| Software offers secure change control to devices |
May 16, 2006
Solidcore Systems has released software that offers configuration and change control and security for devices running "mainstream" operating systems such as Windows, Windows XP Embedded, and Linux. S3 control is a small-footprint, low-overhead tool that can be easily deployed on devices such as storage servers, handhelds, medical equipment, and ATMs, according to the company.
Solidcore notes that embedded devices running OSes such as Windows XP Embedded or Linux face "unique challenges" in terms of providing security in an environment with intermittent or no connectivity, and meeting end-customers' security policy and compliance requirements. Often, there is also a need to allow distributors and end users to customize a product within a controlled environment, without increasing the manufacturer's support costs.
According to Solidcore, S3 Control maintains an inventory of "as-built" code on the device. Only this "authorized" code is allowed to run; everything else is, by definition, unauthorized and will not run. The company calls this a "deploy and forget" strategy, in contrast to anti-virus software, which must be continually updated to maintain its effectiveness. Additionally, S3 Control's run-time overhead is lower, because there is no need to continually analyze incoming data streams for virus signatures.
S3 Control Modules
According to Solidcore, S3 Control consists of one core module and four optional modules: - Real-time change tracking -- the base module provides real-time visibility into changes happening across all systems in the form of detailed tracking information
- On-demand root cause analysis -- provides "rich forensic capability" to analyze "what changed" in the system
- Accurate reconciliation -- correlates actual changes with intended changes
- Selective change policy enforcement -- disallow changes attempted outside of policy guidelines, and enforce the use of update windows across multiple sources of change
- Deploy and forget runtime control -- determines what code is allowed to run on a system and prevents unauthorized code from executing
S3 Control also implements mechanisms that enforce change control policy, ensuring that changes only take place through authorized channels, the company adds. The software enhances accountability and compliance tracking by reconciling actual changes with intended changes.
"As more and more equipment manufacturers move to a mainstream Windows-based software platform, problems related to unauthorized change, security, and support costs are on the rise," said Solidcore president Rosen Sharma. "Solidcore's S3 Control provides the means to gain the development and interoperability benefits from developing on Windows and Linux, while deploying in a controlled state that solves these problems."
S3 Control currently supports Windows, Windows XP Embedded, and Linux. Solidcore says it will support Windows CE as soon as it identifies a suitable need.
Related stories:
(Click here for further information)
|
|
|
7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.
4 Legal Reasons to Control Internet Access
The Internet is obviously a valuable resource for many organizations. However, many are exposed to legal liability concerns because they fail to control Internet access. Learn if you're safe in this white paper.
Rapidly Resolve J2EE Application Problems
Whether you are in the process of building J2EE applications or have J2EE applications already running in production, you must ensure that they deliver the expected ROI. Learn how in this white paper.
Load Testing 2.0 for Web 2.0
There are many unknowns in stress testing Web 2.0 applications. Find out how to test the performance of Web 2.0 in this white paper.
Build Better Games Online
For the game infrastructure providers, life is complex. Making money from games has become more complicated. Why? Find out in this white paper.
Building a Virtual Infrastructure from Servers to Storage
This white paper discusses the virtual storage solutions that reduce cost, increase storage utilization, and address the challenges of backing up and restoring Server environments.
Gaining Faster Wireless Connections with WiMAX
Welcome to what is quickly becoming the hyperconnected world where anything that would benefit from being connected to the network will be connected. Learn more in this white paper.
Is Your Desktop a Security Threat?
The new wave of sophisticated crimeware not only targets specific companies, but also targets desktops and laptops as backdoor entryways into those business’ operations and resources. Learn how to stay safe in this white paper.
Increasing SAN Reliability by 100 Percent
Storage area networks (SAN) are a strong part of storage plans. Learn how to increase your reliability and uptime by 100 percent in this case study.
|
|
|
|
|
Use of this site is governed by our Terms of
Service and Privacy Policy.
Except where otherwise specified, the contents of this site are copyright © 1999-2008
Ziff Davis Enterprise Holdings Inc. All Rights Reserved.
Reproduction in whole or in part in any form or medium without express written permission of Ziff Davis Enterprise is
prohibited. Windows is a trademark or registered trademark of Microsoft Corporation in the United States and/or other countries and is used by WindowsForDevices under license from owner. All other marks are the property of their respective owners. WindowsForDevices is an independent publication not affiliated with Microsoft Corporation.
news feed