Cyber Security Institute

§ Current Worries

Top 3 Worries

  • Regulations
  • Old Firewall Configurations
  • Security Awareness

§ Listening

For the best information

  • The underground
  • Audible
  • Executive Excellence
  • Music (to keep me sane)

§ Watching

For early warnings

  • 150 Security Websites
  • AP Newsfeeds
  • Vendors

Tuesday, September 14, 2004

Sun touts tougher security in Solaris 10

Sun Microsystems said its Solaris 10 operating system will be ready for general release by year’s end, complete with a sharper set of security teeth.

Paul Sangster, senior Solaris security architect for the Santa Clara, Calif.-based company, touted Solaris 10’s security improvements during a roundtable discussion at Sun’s Burlington, Mass., offices Monday, saying, “Security touches everything we do, and in designing Solaris 10 we made the assumption that the Web server is sloppy” and in need of extra layers of protection.  I expect IT administrators will greatly appreciate the N1 grid container zone feature and the user rights management privilege feature,” Sangster said.  “These features enable (them) to much more tightly protect their services, even in the face of an attacker exploiting a known hole in some third-party software that was deployed but not yet patched.

He said the N1 grid container technology will allow users to create up to 4,000 secure, fault-isolated software partitions, each with its own IP address, memory space, file area, host name and root password.

Solaris 10 has been in development for two and a half years, and has slowly been made available to customers in recent months.

He added that Linux applications can run unmodified on Solaris.

Weinberg added that the capabilities in Trusted Solaris have been folded into Solaris 10.  “Trusted Solaris has been used in government but has been separate from the standard Solaris,” he said.  “We started this integration with Solaris 8, and Solaris 10 completes the move.”

James Dobson, system architect for Dartmouth College in Hanover, N.H., talked about the success the institution’s psychology department has had in using a version of Solaris 10.  Pointing to the operating system’s improved interoperability, Dobson said, “We use multiple applications and platforms and Solaris 10 is working smoothly with all of these.,289142,sid14_gci1005868,00.html

Posted on 09/14