. The RF650VPN is currently shipping with a manufacturer’s suggested retail price of $3,199, said Multi-Tech. A new internal security product, "Policy Central," has been introduced by Security Software Systems, Inc. Policy Central works by taking snapshots or "screen captures" of an individual employee’s "inappropriate" computer usage. According to Sugar Grove, Ill.-based Security Software, Policy Central can also monitor confidential company information "whether it’s used in a application—such as Word or Excel—or in personal e-mails—including instant messaging." Policy Central allows organizations to customize an acceptable use policy that may cover a range of issues, including classified company information, harassment, sexual innuendo and racially sensitive information, noted Security Software. Users who want to access any application or Web site must agree to that company policy, with their acceptance (or declination) logged in a database with a date and time stamp. "This process leaves no room for doubt as to company policy, and leaves little room for an employee to allege invasion of privacy," the company observed. Policy Central costs less than $40 per user, the company added. (Further information is available at www.securitysoft.com.) Several other vendors have also introduced security products for data backup and disaster recovery. PowerFile, Inc., a provider of optical storage and archival solutions, announced the release of "PowerFile R200," which provides backup for up to 1.6 terabytes of data and "nearly instantaneous data recovery." PowerFile R200 provides a 200-disc capacity, rewrites in DVD-RAM format and reads all commonly used CD/DVD formats, the company said. It also features network sharing and IEEE 1394 connectivity for high-speed data transfer. The PowerFile backup system pairs the PowerFile R200 DVD-RAM changer with seamless integration to Computer Data Strategies’ Back Again II software. Overall, the system provides automated data backup, "completed disaster recovery," a user interface to quickly find and restore backed-up files, and 2:1 data compression, said PowerFile. Installation takes less than five minutes "without having previous backup experience," the company added. PowerFile R200 operates on the Windows 2000 platform. Pricing information was not provided. (Further details are available at www.powerfile.com.) A new remote server management solution dubbed "Kaveman" was introduced by Toronto-based Digital V6. According to the company, Kaveman remotely controls network servers, either over the Internet or via a local network. The system also automatically monitors server activities and notifies users if the server develops a problem. "The main benefit of Kaveman is that it will help network administrators recover quickly from mission-critical server failures, from anywhere in the world," the company stated. With Kaveman, the administrator can reset the hardware, access the BIOS (basic input/output system), have keyboard and mouse control, and cycle the power—as if the administrator were on location, said Digital V6. The BIOS is built-in software that manages what functions a computer can perform without accessing applications from a disk. The BIOS typically includes the code required to control the keyboard, drives, display and other basic functions. Because Kaveman does not require any software installation, it supports multiple operating systems, the company noted. Pricing was not provided. (Further information is available at www.digitalv6.com.) Reproduced from National Underwriter Property & Casualty/Risk & Benefits Management Edition, March 18, 2002. Copyright © 2002 by The National Underwriter Company in the serial publication. All rights reserved.Copyright in this article as an independent work may be held by the author.
Return to table of contents for NU Online. Copyright © 2002 by The National Underwriter Company. All rights reserved. Contact Webmaster |