Security Tip: Beware of trigger programs

[Search400.com]

Title: Security Tip

June 08, 2004 Published by  Search400.com Security Tip Issue Sponsored By:   > Bytware Inc.'s StandGuard Anti-Virus IN THIS ISSUE:   > Can you trust all those trigger programs?   > Testing user profiles   > Testing resource security   > Top 10 security tips   > Are my objects really secure?   > Reader Survey -- The state of the iSeries industry Bytware Inc.'s StandGuard Anti-Virus Life Just Got Easier. IBM has rebranded OS/400 as i5/OS, and with it comes exciting news for security: Virus Scanning Enablement. Starting with V5R3, virus scanning with a third-party solution has been enabled right in the OS, and Bytware's StandGuard Anti-Virus has been rewritten to take advantage of the feature. Plus, a free 15-day trial of is shipping with every i5/OS system and upgrade. StandGuard Anti-Virus. Battle Tested. Battle Proven. Powered by McAfee Can you trust all those trigger programs? [Search400.com] by Rich Loeber If you've seen the new movie "Troy", or if you were paying attention in history when you were in school, you know that the Greeks brought down the city of Troy with the gift of a large wooden horse. Of course, unbeknownst to the Trojans, the horse was filled with soldiers and as soon as things settled down in Troy, the soldiers broke out of the horse and took the city. These days of rampant computer viruses, worms and other malicious programs moving their way around the Internet, the concept of the Trojan Horse is alive and well. But, you say, I'm sitting here working on my completely safe and secure iSeries system running the most secure operating system in town! These things can't affect me. Think again. A malicious program can still get written and installed on your system -- hidden away waiting for the right event to come out and strike. How, you ask? As a trigger program. MORE INFO: > View other tips by Rich Loeber Testing user profiles [Search400.com] Security guru Rich Loeber takes a look at testing user profiles. According to Rich, the best time to test a user profile is when you initially create it. If, however, you have never tested your user profiles, you may want to tackle a project to get the profiles on your system tested on a periodic basis to make sure that they conform to your security objectives. Testing resource security [Search400.com] Rich Loeber takes a look at how you can go about testing your resource security setup. There are two things that you need to test and evaluate on your system. First, you have to make sure users have sufficient authority to get all of their work done without a problem. Once that has been established, you then need to go back and make sure users don't have too much authority, thereby compromising the confidentiality issues that prompted you to secure specific resources in the first place. Top 10 security tips [Search400.com] Not surprisingly, security is even more of an issue this year -- especially with Sarbanes-Oxley compliance deadlines. Here are 10 hot tips to ensure your security is all it can be. Are my objects really secure? [Search400.com] One user that comes from an OS/390 environment writes, "I have recently been assigned to the iSeries system. When reviewing the security of my objects -- through WRKOBJ display authority -- I see that the objects are not secured by an Authorization List and PUBLIC has full access. How secure are my objects?" Security expert Carol Woodbury explains. TOPICS: Reader Survey -- The state of the iSeries industry With IBM's latest announcements, things seem to be looking up for the iSeries market. But are they really? Is IBM doing enough to boost sales? Are more applications being developed for the iSeries? Are applications being moved onto other platforms? Take this 15-minute survey and tell us about the most critical issues affecting you as AS/400-iSeries professionals. TOPICS: iSeries word scramble game Need a little break from the monotony? Let's test your iSeries terminology out. Unscramble these 24 iSeries-related words. When you've completed the list, e-mail us with your answers. All Search400.com members that submit jumbles that are complete -- and correct -- will be placed into a drawing for a $25 Amazon gift certificate. Give it a try! TOPICS: User poll: What's your biggest work-related headache? During the next few months, what will be your biggest work-related headache? Contact Us Sales For sales inquiries, please contact us at: [EMAIL PROTECTED] Editorial For feedback about any of our articles or to send us your article ideas, please contact us at: [EMAIL PROTECTED] Free E-Newsletters! Select e-newsletters you would like to receive via e-mail! Search400: Administrator Tips Search400: Programmer Tips Search400: Today's News Not a Member? We'll activate your membership with your subscription. ABOUT THIS E-NEWSLETTER This e-newsletter is published by Search400.com, a targeted Web site from TechTarget, the most targeted IT media and events company. Copyright 2004 TechTarget. All rights reserved. To unsubscribe from "Security Tip": Go to unsubscribe: http://search400.techtarget.com/u?track=NL-236 Please note, unsubscribe requests may take up to 24 hours to process; you may receive additional mailings during that time. A confirmation e-mail will be sent when your request has been successfully processed. Contact Us: Search400 MemberServices 117 Kendrick Street, Suite 800 Needham, MA 02494