http://sun.systemnews.com Security http://sun.systemnews.com/articles/127/4/sec/20614 Christoph Schuba has made his slide presentation New Solaris Security Presentation for Tech Days 2009 available on his blog as either a PDF or OpenOffice download. The latter version includes extensive sets of notes that help to understand the slides. The presentation includes a lot of code and administration examples. http://sun.systemnews.com/articles/127/3/sec/20581 There is now a download available that provides the latest revision of the Crypto Activation CD for UltraSPARC T2 and UltraSPARC T2 Plus processor-based Sun servers. The UltraSPARC T2 and T2 Plus processors support 10 industry-standard security ciphers, including those approved by the NSA, via the on-chip, integrated cryptographic accelerators. http://sun.systemnews.com/articles/126/1/sec/20417 In a recent blog, Glenn says, "Way back when, I posted an update to the original Solaris 10 Security Deep Dive presentation that included support for Solaris 10 Update 3 (11/06). Well, it has been entirely too long since the last update, so I am happy to say that the wait has ended! A new version of the talk is ready for download! This has been quite a journey and a lot has changed in Solaris since it was first released back in 2005." Glenn has now posted an updated 93-page presentation that covers: Solaris Security Goals Solaris 9 Security Review Solaris 10 Security Deep Dive Glenn covers many Solaris 10 related security topics ... http://sun.systemnews.com/articles/125/5/sec/20259 Deploying Solaris Trusted Extensions in a corporate environment is the subject of Robert Bailey's BigAdmin article written, he says, for the layman to promote an understanding of the interactions between systems with this technology and those that do not. Solaris 10 OS 11/06 and later is the version that figures in the article. http://sun.systemnews.com/articles/125/5/sec/20341 This Sun Alert, "Security Vulnerability in the DNS Protocol may lead to DNS Cache Poisoning," cautions against a security vulnerability in the DNS protocol that may allow remote unprivileged users to cause named(1M) to return incorrect addresses for Internet hosts, thereby redirecting end users to unintended hosts or services. http://sun.systemnews.com/articles/125/5/sec/20145 Leslie Lambert, Sun's chief information security officer, spoke with Al Riske for an article entitled "Managing Security in an Open World." Riske characterizes Lambert's job as "managing a paradox," and a worldwide one at that. With a community of users (including Sun resellers and partners) that numbers in the neighborhood of 80,000, Lambert and her staff have plenty of "friends," who need access in order to do their jobs. Riske reports that Sun has more than 4,000 bloggers, more than 6,000 Facebook friends, and no fewer than seven islands in Second Life, and that it has staged numerous public and private events on the site, including a virtual town-hall meeting involving Sun's top executives in avatar-to-avatar interactions with employees around the world. http://sun.systemnews.com/articles/125/4/sec/20335 Sun announced the industry's first enterprise support for open source identity management and web single sign-on software. OpenSSO Express is the world's largest program of its kind, and it provides highly scalable, high-performance and secure web service capabilities. Sun plans to continue the releases of a new version of the OpenSSO software every three months to provide access to the latest technology available at any given time. http://sun.systemnews.com/articles/125/4/sec/20338 The Solaris 10 11/06 Operating System (OS) with Solaris Trusted Extensions has achieved Common Criteria Certification for the Labeled Security Protection Profile (LSPP) at Evaluation Assurance Level (EAL) 4+, the highest commonly recognized global security certification, it has just been announced. Completion of this certification allows Solaris 10 to be deployed by customers requiring Multi-Level Security (MLS) protection and independent validation of an OS security model. http://sun.systemnews.com/articles/124/1/sec/20019 If you haven't heard of Fedlets, then you may want to take some time to tune in to a Sun screencast that explains just what these lightweight Service Provider implementations of SAML2 SSO protocols can do and why they will be featured in the upcoming Sun Federated Access Manager (OpenSSO) release. The Fedlets screencast covers business usage scenario, process flow and some Frequently Asked Questions. http://sun.systemnews.com/articles/124/1/sec/20030 "The Network of You" is how Sun Chief Privacy Officer Michelle Dennedy characterizes the participatory web era. Her insights on how companies can protect assets and stakeholders through thinking more expansively about data privacy and personal information management are featured in the May 2008 Sun Inner Circle.