Scorpion Software Corporate Weblog
« Understanding Least Privilege |
Main
| The Taxonomy of a Gray Hat Hacker »
March 01, 2005
Making Carina Easier to Administer
Throughout our visits with potential clients in the field, the one consistant issue that is brought to light is the fact that building a known baseline of GOOD behaviour can be tedious. Here at Scorpion Software we have strived to simplify that... and already include the Carina Profiler and Carina Analyzer that automates this process for you. You simply run it for 24 to 48 hours, and it will record all access requests and builds a profile for you.
In the lab though, we have been working on better ways to deal with this. A lot of product has the same behaviour on any installation, hold that to the possible differences in location of where it is stored on the system. As an example, we KNOW how IIS should act, and we can build a profile for that behaviour. On top of that, we have been testing new UI interfaces to make this process easier to use.
Today I'd like to announce a new tool that we are now putting into beta that addresses this. The Protection Profile Editor allows you to quickly and easily build and modify protection profiles that can then be imported into the next major release of Carina. This profile will properly map application behaviours directly onto the given host... in mere seconds rather than hours or days.
The tool also allows application vendors and VARs who wish to build their own profiles for their software and solutions to easily do so, and include it as a value add for their clients. Oh, and a side benefit... it can use your existing carinaprofiler.log files and import them directly into the Protection Profile Editor!
Over the coming months we will be building some core Protection Profiles which we will be included in our Carina product. The result will be the ability to have a working IPS foundation within minutes of installation, rather than hours or even days... with very little administration from our customers.
If you are an existing customer of Carina and are interested in joining the beta, please email us at beta@scorpionsoft.com. We look forward to be working with you!
Posted by Dana Epp at March 1, 2005 12:05 PM
Trackback Pings
TrackBack URL for this entry:
http://www.scorpionsoft.com/blog/mt-tb.cgi/31
Post a comment
Thanks for signing in,
.
Now you can comment. (sign out)
(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)
|
