Feeds

UK.gov pioneers secure Linux to contain breaches

Return of the Mac

Beginner's guide to SSL certificates

Infosec IBM is working with the Cabinet Office to demonstrate one of the first mainstream Mandatory Access Control (MAC) environments. The MAC approach is designed to contain the impact of security breaches, a feature that will give government departments greater confidence in extending government services to the public over the net. The design for the system, which IBM is putting together with its partners Tresys Technology and Belmin Group, is based upon Security Enhanced Linux (SELinux) and IBM WebSphere.

Instead of relying on traditional gateway security technologies such as firewalls, Mandatory Access Control seeks to make sure rogue applications or malicious users are automatically contained and cannot cause damage beyond their immediate context. The proof of concept is planned to go live in May 2006, at County Durham and Darlington Acute Hospitals NHS Trust, and will focus on enabling secure access to an invoicing service, called Belmin’s ARIES (automated reconciliation and invoicing efficiency savings) service, that will replace an existing manual system.

"We consider MAC to be a key enabling technology to aid government and businesses alike in being confident they can deliver more services, more quickly, and with better function, without compromising security," commented Steve Marsh, director at the Central Sponsor for Information Assurance (CSIA).

Over time, the MAC approach might be extended to other software environments, according to IBM. "What we've demonstrated here with WebSphere and SELinux can be repeated with other software such as DB2 and business applications. In other words through, with the use of this technology, any organisation will have the ability to contain hackers, provide the necessary confinement for its applications, and minimise damage to the enterprise", said Doc Shankar, world wide Linux security lead for IBM.

IBM unveiled the project during a presentation at the Infosecurity conference in London on Wednesday. ®

Intelligent flash storage arrays

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Shellshock over SMTP attacks mean you can now ignore your email
'But boss, the Internet Storm Centre says it's dangerous for me to reply to you'
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
China is ALREADY spying on Apple iCloud users, claims watchdog
Attack harvests users' info at iPhone 6 launch
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Business security measures using SSL
Examines the major types of threats to information security that businesses face today and the techniques for mitigating those threats.