From: Chris McDonald (6/29/93) To: securitylist:;@WSMR-SIMTEL20.AR, CC: krvw@agarne.ims.disa.MIL Mail*Link¨ SMTP Information Systems Securit # 93-18 1. The latest CSL Bulletin, May 1993, addresses the topic of "Security Issues in Public Access Systems". A public access system is defined as: a system used by either the general public or a large or significant subset of the public. The Bulletin does an excellent job in addressing PL100-235 concerns for those systems with high visibility because of public access. One may obtain CSL Bulletins by writing NIST, B151, Technology Building, Gaithersburg, MD 20899 or by telephoning (301) 975-2821. 2. The second edition of DISSPATCH, May 1993, has hit the streets. The publication is the brain child of the Defense Information Systems Agency's Center for Information Systems Security. DISA/CISS has staked out some ambitious plans, if not controversial ones, for the DOD community. If you like to know who is on first and second, then the first two editions of DISSPATCH will be of interest. I have already contacted the editor with some off-the-wall ideas for the publication. The Managing Editor is LT Leslie Dibble, USN; and coincidentally she has been a member of this mailing group for several months. If you have some ideas, or would like to subscribe, the number is DSN 226-1897 or COMMERCIAL (703) 696-1897. The DISSPATCH is available electronically from a BBS at (703) 696-8726. 3. Anti-Viral Tools. a. Central Point has shipped version 2.0 of CPAV. As a registered user, I received my update last week. In comparison to version 1.4 the program appears to have increased scanning speed without a loss of accuracy for what it can detect. There have been some menu changes along with a limited capability to scan compressed files such as PKLITE and LZEXE. Interested users should consult the evaluation of MSAV posted to Virus-L by Y. Radai since many of the concerns which he raised will be found in CPAV. b. McAfee Associates has distributed version 106 of its anti-viral tools. Version 105 apparently was never announced, but simply available for downloading from the McAfee BBS/Internet host. c. Thunderbyte Scanner, version 6.03, is now available. As a registered user, I received notification last week of a new registration key procedure for authorized users. The rationale for the change was "security". It is my attention to update the relevant product test for the program because I am very impressed with its heuristic scanning features. TBAV (for short) is actually a complete line of anti-viral tools bundled together. One has detection, disinfection, memory resident, and other programs. 4. DEMAX Software has announced the publication of a new quarterly publication entitled "Security Management". Free subscriptions to "qualified readers" are possible. The first edition was not a sales pitch for DEMAX products, but rather had several short articles on a variety of topics. If you might be interested, contact Tanya Candia, Vice President for Marketing at (800) 283-3629. 5. The Preliminary Program for the Third Annual International Security Systems Symposium and Exhibition, November 15-17, 1993 in Washington, DC crossed my desk this afternoon. There are three tracks each day. Some top level people involved with the emphasis, it appears, on intelligence collection activities. One may obtain conference information by calling (301) 986-7800. ------- ------------------ RFC822 Header Follows ------------------ Received: by internetqm.llnl.gov with SMTP;29 Jun 1993 22:40:11 -0800 Return-path: CMCDONALD@WSMR-SIMTEL20.ARMY.MIL Received: from icdc.llnl.gov by icdc.llnl.gov (PMDF #3384 ) id <01GZYTNQKH3KA3F1UN@icdc.llnl.gov>; Tue, 29 Jun 1993 22:39:35 PST Received: from pierce.llnl.gov by icdc.llnl.gov (PMDF #3384 ) id <01GZYTN6PP1CA3F2N2@icdc.llnl.gov>; Tue, 29 Jun 1993 22:39:12 PST Received: by pierce.llnl.gov (4.1/LLNL-1.18/llnl.gov-05.92) id AA15924; Tue, 29 Jun 93 22:39:55 PDT Received: from WSMR-SIMTEL20.ARMY.MIL by pierce.llnl.gov (4.1/LLNL-1.18/llnl.gov-05.92) id AA15915; Tue, 29 Jun 93 22:39:49 PDT Date: 29 Jun 1993 22:45:22 -0700 (MDT) From: Chris McDonald Subject: Information Systems Security Update, # 93-18 Resent-to: BILL_ORVIS@QUICKMAIL.llnl.GOV To: securitylist:;@WSMR-SIMTEL20.ARMY.MIL Cc: krvw@agarne.ims.disa.MIL Resent-message-id: <01GZYTNQMVWIA3F1UN@icdc.llnl.gov> Message-id: <12889148141.17.CMCDONALD@WSMR-SIMTEL20.ARMY.MIL> X-Envelope-to: BILL_ORVIS@QUICKMAIL.llnl.gov X-VMS-To: IN%"securitylist:;@WSMR-SIMTEL20.ARMY.MIL" X-VMS-Cc: IN%"krvw@agarne.ims.disa.MIL" Content-transfer-encoding: 7BIT ======================================================================