Dennis Fisher

SAN FRANCISCO—The Liberty Alliance Project on Tuesday released a draft of its second-generation specification for federated identity management. In addition to the new spec, the alliance also unveiled its new Identity Web Services Framework, which lays out the components needed to build interoperable identity-based Web services. Alliance members, speaking at a press conference at the […]

New technology from RSA Security Inc. could hobble hackers ability to make off with user information—from Social Security numbers to simple passwords—through the compromise of a single machine. The Nightingale system, being revealed this week at the companys RSA Conference in San Francisco, is based on a venerable cryptographic concept known as secret sharing and […]

Sun Microsystems Inc. last week announced two new commercial versions of the Trusted Solaris operating system for the x86 platform. The decision to make Trusted Solaris available on Intel Corp.-based servers is part of an overall strategy to renew Suns commitment to the Unix-based operating system on that platform. “Were very serious about Solaris on […]

SAN FRANCISCO—Microsoft Corp. on Monday announced a series of enhancements to some of its products that are designed to allow anti-virus vendors to better integrate their software with Microsofts technologies. The biggest change is the inclusion in Exchange 2003 of an API specifically for AV vendors. The Virus Scan API 2.5 will enable AV software […]

SAN FRANCISCO—In a move designed to announce the companys presence as a full-scale security vendor, Internet Security Systems Inc. on Monday will unveil a new line of appliances that company executives believe will eventually obviate the need for numerous discrete servers and applications to protect networks. The roll out of the Proventia appliances at the […]

SAN FRANCISCO—Computer Associates International Inc., Gemplus SA and several other companies announced Monday the formation of a group that is working to define and implement open specifications and best practices for integrating information security and physical security. Two of CAs products, which are currently in beta, already support the groups specification, and the members hope […]

Network Associates Inc.s recent roller-coaster ride continued Thursday when it announced a net loss of $3.7 million for the first quarter and slashed its earnings outlook for the full year. The company now expects to see revenue of $930 million to $950 million for all of 2003, as compared with analysts expectations of $1.01 billion. […]

Microsoft Corp. on Wednesday released a patch for a critical new flaw in its Virtual Machine Java implementation that gives an attacker the ability to run code on a vulnerable computer. The Virtual Machine is included in nearly every version of Windows as well as in most version of Internet Explorer. The vulnerability is in […]

Crippling denial-of-service attacks have become so much of a problem on the Internet that one security vendor plans to start giving away a portion of its DoS prevention technology in an effort to get more administrators and network operators to help solve the problem. Reactive Network Solutions Inc. next week will begin offering a free […]

A small but powerful group of technology companies, including Microsoft Corp. and Intel Corp., on Tuesday announced the formation of a new group that will develop and implement a set of specifications for trusted computing platforms. Known as the Trusted Computing Group, the new alliance is purported to be the successor to the Trusted Computing […]

Sun Microsystems Inc. last week rolled out two new commercial versions of the Trusted Solaris operating system for the x86 platform. The decision to make Trusted Solaris available on Intel-based servers is part of a larger overall strategy to renew the companys commitment to the Unix-based OS on that platform. “Were very serious about Solaris […]

Citadel Security Software announced last week the latest version of its vulnerability remediation software, which gives users more control over when and how flaws are fixed. Using a new feature in Hercules 2.0, administrators can write custom signatures and fixes for vulnerabilities, enabling them to remediate flaws found in in-house or custom applications. Users can […]