Vulnerabilities / Threats
2/25/2013
10:32 PM
Connect Directly
Google+
Twitter
RSS
E-Mail
50%
50%
Repost This

RSA, Juniper Team Up In Threat Intelligence-Sharing

Intelligence-sharing among vendors -- and about attacks on vendors -- key to thwarting today's attacks, officials say

SAN FRANCISCO -- RSA CONFERENCE 2013 -- RSA, the security division of EMC, and Juniper Networks here today announced that they have teamed up to share threat intelligence -- and the partnership ultimately will include sharing intel about attacks targeting security vendors as well.

RSA Conference 2013
Click here for more articles.

"We have to do a better job cooperating" as an industry to leverage all of the threat intelligence gathered today, says Art Coviello, CEO of RSA. "We can't just rely on internal data: We need external data as well. If criminals and rogue actors can get together, why can't the good guys? ... It's important that we [vendors] gather and share intelligence."

RSA and Juniper will collaborate and share intel from RSA's Live threat intelligence and Juniper's newly unveiled Spotlight Secure intel service. Juniper also said it will embed RSA's mobile authentication technologies into its Junos Pulse SSL Secure product.

Coviello says RSA already has been doing some intel-sharing with other vendors via its Antifraud Command Center. "When you're talking about intelligence-driven security ... the more sources of intelligence, the better," he says. He says that over time, the intel-sharing would also encompass vendors' firsthand attack threat information.

Even so, Coviello says the threat data vendors gather from other attacks is especially valuable. "We [vendors] might be a juicy target, but there are juicier targets," he says.

Nawaf Bitar, senior vice president and general manager of the security business unit at Juniper Networks, says Juniper and RSA's partnership is a natural fit. "Our strength is in enforcement ... and they understand threats," Bitar says. Teaming up will help stop more APT-style and other attacks, he says.

Meanwhile, RSA also announced Authentication Manager 8, its next-generation authentication solution that blends the company's SecurID one-time password token technology with risk-based authentication that verifies and authorizes users. Authentication Manager 8, which will ship this quarter, is the core of RSA's Adaptive Identity & Access Management family.

"With the number of significant breaches we've seen this year, it's no secret that static authentication solutions are falling short," says Jason Malo, research director at the Tower Group. "Next-generation authentication solutions must be able to adapt as risk levels change and threats become more sophisticated. Merging big data analytics with strong authentication technologies is a good first step."

Have a comment on this story? Please click "Add Your Comment" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Kelly Jackson Higgins is Senior Editor at DarkReading.com. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise Magazine, ... View Full Bio

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-3946
Published: 2014-04-24
Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682.

CVE-2012-5723
Published: 2014-04-24
Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.

CVE-2013-6738
Published: 2014-04-24
Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an invalid query parameter in a response from an OAuth authorization endpoint.

CVE-2014-0188
Published: 2014-04-24
The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not properly handle authentication requests from the remote-user auth plugin, which allows remote attackers to bypass authentication and impersonate arbitrary users via the X-Remote-User header in a request to...

CVE-2014-2391
Published: 2014-04-24
The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain potent...

Best of the Web