Feeds

RSA pushes single sign-on into the clouds

Just the one dear

3 Big data security analytics techniques

RSA has launched a set of services designed to foster trust between business and cloud service providers.

Cloud Trust Authority from the security division of EMC is designed to tap into the growing market for cloud computing with a roster of technologies and services, the first of which is an Identity Service. Partially based on VMWare's virtualisation tech, the service will allow businesses to "secure user access and user provisioning to multiple cloud providers via federated single sign-on and directory synchronisation".

Single Sign-On offers the benefits of minimising password management headaches for firms. RSA has taken this idea and applied it to cloud services, such as email. Secure logins to these services will be facilitated via RSA SecurID technology in much the same way as the technology has long been applied to remote access.

A second service, Compliance Profiling Service, will allow businesses to benchmark whether cloud service providers are meeting industry best practice, as defined by industry organisations such as the Cloud Security Alliance.

The two services are collectively designed to give businesses greater confidence in running key enterprise services from the cloud, while giving service providers the opportunity to deliver applications that might otherwise be kept in-house due to either security or compliance concerns.

A beta of RSA Cloud Trust Authority, including both the Identity and Compliance services, will be available in the second half of 2011.

RSA's announcement of the services was one of a slew of announcements of cloud security products and services made at the RSA Conference in San Francisco this week.

For example, IBM launched an intrusion prevention appliance rated to work at 20Gbps. The GX7800 is aimed at cloud service providers as well as enterprises. Meanwhile, Symantec said it is making greater use of cloud-based reputation technology in Symantec Endpoint Protection 12, the latest edition of its security client for corporate desktops.

Using cloud-based community intelligence to whitelist known benign apps can reduce the performance overhead of anti-virus scanning by as much as 70 per cent, the security giant claims. ®

SANS - Survey on application security programs

More from The Register

next story
This time it's 'Personal': new Office 365 sub covers just two devices
Redmond also brings Office into Google's back yard
Kingston DataTraveler MicroDuo: Turn your phone into a 72GB beast
USB-usiness in the front, micro-USB party in the back
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
BOFH: Oh DO tell us what you think. *CLICK*
$%%&amp Oh dear, we've been cut *CLICK* Well hello *CLICK* You're breaking up...
Just what could be inside Dropbox's new 'Home For Life'?
Biz apps, messaging, photos, email, more storage – sorry, did you think there would be cake?
IT bods: How long does it take YOU to train up on new tech?
I'll leave my arrays to do the hard work, if you don't mind
Amazon reveals its Google-killing 'R3' server instances
A mega-memory instance that never forgets
prev story

Whitepapers

Designing a defence for mobile apps
In this whitepaper learn the various considerations for defending mobile applications; from the mobile application architecture itself to the myriad testing technologies needed to properly assess mobile applications risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.