Re: Sun cans Trusted Solaris, was Why Easy To Use Software Is Putting You At Risk

Craig Wright wrote:


Hello,
Many people on the list have the idea that people want secure software
at any cost.


Sun have produced a very good product - Trusted solaris for a long time.
I would like people to answer me (if they can) why they have decided to
stop producing it. To explain why, if everyone wants secure by design
software they are not willing to pay the extra cost to obtain it and
thus why Sun is going to no longer support this OS.

Trusted Solaris has an EAL 4+ rating, supports MAC and RBAC and has a
verified architecture.

Instead Sun will add ECC (elliptice curve crypto) to the existing
versions of Solaris.

Flames welcome, please explain why more people are not implementing a
provably more secure system when it is available.

Regards
Craig S Wright

See:
http://www.infoworld.com/article/06/02/13/75309_HNendtrustedsolaris_1.ht
ml

Liability limited by a scheme approved under Professional Standards Legislation in respect of matters arising within those States and Territories of Australia where such legislation exists.

DISCLAIMER
The information contained in this email and any attachments is confidential. If you are not the intended recipient, you must not use or disclose the information. If you have received this email in error, please inform us promptly by reply email or by telephoning +61 2 9286 5555. Please delete the email and destroy any printed copy.


Any views expressed in this message are those of the individual sender. You may not rely on this message as advice unless it has been electronically signed by a Partner of BDO or it is subsequently confirmed by letter or fax signed by a Partner of BDO.

BDO accepts no liability for any damage caused by this email or its attachments due to viruses, interference, interception, corruption or unauthorised access.

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------





Craig,

Did you read the part of the article that discusses Trusted Extensions? For those who need TSOL's capabilities, they can purchase the Extensions to give them MAC, MLS, and all of the other TSOL features on top of an existing Solaris 10 installation.

Also consider the pricing of TSOL, for a single CPU machine, a license for Certified Trusted Solaris 8 is $2,495.00. On an 8 CPU E4500 it would cost over $40,000.00, only people who really require that level of security are willing to pay that much to get it.

Trust is a part of security, but not the only part.



Robert Escue
System Administrator


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Sun cans Trusted Solaris, was Why Easy To Use Software Is Putting You At Risk
    ... Many people on the list have the idea that people want secure software ... at any cost. ... Sun have produced a very good product - Trusted solaris for a long time. ...
    (Security-Basics)
  • Re: This is what we need more of.
    ... solar cells produce power but is difuse not cost effective.... ... can be used to boil water ... using the sun. ... trees for paper was bad for the environment. ...
    (misc.invest.stocks)
  • Re: Anyone else worried about the future of Sun?
    ... > Yes, Josh. ... They were much more capable than the "equivalent" Sun equipment. ... Generally speaking the IBM system significantly outperformed the closest ... Sun system...at a significant cost savings. ...
    (comp.sys.sun.admin)
  • Re: Ten worst programs
    ... Have you considered approaching upper management with a basic cost/benefit ... if you can't justify the cost of replacing their favorite products ... with more secure alternatives, your project is doomed from the beginning. ... > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ...
    (Security-Basics)
  • Re: This is what we need more of.
    ... parabolic solar reflectors in the desert though are already proven and ... cannot compete for cost and raw power with nuclear, ... can be used to boil water ... using the sun. ...
    (misc.invest.stocks)