Kerberos backers form consortium
294019
(InfoWorld) - Developers and other supporters of the Kerberos authentication platform gathered at MIT's Stata Center on Thursday to unveil a new industry effort aimed at furthering the technology. Already in use by an estimated 100 million people through its longtime inclusion in other technologies, including popular products made by Apple, Microsoft, Red Hat, and Sun, backers of the new MIT Kerberos Consortium said that the group should help the platform -- invented at MIT 20 years ago -- remain relevant and accommodate new trends around shared infrastructure and mobile computing. The new Kerberos association, whose members include Centrify, Financial Services Technology Consortium, Google, Stanford University, Sun, TeamF1, and the University of Michigan, will provide some of the funding, technological expertise, and development resources needed to help achieve those goals, organizers said at the event. Sam Hartmann, chief technologist of the consortium and one of the five full-time developers of Kerberos, said the technology remains one of the IT industry's best-kept secrets but that the group is hoping to change that via its new efforts. "Kerberos has grown incrementally until today, but it's a technology where people who are using it don't know how much they've used it. When a computer security program works, you shouldn't notice it. You should be able to get your job done, and it shouldn't get in the way," Hartmann said. "Anyone using Microsoft's Active Directory or Apple Mac Server has used [Kerberos] without even knowing it, and that's the level of success we're striving for," he said. "Our job now is to expand the envelope to bring Kerberos to new developers and uses." With the backing of the group, Hartmann said that developers will attempt to modify Kerberos to work within the smaller footprint of mobile devices and applications to offer expanded authentication capabilities to areas like wireless e-commerce. The current iteration of Kerberos designed for use across multiple organizations remains "a pain to set-up" he admitted, while pledging that the assembled team will push to improve the technology's functionality to that end. The MIT Kerberos Consortium will also seek new opportunities to align the authentication system with industry standards, including SAML (Security Assertion Markup Language), as well as with standards bodies like the Information Assurance Task Force (IATF) and the Organization for the Advancement of Structured Information Standards. Bruce Vincent, the chief technology strategist at Stanford, said that Kerberos has proven critical in allowing commercial authentication systems to communicate and provide access management across multi-vendor IT systems. "Without Kerberos as part of the fabric of our existing infrastructure for ID management and a number of other uses, there's no way we could manage authentication across thousands of systems today," Vincent said, while adding that Stanford was committed to the platform for the "long haul." Officials from Centrify, which has built its own software business around Kerberos, an open-source project, said that the platform is as relevant today as it has ever been, particularly inside large corporate IT shops. As a result, his company has been able to recruit $36 million in venture funding from Silicon Valley capitalists, including Sigma Partners, and sold products to roughly 25 percent of companies ranking in the Fortune 50. "A lot of large enterprises are dealing with compliance problems, and this is forcing customers to take a hard look at how they manage their internal systems and access technologies," Kemp said. "The reality of the situation is that computing environments and infrastructure will be heterogeneous and that the people who wrote Sarbanes-Oxley weren't thinking about this situation. Most vendors' technologies don't talk to each other." Contrary to some rumors, consortium representatives reported that the Kerberos community has not had a falling-out with Microsoft and said that the platform's presence in Active Directory remains crucial based on the product's popularity among businesses. "MIT wants to make sure that everyone plays nicely together," said Stephen Buckley, executive director of the Kerberos Consortium. "Bad things only happen because people do nothing. If MIT and these visionary companies did nothing, the world's ability for authentication would fracture."
478034
Revamped Endpoint Protection program enters public beta during vendor conference this week.
68782
IN a twist of the ongoing consolidation in information security, leading players Betrusted and TruSecure are to merge. The merger will lead to the formation of Cybertrust -- a large privately held info-sec
548521
The companies expand a security alliance to help businesses keep worms and viruses from getting onto their networks.
537829
New packages promote promise of improved PC security.
759017
Four Linux vendors have joined together to develop technology that would potentially make it easier for software makers to build products for multiple distributions of the open-source operating system.
271223
Security experts have identified a development kit that can set up a scam site in as little as two seconds on a compromised server.
25291
The French Ministry of Defense has signed up Paris-based Linux vendor Madrakesoft SA and a consortium of companies to develop a highly secure Linux operating system for business, defense and government uses.
551524
SAN FRANCISCO - IBM Corp. has become the latest company to join the Liberty Alliance, a global consortium aimed at developing standards for managing user identities. IBM joins Oracle Corp. and Intel Corp. as a backer of the effort, which Sun Microsystems Inc. leads.
449182
Multiple vulnerabilities have been reported in version five of the widely-used Kerberos authentication protocol. The most serious could be exploited by crackers to gain root control to authentication servers.
170402
InfoWorld - Microsoft will participate in a meeting later this month with vendors and organizations that are backing several different identity management systems, an indication that&#160;cooperation between the software giant and its peers&#160;is improving.
88424
An invite-only CERT conference, bringing together security experts from law enforcement, ISPs, and the tech industry, will convene in Washington, DC in late August.
180364
A new managed security behemoth has been created by the merger of three security vendors. Betrusted Holdings, TruSecure and Ubizen (a subsidiary of Betrusted) will amalgamate and form a new company, known as Cybertrust.
298021
Two non-profit organizations devoted to promoting free and open source software standards have made a cooperative agreement. The Free Standards Group (FSG) and the Open Source Development Labs (OSDL) will
551390
The former plans to team up its intrusion prevention technology with the latter's vulnerability management software.
459603
A foursome that includes a health plan, a bank, an investment firm and a university recently joined the parade of organizations that have disclosed security breaches involving personal data.
263204
ElectricNews: Mandrakesoft and several other Linux backers are to work together to build a version of the operating system that will be far more secure than previously available.