Welcome Guest. | Log In | Register | Membership Benefits

Lieberman Software Extends Privileged Identity Management To Cloud Infrastructure

ERPM continuously discovers, secures, and grants fully audited, role-based administrative access to physical and virtual IT assets within the cloud infrastructure

Mar 01, 2010 | 02:30 PM | 


LOS ANGELES --(Business Wire)-- Mar 01, 2010 Lieberman Software Corporation today announced a significant enhancement to Enterprise Random Password Manager (ERPM) that provides new levels of visibility and control for cloud service providers and their customers. ERPM now delivers fine-grain management features to protect every asset in the cloud infrastructure " including physical and virtual computers and network appliances, hypervisors, databases, middleware, line-of-business applications, and more. With this version of ERPM, cloud service providers can assure both customers and IT auditors that privileged access to sensitive data is continuously monitored and secured.

"Enterprises are eyeing significant cost savings potential in migrating to the cloud, but are concerned about data privacy and security," said Philip Lieberman, president of Lieberman Software. "As cloud service providers expand they quickly outgrow ad-hoc processes, such as scripts, to control administrative access to the IT infrastructure. Lieberman Software meets a vital need by ensuring that only authorized individuals can access sensitive data or change configuration settings that could disrupt critical cloud services, while also providing authoritative audit trails."

As the popularity of cloud services increases, so do concerns for data privacy and security. The on-demand cloud service model can necessitate rapid changes in physical and virtual infrastructure, decentralized data centers, and quickly evolving lines of responsibility and control for IT staff. Ad-hoc processes that rely on manual changes and scripts to secure privileged access can fail to keep up with these rapid changes. And, these manual processes risk service disruptions should they not account for each process interdependency and carefully synchronize every password change.

Securing Cloud Computing Environments

ERPM continuously discovers, secures, and grants fully audited, role-based administrative access to physical and virtual IT assets within the cloud infrastructure. ERPM is the only privileged identity management solution with the essential features needed to secure the largest and most decentralized IT enterprises in all vertical markets. Key differentiators include:

* Continuous auto-discovery and propagation of privileged credentials as new physical and virtual systems are brought online; * Direct authentication with all leading directory services to instantly maintain correct levels of access as personnel roles change; * Zone Processing for reliable discovery and enforcement over high-latency WAN links and inside network DMZs; and * Deployment on the service provider's choice of SQL Server or Oracle 11g databases for unmatched transparency and reliability.

The new version of ERPM adds the capability for cloud service providers to delegate different levels of privileged access, audit and compliance reporting to end-customers. With this feature, service providers can offer customers the option to grant or revoke access to sensitive systems on a time-limited and audited basis, and to see comprehensive operational reports or time-based analysis of administrative access by user, system and account. With its new dual-control multiple tenancy, ERPM secures all cloud stacks at both the physical layer (privileged system access) and the application layer. New features for this release were developed in partnership with large-scale cloud service providers, whose demands for real-time discovery and fine-grained access control are among the most stringent in the industry.

"The core of ERPM is its transparent, scalable architecture," said Lieberman. "We understand that cloud service providers have complex and dynamic environments, so we offer sophisticated discovery and correlation technology that takes the management burden away from already overworked IT staff. We also help these customers advance to a state of continuous auditing and reporting when it comes to their privileged identities."

Lieberman Software will be exhibiting the new version of ERPM in booth 1033 at RSA Conference 2010 in San Francisco, CA this week.

About Lieberman Software Corporation

Lieberman Software provides unique privileged identity management and security management solutions that secure large, multi-platform enterprises. By automating time-intensive IT administration tasks, Lieberman Software increases control over the computing infrastructure, reduces security vulnerabilities, improves productivity, and helps ensure regulatory compliance. Lieberman Software pioneered the privileged identity management market, having developed its first product to address this need in 1999. The company is headquartered in Los Angeles, CA with an additional office in Austin, TX. For more information, see www.liebsoft.com.



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS












Featured Webcasts
Featured Whitepapers
Featured Reports
Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:ssl-vpn end-point interrogator/installer activex control
Published:2010-11-03
Severity:High
Description:Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.
Vulnerability:gvim
Published:2010-11-03
Severity:High
Description:Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.
Vulnerability:cforms
Published:2010-11-03
Severity:Medium
Description:Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.
Vulnerability:links, wsn links, wsn links
Published:2010-11-03
Severity:High
Description:Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.
Vulnerability:deluxebb
Published:2010-11-03
Severity:Medium
Description:SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.