Security Log

Computerworld - TCS Announces Trusted Linux
Trusted Computer Solutions Inc. has announced that it is developing a product called TCS Trusted Linux, a multilevel-secure version of the Linux operating system.
Slated for beta testing this fall, the product will consist of software, hardware and firmware designed to enforce a unified security policy. It will be certified under the U.S. Common Criteria Evaluation and Validation Scheme at Evaluation Assurance Level 4. Herndon, Va.-based TCS says the product will also be easier to learn and use than other trusted operating systems. TCS Trusted Linux will ship early next year.
Security Bookshelf
• The Tao of Network Security Monitoring: Beyond Intrusion Detection, by Richard Bejtlich; Addison-Wesley Professional, July 2004.
This book is one of the most useful titles I've read this year. It offers a comprehensive review of intrusion detection and network monitoring. The author takes the reader from the basics of placement of network sensors through a comprehensive description of tools, many of which I had never even heard of. Bejtlich uses real-world examples to provide a clear understanding of network monitoring, intrusion detection and incident response.
One aspect of the book I particularly appreciate is the discussion of real-world applications of some popular, freely available tools. Unfortunately, the book doesn't include a CD-ROM containing these tools, but the author does provide Web addresses where you can download the programs he discusses.

Read more about Security in Computerworld's Security Topic Center.