Vulnerabilities / Threats
2/25/2013
10:32 PM
Connect Directly
Google+
Twitter
RSS
E-Mail
50%
50%

RSA, Juniper Team Up In Threat Intelligence-Sharing

Intelligence-sharing among vendors -- and about attacks on vendors -- key to thwarting today's attacks, officials say

SAN FRANCISCO -- RSA CONFERENCE 2013 -- RSA, the security division of EMC, and Juniper Networks here today announced that they have teamed up to share threat intelligence -- and the partnership ultimately will include sharing intel about attacks targeting security vendors as well.

RSA Conference 2013
Click here for more articles.

"We have to do a better job cooperating" as an industry to leverage all of the threat intelligence gathered today, says Art Coviello, CEO of RSA. "We can't just rely on internal data: We need external data as well. If criminals and rogue actors can get together, why can't the good guys? ... It's important that we [vendors] gather and share intelligence."

RSA and Juniper will collaborate and share intel from RSA's Live threat intelligence and Juniper's newly unveiled Spotlight Secure intel service. Juniper also said it will embed RSA's mobile authentication technologies into its Junos Pulse SSL Secure product.

Coviello says RSA already has been doing some intel-sharing with other vendors via its Antifraud Command Center. "When you're talking about intelligence-driven security ... the more sources of intelligence, the better," he says. He says that over time, the intel-sharing would also encompass vendors' firsthand attack threat information.

Even so, Coviello says the threat data vendors gather from other attacks is especially valuable. "We [vendors] might be a juicy target, but there are juicier targets," he says.

Nawaf Bitar, senior vice president and general manager of the security business unit at Juniper Networks, says Juniper and RSA's partnership is a natural fit. "Our strength is in enforcement ... and they understand threats," Bitar says. Teaming up will help stop more APT-style and other attacks, he says.

Meanwhile, RSA also announced Authentication Manager 8, its next-generation authentication solution that blends the company's SecurID one-time password token technology with risk-based authentication that verifies and authorizes users. Authentication Manager 8, which will ship this quarter, is the core of RSA's Adaptive Identity & Access Management family.

"With the number of significant breaches we've seen this year, it's no secret that static authentication solutions are falling short," says Jason Malo, research director at the Tower Group. "Next-generation authentication solutions must be able to adapt as risk levels change and threats become more sophisticated. Merging big data analytics with strong authentication technologies is a good first step."

Have a comment on this story? Please click "Add Your Comment" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Kelly Jackson Higgins is Senior Editor at DarkReading.com. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise Magazine, ... View Full Bio

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-0174
Published: 2014-07-11
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

CVE-2014-3485
Published: 2014-07-11
The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.

CVE-2014-3499
Published: 2014-07-11
Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

CVE-2014-3503
Published: 2014-07-11
Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack.

CVE-2014-3991
Published: 2014-07-11
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) dol_use_jmobile, (2) dol_optimize_smallscreen, (3) dol_no_mouse_hover, (4) dol_hide_topmenu, (5) dol_hide_leftmenu, (6) mainmenu, or (7) leftmenu pa...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Marilyn Cohodas and her guests look at the evolving nature of the relationship between CIO and CSO.