Security Log

Computerworld - LAN Access-Policy Appliance Debuts
InfoExpress Inc. announced CyberGatekeeper LAN, an access-policy enforcement appliance for LAN-attached users. The appliance enforces policies created with the Mountain View, Calif.-based vendor's CyberGatekeeper Policy Manager software. It works with LAN switches to segment users from the corporate LAN, checking workstations for correct configurations and up-to-date patches before allowing access.
CyberGatekeeper LAN can also automatically provide needed updates to users whose machines are out of date. The offering is expected to be available by late January. Pricing starts at $10,000.
Security Bookshelf
Firewalls and Internet Security: Repelling the Wily Hacker, Second Edition, by William R. Cheswick, Steven M. Bellovin and Aviel D. Rubin; Addison-Wesley, 2003.
The book isn't about firewalls so much as it is about the authors' philosophy of computer security and the distillation of their many years of hard-earned experience. Every page shines with nuggets of information, and every bit of advice is backed up with references and examples.
My only complaint is that the authors don't cover the importance of compromise enough. They clearly describe a vision of the right way to run Internet systems, but not everyone can do everything the right way. Sometimes good enough has to be enough. That said, without the knowledge that there is a right way and that this team has reached that nirvana, there would be no hope to keep us mere mortals moving in the right direction.
-- Vince Tuesday

Read more about Security in Computerworld's Security Topic Center.