- Nokia's new N97 vs. the iPhone
- 10 Microsoft research projects
- Hard to get justice in MySpace case
- Smartphone smackdown: Storm vs. iPhone
- Apple removes antivirus support page
Senior Editor Tim Greene clarifies issues surrounding the evolving NAC security architecture.
Trusted Computing Group's work for security devices to share the data they collect is drawing more members to the standards group.
Lumeta, which makes a network-discovery appliance called IPsonar, says it is joining TCG so it can participate in use of a new standard that facilitates such sharing.
TCG has launched an effort to promote a protocol it calls IF-MAP, which stands for interface for meta-data access point. The protocol is intended to be spoken between security devices on networks and a MAP that receives and posts the data.
The posted data can then be picked up by IF-MAP compliant devices that can make use of this data that they would otherwise have no access to. So a change-management platform might flag a configuration deficit on a device and a security management device reviewing that alert might recognize that shortcoming as a violation of security policy.
The result could be fixing a vulnerability before it can be exploited, whereas the vulnerability might not have been detected in the absence of presenting the deficit to a metadata store.
Correction of the vulnerability could also make use of the meta data store. Another device such as a firewall could change policies to protect the vulnerable device before the vulnerability is exploited, for example.
Lumeta is the first vendor to announce that it has joined TCG specifically to support IF-MAP, which was introduced in April.
So far TCG hasn’t announced anyone actually using IF-MAP in the field, but stay tuned for more on that.
Tim Greene is senior editor at Network World.
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment