Click here to receive your FREE subscription to Campus Technology
Home > IBM Unveils Converged Security Strategy
News
IBM Unveils Converged Security Strategy
11/6/2007
By David Nagel
IBM is tackling security in a big way. Late last week the company unveiled a new strategy encompassing five broad aspects of security and launching new products, services, and research designed to address everything from data threats to physical vulnerabilities. The "first wave" in IBM's new security initiative targets "enterprise to edge" information security.
"For many enterprises, security is broken," said Tom Noonan, general manager IBM Internet Security Systems, in a statement released Thursday. "The nature of evolving threats is such that installing point solutions to 'keep the bad guys out' is no longer a viable way to secure a business. We advocate new approaches to reduce complexities, adapt to new business imperatives and enable business value versus just threat protection. The path to a more secure world begins with a risk management strategy that limits the impact of threats, improves business resilience and creates an enterprise free of fear."
According to IBM, the new security strategy is the result of several recent acquisitions by the company in the security space. The strategy targets five broad areas of security, including information security; threat and vulnerability; application security; identity and access management; and physical security. In order to tackle these, the company has launched several new products and services, some in partnership with security firms. These include:
- Proventia Content Analyzer Technology, a data inspection and analysis tool for the Proventia Network Intrusion Prevention System;
- IBM Data Security Services for Activity Compliance Monitoring and Reporting, a service deigned to assess and monitor malicious and non-compliant database activity and vulnerabilities and report on abuses;
- IBM Data Security Services for Endpoint Data Protection for encrypting and managing data on endpoint devices;
- IBM Data Security Services for Enterprise Content Protection, a new service meant to prevent intentional an unintentional data leakage;
- User Compliance Management Software, which provides ongoing audits and alerts when policy violations are detected;
- IBM QuickStart Services for Tivoli Compliance Insight Manager, which is designed to help with the implementation of IBM's Tivoli event management software;
- IBM Web Application Security and Compliance Management, a compliance management tool targeted toward Web applications;
- IBM Tivoli zSecure, a suite for the IBM System z mainframe; and
- A new end to end PCI compliance program designed that includes technologies and services to assess compliance, create strategies to meet compliance standards, and, ultimately, to get the client certified for compliance.
IBM has also launched a new security initiative called Security Risk Management (SRM), a collaboration between universities and IBM's research and software divisions. It's designed to provide tools for risk management for CIOs and CISOs to "manage and allocate risk across all security domains to optimize business results," IBM said. "SRM performs critical assessments, compares business-level risks across the enterprise, quantifies the risk managed and the cost of each IT control, as well as automating control testing, to allow the firms to make significant cost savings."
SRM includes dynamic risk quantification; peer group risk comparison; business control optimization; security portfolio optimization (to help assess weaknesses); and event risk calculation.
Read More:
About the author: Dave Nagel is the executive editor for 1105 Media's educational technology online publications and electronic newsletters. He can be reached at dnagel@1105media.com.
Have any additional questions? Want to share your story? Want to pass along a news tip? Contact Dave Nagel, executive editor, at dnagel@1105media.com.
Cite this Site
David Nagel, "IBM Unveils Converged Security Strategy," Campus Technology, 11/6/2007, http://www.campustechnology.com/article.aspx?aid=52684
copy text (above) for proper citation
Recommended Reading
- College of Southern Nevada Implementing Angel To Run Online Courses
The College of Southern Nevada (CSN), a community college in Las Vegas with 41,000 students, has adopted the Angel Learning Management Suite (LMS) to support its online course offerings. In Spring 2008 CSN began evaluating alternatives to WebCT, which it currently runs, and made the decision to adopt Angel in the fall. In January 2009, CSN's 865 sections of online enrollment will be delivered using the Angel LMS.
- Toshiba Brings DisplayLink to Docking Station
Toshiba has introduced a new USB docking station that incorporates DisplayLink--a technology that allows computers to connect to projectors and other types of displays through USB 2.0.
- Mitsubishi Ships SXGA+ Projector with DICOM Simulation
Mitsubishi has begun shipping a new LCD-based SXGA+ projector aimed at higher education, specifically medical schools. The new MH2850U, according to Mitsubishi, is "specially engineered for projecting DICOM simulation images for use in medical education and training."
- First Look: Komodo IDE 5.0
Last month, ActiveState released Komodo IDE 5.0, the company's latest integrated development environment (IDE). Komodo supports multiple programming and markup languages, including HTML, JavaScript, PHP, Perl, Java, Python, C++ and more. It does not support some .NET languages at present, such as ASP/ASP.NET, C# and VB.NET.
- IBM Offers Cloud Computing Help
IBM last week announced consulting services specifically designed to help organizations assess their options in using cloud computing technology. "Cloud computing" is a much argued term, but it typically refers to solutions delivered over the Internet, rather than via customer premises-installed software.
- Hollins U Chooses Omnilert for Emergency Notification Ahead of VA Deadline
Hollins University, among other higher ed institutions in Virginia, has implemented Omnilert's e2Campus emergency notification system (ENS) just ahead of a state-mandated deadline requiring them at every public institution of higher education by Jan. 1. Hollins itself isn't a public campus, but wished to implement an ENS before the end of the year, the school said in a company statement.