CA management software, services helped ensure successful security of Microsoft Tech-Ed infrastructure

Computer Associates International, Inc today announced that the comprehensive security and infrastructure management it provided for Microsoft`s annual Tech-Ed conference successfully fended off a diverse range of assaults and achieved 99% uptime - despite the unique challenges presented by the complexity of the event`s computing environment, the speed of deployment, diversity of user needs and the intensity of the attacks it attracted.

With CA as the lead contributor, Microsoft created the Network Management and Security Initiative (NMSI) with the objective of delivering a robust, secure and accessible network environment for event attendees. NMSI contributors for Tech-Ed also included Hewlett-Packard, Juniper Networks, AirMagnet, SteelCloud and SmartCity Networks. Built on CA`s eTrust and Unicenter management software and supported by CA Technology Services, the state-of-the-art Security Network Operations Center for Tech-Ed 2004 offered a model for managing and securing large-scale enterprises.

No viruses or worms infected the show`s environment, and none of the attempted penetrations got past CA`s countermeasures or affected network performance.

More than 10 000 technology professionals attended Tech-Ed, Microsoft`s premiere conference for building, deploying, securing and managing connected solutions.

The show`s extensive IT environment had many of the characteristics of a typical enterprise, with a wide variety of servers, storage devices, wired and wireless networks and applications providing critical services.

The environment included more than 2 700 workstations, 10 000 wireless connections and 10 miles of cabling spread out over 1.7 million square feet.

Among the security problems interdicted by the CA-designed Security Network Operations Center for Tech-Ed 2004:

* Attempted spoofing of the firewall`s MAC addresses;
* Portable DHCP servers attempting to distribute unauthorised IP addresses;
* Laptops infected with Trojans trying to propagate themselves;
* Improperly configured handheld devices acting as unauthorised wireless access points; and
* Devices broadcasting ICMP packets attempting to generate.

None of these events affected the availability of the network for attendees, nor did they compromise any critical systems on the network. The Security Network Operations Center for Tech-Ed 2004 was also able to greatly streamline security management at the show, correlating and identifying a few dozen root-cause incidents from approximately 98 000 separate alerts that required real-time action by the team.

"Because Tech-Ed 2004 is a definitive event for the IT industry, it is only appropriate that we protect it with a definitive security model," said Richard Kaplan, corporate vice-president of security marketing at Microsoft Corp. "Microsoft is pleased that CA helped deliver state-of-the-art security and infrastructure management to ensure its success."

Over the past 18-24 months, organisations of all kinds have experienced significant service disruptions due to increasing virus/worm volume and other cyber-security problems. Special industry events have become particularly attractive targets for cyber-criminals.

The rapid deployment of the IT infrastructure for these events adds to the security and management challenge - as does the need to satisfy attendees` connectivity requirements and to support showcase technologies.

CA used this opportunity to demonstrate how the integration of advanced technology, detailed deployment planning, sophisticated risk assessment and proven best practices can ensure network availability and protect such events from virus outbreaks, unauthorised access, denial-of-service attacks, wireless exploits and other threats.

CA Technology Services led the project - developing the Security Network Operations Center architecture; supervising integration of technology solutions from CA, Microsoft and other vendors; defining process; validating policies and managing network operations.

By taking advantage of the synergies between CA`s eTrust and Unicenter management software, CA Technology Services provided holistic alerting, identification, isolation and remediation from the full spectrum of issues that could have threatened the show environment`s integrity and availability.

"Tech-Ed 2004 is a great venue for demonstrating how high-pressure, short-term delivery environments can be effectively secured and managed," said Russell M Artzt, executive vice-president of eTrust solutions at CA. "It is a testimony to CA`s industry leadership that Microsoft entrusted us with this responsibility - and that we succeeded so clearly in our mission."

Microsoft and CA have collaborated on a variety of security and infrastructure management initiatives. Last November, CA offered its eTrust EZ Armor consumer security product free-of-charge to all Windows users for one year as part of Microsoft`s "Protect Your PC" program.