Symantec announces DLP powered by Oracle IRM

Oracle IRM and Symantec DLP integration announced

Launching their latest release of data loss prevention (DLP), Symantec focused on the new functionality in version 10 allowing customers to directly leverage the benefits or Oracle IRM to protect their sensitive data.

Symantec is the leader in DLP technology and organizations world wide leverage their solution for discovery and monitoring of enterprise network traffic and perimeters to detect the flow of information that needs to be protected for privacy, compliance, or from competitors. When DLP detects something that is deemed confidential it can take some action upon it, typically this is in the form of blocking the information from continuing to be transmitted or removing it from the file servers.

However combining DLP with IRM means you don't have to restrict the end user or impede the business by blocking their attempts to collaborate. Instead you directly enable the organization to interact securely and teach best practices. Oracle IRM technology will encrypt and protect the document or email so that it can be shared. IRM ensures only authorized users have access and provides advanced security controls such as revocation to the information, even after it has left the control of your enterprise networks.

Oracle and Symantec have been working closely together over the past months to build an integration between Oracle IRM and DLP based on direct input from customers and implementation partners. The combined solution offers the most innovative, use-case driven security solution of any IRM and DLP combination.

Oracle IRM is the leading rights management solution for enterprise-scale document and email security and Oracle is the leader in Enterprise Identity & Access Management according to Gartner, Burton and Forrester. Combining this innovative technology and thought leaders for Access Management and Content Security means customers can now have rich monitoring and detection capabilities.

Instead of blocking attempts to share valuable data, this solution allows it to happen securely. We first demonstrated this capability at Oracle Open World and if you were not able to attend, we've uploaded some video demonstrations to our YouTube channel.

If you want to learn more about using Oracle IRM and DLP together contact us.

IRM at oracle.com

Online demonstration

Downloads on OTN

Technical white paper

Business white paper


The official Oracle IRM Blog is available here or by looking through the archives.

Identity Management Partners making news at Oracle Open World

While Oracle Open World is traditionally dominated by Database and Applications, this year Identity Management made waves and made press.

Network World's Dave Kearns similarly noted the shows focus but reported on some of the highlights for Information Security in his Column
http://www.networkworld.com/newsletters/dir/2009/101909id2.html?hpg1=bn

Particularly he noted the innovative solution for Privileged Account Management offered by Liebsoft and highly tuned and integrated to work with Oracle products:

http://www.liebsoft.com/common.aspx?id=3103

Also of interest to Dave was the unique Enterprise SSO Anyware offering Oracle brought to market through their alliance with PassLogix:

http://www.oracle.com/us/corporate/press/035509

Though Dave did not mention what many feel is one of the most innovative architectural solutions for Web Access Management announced by F5 to reduce the complexity of agent deployments, updates, and management by moving them to the load balancer with their industry leading Big-IP product.
http://www.f5.com/news-press-events/press/2009/20091006.html

What is Consumer SOA? "COSA"

So what is Consumer Oriented Service Architecture (COSA)?

SOA is a well known and established technology area with innovation driven by technology vendors like BEA/Oracle and SoftwareAG for leveraging/wrapping legacy applications and rapidly integrating technology across platforms, partners, and customers but COSA is a new concept.

The term itself was coined by Oracle Product Manager Vikas Jain in his blog
http://ws-security.blogspot.com/2009/10/consumer-oriented-service-architecture.html
But the idea is well established and was driven by those delivering services not by technology vendors.

As Vikas points out "While SOA concentrated on how to make the service architecture better, it left out on the consumer focus. The consumer focus becomes especially important when services are exposed to partners."

Vikas goes on to define the key challenges and requirements for a COSA solution such as Consumer Identification, Throttling so that the right customers get the right SLA, Contracts & Policies, Reporting, and Provisioning.

Today media vendors and social media vendors are leading the charge and paving the road with innovative technology vendors like Vordel, Sonoa Systems, Layer7, and Intel.

MTV Networks is a great example with their work with Sonoa Systems:
http://www.sonoasystems.com/about-us/news-and-events/mtv-networks-selects-sonoa-for-api-infrastrcture-feed-management

It is also demonstrated by the participation of Steve Riley, Evangelist and Strategy for Amazon at the Vordel User Conference.
http://www.vordel.com/news/press/16_09_09.html


Intel is targeting Oracle Fusion customers with http://www.intelforfusion.com/

Layer7 is also making waves with their announcement around integrating Oracle Service Bus with their hardware XML Gateway. http://www.layer7tech.com/main/products/osba.html

F5 Announces Plans to Unify Access Management for Web Applications

Solution Will Combine F5`s BIG-IP System with Oracle Access Manager to Enhance
Single Sign-on Capabilities and Simplify Access Control

SEATTLE--(Business Wire)-- F5 Networks, Inc. (NASDAQ:FFIV), the global leader in Application Delivery Networking (ADN), today announced that it plans to integrate F5 BIG-IP access solutions with Oracle Identity Management software to centralize web application authentication and authorization services, streamline access management, and reduce infrastructure costs.

Details
Advantages of combining F5 and Oracle solutions will include:

* Tight integration of the F5 BIG-IP system with Oracle Access Manager, enabling reduced TCO, lowered deployment risk, and streamlined operational efficiencies for customers.
* Integration with Oracle Access Manager Single Sign-On (SSO) to promote a superior end-user experience and enhanced user productivity. This integration will enable organizations to adopt an access management and SSO strategy that allows rapid ROI.
* A unified point of enforcement to simplify auditing and control changes in configuring application access settings.

F5, a member of the Oracle PartnerNetwork, will provide additional information about the planned solution in Booth #1421 at Oracle OpenWorld, taking place October 11-15 at the Moscone Convention Center in San Francisco. To learn more about F5`s presence at Oracle OpenWorld and other industry events, please visit www.f5.com/news-press-events/events.

Availability
The combined solution is expected to be available within the first half of CY 2010.

Supporting Quotes
"Ease of implementation and TCO are very important to Oracle and its customers," said Brian Mozinski, Director, Product Management, Identity Management and Security at Oracle. "By integrating functionality from Oracle Access Manager and F5`s BIG-IP system, customers can further streamline their deployments of the Oracle Fusion Middleware 11g Identity Management Suite."

"Our goal is to help businesses maximize the value of their technology investments," said Muneer Taskar, Director, Sales at Persistent Systems, a technology company specializing in software product development services. "Integration and interoperability from vendors like Oracle and F5 make customer deployments simpler and less costly to deploy and manage. We look forward to adding this new access management solution to our product portfolio."

"Close working relationships with key identity and access management vendors like Oracle are very important to F5," said Jason Needham, Sr. Director of Product Management at F5. "Together, we can deliver significant value to our joint customers by enabling them to centralize and unify application access control services across increasingly diverse network environments. F5 is committed to providing innovative access management solutions and edge services-such as SSL VPN, acceleration, and other managed services-to maximize IT agility and deliver enhanced functionality, security, and ROI to customers."

About F5 Networks
F5 Networks is the global leader in Application Delivery Networking (ADN), focused on ensuring the secure, reliable, and fast delivery of applications. F5`s flexible architectural framework enables community-driven innovation that helps organizations enhance IT agility and dynamically deliver services that generate true business value. F5`s vision of unified application and data delivery offers customers an unprecedented level of choice in how they deploy
ADN solutions. It redefines the management of application, server, storage, and network resources, streamlining application delivery and reducing costs. Global enterprise organizations, service and cloud providers, and Web 2.0 content providers trust F5 to keep their business moving forward. For more information, go to www.f5.com.

About the Oracle PartnerNetwork
Oracle PartnerNetwork is a global business network of more than 21,000 companies that deliver innovative software solutions based on Oracle software. Through access to Oracle`s premier products, education, technical services, marketing and sales support, the Oracle PartnerNetwork program provides partners with the resources they need to be successful in today`s global economy. Oracle partners are able to offer their customers leading-edge solutions backed by Oracle`s position as the world's largest business software company. Partners who are able
to demonstrate superior product knowledge, technical expertise and a commitment to doing business with Oracle qualify for the Certified Partner levels. For more information, go to http://oraclepartnernetwork.oracle.com.

F5 and BIG-IP are trademarks or service marks of F5 Networks, Inc., in the U.S. and other countries. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. All other product and company names herein may be trademarks of their respective owners.

This press release may contain forward-looking statements relating to future events or future financial performance that involve risks and uncertainties. Such statements can be identified by terminology such as "may," "will," "should," "expects," "plans," "anticipates," "believes," "estimates," "predicts," "potential," or "continue," or the negative of such terms or
comparable terms. These statements are only predictions and actual results could differ materially from those anticipated in these statements based upon a number of factors including those identified in the company's filings with the SEC.

F5 Networks, Inc.
Alane Moran, 206-272-6850
a.moran@f5.com
or
Connect Public Relations
Holly Hagerman, 801-373-7888
hollyh@connectpr.com

Symark is now BeyondTrust

BeyondTrust PowerBroker® Joins Oracle Extended Identity Management Ecosystem

“ONLY 47% OF COMPANIES
IMPLEMENT AN IT REGULATORY
COMPLIANCE PROGRAM.”
- DELOITTE SURVEY, 2009

Information technology and intellectual property are the lifeblood of a typical enterprise
these days. Safeguarding these precious assets is imperative to every organization, and
the number one priority needs to be protecting the organization from itself. Specifically,
protecting administrative, database and superuser passwords, such as root, on Unix/
Linux servers represents the most critical access points to business-critical IT assets and
resources at their most fundamental level. Addressing this dilemma, in addition to the
time consuming tasks of managing multiple identity management solutions, can be an
impossible task for enterprises. That is why BeypndTrust chose to partner with Oracle, in
order to offer a single source solution for all enterprise identity management needs.
BeyondTrust PowerBroker, now part of the Oracle® Extended Identity Management
Ecosystem, provides enterprises with a comprehensive privileged access control application
to implement highly flexible policy language to enforce across multiple Unix/Linux
platforms and operations throughout the enterprise. Features include:

SELECTIVELY DELEGATE ROOT & OTHER SPECIAL ACCOUNT PRIVILEGES
PowerBroker enables users to perform specified administrative tasks without disclosing the
account password to them, dramatically strengthening enterprise security. Additionally,
PowerBroker secures and manages third-party application account privileges, such as Oracle
database accounts, which commonly store business critical information.

HIGHLY CONFIGURABLE SECURITY & ENFORCEMENT POLICIES
PowerBroker offers a dynamic policy scripting language to arm administrators with the tools
to create and manage detailed policies seamlessly, which grant specific access to perform
tasks. Enterprises can granularly restrict per user, group, netgroup, host, day/date/time, to/
from specified hosts, and based upon AD, NIS, NIS+ or LDAP data.

SECURELY LOG, REPORT & PRODUCE RELIABLE AUDIT TRAILS
PowerBroker logs every requested task, including all environmental information, and
encrypts logs to prevent modification. PowerBroker protects enterprises from common
violations of many U.S. and Canadian government compliance regulations and industry
standards such as SOX, PCI, HIPAA, GLBA and FISMA.

QUICK DEPLOYMENT & NON-INTRUSIVE
PowerBroker provides reliable, highly secure operations with minimal impact to existing
systems and network architectures. There are no required changes to the Unix/Linux kernel
or operating system or system reboots after installation. PowerBroker sessions are similar to
telnet sessions, requiring minimal system resources.

To learn more visit:

http://www.beyondtrust.com/

Location, Location, Location!!!

Why IP Intelligence (Geo Location Data) is important for Authentication?

In the growing area of risk based authentication where organizations from banks to governmental departments are looking to share more information and services with people there is a much greater risk/fear of fraud.

Information Security vendors such as Oracle, RSA, Verisign, and others have complimented their existing Web Access Control technologies like Oracle Access Manager (OAM) with Risk Based Authentication solutions such as Oracle Adaptive Access Manager (OAAM) which assess the risk of fraud at the moment of a transaction and, based on policy, respond by allowing/denying the transaction or requiring secondary or “Step-up Authentication”.

In these scenarios, the more context available to the transaction the better risk analysis. Knowing that a banking customer who lives in Oslo, Norway is trying to send a wire transfer out of the account is actually logging in from Seattle, WA gives makes it simple to understand the potential risk.

IP data enables core risk assessments made within OAAM including; website visitor location (i.e. block high risk locations), network characteristice (i.e. is the visitor connected through an anonymzing proxy—intentionally masking their location), IP data provides an “IP fingerprint” of a visitor.

To help deliver this intelligence to customers Oracle partners with Quova as the preferred IP provider for OAAM. They provide specific ROI advantages over competitors.. Quova’s unmatched accuracy and depth of proxy intelligence data result in increased fraud catch and lower false positive escalations.

And Quova is the only provider that subjects its research process and data quality to annual independent audit by PricewaterhouseCoopers. Quova is widely recognized as the market leader and is in use throughout the anti-fraud marketplace. Quova for OAAM customers include; Monster.com, DFCU, ICICI Bank, National City Corporation.

To Learn more about Quova:
Contact Jon Heintschel
650-528-3739 or jheintschel@quova.com

To Learn more about OAAM
http://www.oracle.com/technology/products/id_mgmt/oaam/index.html

Or to learn about the Oracle Access Suite:
http://www.oracle.com/products/middleware/identity-management/access-management-suite.html

Why the Public Sector needs Bio-Metric Solutions and how ORCL + Daon can help

Combing Oracle IDM Products with Best-of-Breed Biometric Infrastructure from Daon enables successful deployments across the Public Sector



Why are government organizations looking for this?

• Stronger security to mitigate fraud & ID theft (more details below)
• Strong Authentication without tokens (more details below)
  

Why has it not been adopted already?

• Requirements for end-points to capture & verify biometrics
• Complexity of provisioning & sharing biometrics across platforms and regions
  

So how can we be successful now?

• Provisioning credentials & enabling cross platform SSO
• Managing roles and fine grain entitlements
  

What is the real scoop on Fraud:

• eCommerce Fraud Losses Projected to Grow to $3.6 Billion in 2008
• Merchants estimate that 1.4% of their online sales will line the pockets of fraudsters
  Source: CyberSource eCommerce Fraud Survey, 2007
• Société Générale €5 billion in trading loss due to unauthorized trades
• Trader executed €50 billion of unauthorized trades and attempted to cover over his losses. When the bank discovered the fraud it had to unwind the position in 3 days, resulting in €5 billion in loss and triggering a world wide financial market sell-off.
  Source: CNN, January 2008
• $17 Million remediation cost for 45 million stolen credit card numbers
  Breach of TJ Maxx’s IT systems led to the lost of 45 million credit and debit card numbers over a period of 18 months. Estimated revenue impact from negative press coverage was $4.5 billion.
  Source: Information Week, May 2007

So why is Strong Authentication not enough?

• Tokens & Smart Cards require the device to be present, credentials still can be stolen and subject to man in the middle attacks and other Phishing or Virus/Malware breaches
• Conversly, Biometric Credentials can not be stolen or replicated, user does not have to carry/track additional tools.
• They can be verified for uniqueness against state, local, federal & international databases
  Rapidly identify potential threats or risky persons.
  

This is where it gets tricky

• Capturing & Storing Credentials
• High cost of having devices at the end-points to capture data
• Tremendous disparity in capture/read devices & algorithms
• It is difficult to future proof your deployment when devices, algorithms, and infrastructure continuously evolving
• Risk of being out of date by the time of production deployment
• Challenging to provisioning credentials and synchronize biometrics with apps & infrastructure
• Challenge for using single biometric authentication for SSO
  

So how do you maximize the ROI?

• Govt. & Ent. require solutions that compliment & enhance entire IT IDM infrastructure to justify investment.
• Oracle IDM Solutions Provisioning Credentials
• Oracle Identity Manager (OIM) enables automated provisioning or revocation of accounts based on biometric auth/enrolment
• Oracle Role Manager (ORM) ties biometric attributes to user roles
• Oracle Entitlements Server (OES) richly defines fine-grain applications entitlements to grant/limit access to specific functions, data sets, or transactions based on level of authentication, roles, and credentials.
• Gain seamless authentication across applications with Oracle eSSO (OESSO)
• Replaces name/pwd with a a single biometric authentication to increase security level & create single sign-on across web & desktop applications.
• Oracle Adaptive Access Manager (OAAM) Ties biometric authentication with broader authentication context (like device identification and location) to validate the entire transaction and identify anomalies or malicious behavior over time.
  

Here is how the Daon solution fits in...

For more information on Daon please visit their website.