Richard Williams

As Linux continues its ascent in enterprise computing, major vendor support for business-critical applications is evolving to keep pace. Among the challenges enterprises and vendors face is the need for advanced security and accountability for root account users, application administration accounts, and nonprivileged users as well. In this article I'll look at securing access to these business-critical applications from a layered security perspective. Two Minutes of HistoryThe Linux development project has benefited from thousands of contributor hours in every area of the operating system and supporting programs. In this way, Linux enjoys a "best of breed" development architecture (the most effective implementation of an application or program withstands significant scrutiny and is incorporated in a release). This scrutiny allows Linux to provide significant benefi... (more)

How To Design and Implement an Enterprise Open Source Security Architecture

Information security is a top priority for many companies. Protecting information from external threats such as hackers, viruses, and spam, as well as governmental regulation requirements (SOX, HIPAA, NISPOM, etc.), are driving IT purchases beyond ROI as C-level executives seek to assure shareholders (and themselves) that assets are secure within the company complex. Viewed as today's growth market, many software/hardware/service companies are creating offerings to mitigate perceived risk or actual liability. The security environment within some organizations may be somewhat lax... (more)

The Challenges of the Linux Audit

As a decision maker in your IT organization, you're aware that your Linux systems share is growing (if your enterprise follows today's business trend). Linux installations are now available on every major hardware platform. New projects in development include Linux systems in an increasing share, and you're challenged with incorporating these Linux systems seamlessly into your operations and business processing. These Linux systems must also now be included as part of your IT audit. IT audits are increasingly performed by cross-functional teams rather than by operations, network... (more)

Designing and Implementing a Security Architecture

Information security is a top priority for many companies. Protecting information from external threats such as hackers, viruses, and spam, as well as governmental regulation requirements (SOX, HIPAA, NISPOM, etc.), are driving IT purchases beyond ROI as C-level executives seek to assure shareholders (and themselves) that assets are secure within the company complex. Viewed as today's growth market, many software/hardware/service companies are creating offerings to mitigate perceived risk or actual liability. The security environment within some organizations may be somewhat lax... (more)