Wednesday, February 16, 2005 - Posts

Secure Computing

There has been an overwhelming positive response from yesterday’s announcements from Bill Gates at the RSA Conference. Everybody wants secure computing; we all desire to have control over our computers and our networks.

Anyone who reads my blog knows of my distain for security as a service, I have home insurance but I still lock the doors each night. Symantec does a great job tracking threats on the internet, but like a huge defense contractor the security service has been very good to them. Computer Associates has had enough scandals to sink a battleship, yet they stay afloat selling security as a service.

I’m running Microsoft’s beta AntiSpyware and it’s doing a good job keeping the pests away, but it’s a pain in the nagware way.

Last week I was introduced to a company with a refreshing new way to approach network security. SecureWave has turned the security as a service model on its head, rather then blacklisting threats ’s Sanctuary Application Control creates a white-list of applications authorized to run on your network.

This was the promise that Group Policy Objects in Windows Server 2003 Active Directory didn’t quite realize, to assign user and application access on a network. With Sanctuary a virus, worm, spyware or adware will not be able to run if it’s not on the white-list of approved programs.

Most network intrusions are internal, inside your firewall. To control device access on your network have a look at Sanctuary Access Control, it just goes beyond what you can do with GPO’s. This is kernel level security, a completely new idea that’s going to make waves throughout this industry.