Risk
11/13/2007
02:57 AM
50%
50%

Sun to Purchase ID Firm Vaau

Sun Microsystems strengthens market-leading identity management portfolio with intent to acquire Vaau

SANTA CLARA, Calif. -- Sun Microsystems, Inc. (NASDAQ:JAVA)(1) and Vaau, Inc. today announced that the two companies have entered into a definitive agreement pursuant to which Sun will acquire Vaau, a premier provider of Enterprise Role Management (ERM) and identity compliance solutions.

As a leader in enterprise role management and identity certification, Vaau provides an integrated set of capabilities to automate and enforce internal security controls that will further enhance Sun's ability to provide comprehensive solutions to our customers across the full spectrum of governance, risk and compliance.

As regulatory requirements continue to tighten, enterprises must find new ways to reduce auditing costs. By leveraging ERM, organizations can reduce these costs by discovering, defining, and managing user access with a common vocabulary that links business and IT. Vaau's RBACxTM solution combined with the provisioning and identity auditing capabilities of Sun's identity management portfolio powered by the Solaris™ 10 Operating System will enable organizations to streamline the provisioning process and significantly reduce the cost of auditing.

“This announcement further underscores Sun's leadership in the high growth identity audit and compliance categories, adding both a market-leading solution and proven implementation services to our portfolio,” said Jim McHugh, vice president of Marketing, Software Infrastructure, Sun Microsystems. “As a leader in enterprise role management and identity certification, Vaau provides an integrated set of capabilities to automate and enforce internal security controls that will further enhance Sun's ability to provide comprehensive solutions to our customers across the full spectrum of governance, risk and compliance.”

Sun Microsystems Inc. (Nasdaq: SUNW)

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8802
Published: 2015-01-23
The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.

CVE-2014-9623
Published: 2015-01-23
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quote and cause a denial of service (disk consumption) by deleting an image in the saving state.

CVE-2014-9638
Published: 2015-01-23
oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.

CVE-2014-9639
Published: 2015-01-23
Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.

CVE-2014-9640
Published: 2015-01-23
oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If youíre a security professional, youíve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.