Stories about: RSA

No one loves to pay crazy per-user licensing fees, not to mention 15- 22 per cent annual support residuals. (And no one loves the endless, mind-numbing meetings with non-technical financial folks trying to pry budget for these tools from their clenched fists.) So today we're going to discuss tools that are free. However, we are not naming them to this list of "great" tools simply because they cost nothing. These are some of the best lesser-known tools out there.

A security company on Friday asked for help cracking an encryption key central to an extortion scheme that demands money from users whose PCs have been infected by malware.

Ten great free network management tools were recently showcased. Readers responded with some of their own favorites, so I'm going to take a look at those tools and report on their capabilities and usage from my perspective as an experienced network manager.

Online payment provider PayPal has patched a critical cross-site scripting vulnerability that a Finnish researcher disclosed late last week, the company said Monday.

If you are running a Debian-based Linux system and haven't already caught up with the announcement [1] that there was a major flaw with the generation of SSH, OpenVPN, DNSSEC, SSL/TLS session keys and X.509 certificate key material, you might want to update your system to address the problem.

A recently disclosed vulnerability in widely used Linux distributions can be exploited by attackers to guess cryptographic keys, possibly leading to the forgery of digital signatures and theft of confidential information, a noted security researcher said Thursday.

Symark, late in 2006, broke code development ranks with OEM partner eDMZ Security. The PowerKeeper 2.0 running on HP hardware we tested represents some slight changes in terms of flexibility, operating system and application support between the two offerings. The company plans to release PowerKeeper 3.0 this summer, but that revised code was not ready for us to test.

Cyber-Ark's product was sent to us in pre-configured VMware-format virtual machines. While it's Cyber-Ark's policy to install 100 per cent of its products, we requested this optional product delivery mode that allowed us to install the product ourselves.

Quest Privilege Manager for Unix (QPM) currently only works with Unix derivatives. No Windows allowed.

e-DMZ's Password Auto Repository (PAR) is delivered as a hardware appliance with all the services necessary for it to act as a privileged account password manager. All privileged account passwords are issued based on administratively designed rules. The passwords may be deemed valid for an indefinite life, for finite periods of time or for single purpose activities such as installations, upgrades or configuration changes.

Privileged IT staffers literally holds the keys to the castle. Access to those keys that open the doors to critical operating system and application resources must be carefully managed and legally audited. Enter the class of products referred to as privilege account management wares.