F5, Oracle unify access management

F5 Networks plans to integrate F5 Big-IP access with Oracle Identity Management software to centralise Web application authentication and authorisation services, streamline access management, and reduce infrastructure costs, reports Computer Business Review.

The company says the combined offering provides tight integration of the F5 Big-IP system with Oracle Access Manager, enabling reduced TCO, lowered deployment risk, and streamlined operational efficiencies.

Other benefits of the combined offering includes integration with Oracle Access Manager Single Sign-On to promote enhanced user productivity, and a unified point of enforcement to simplify auditing and control changes in configuring application access settings.

Researchers have come up with host-based security software that blocks distributed denial-of-service attacks without swamping the memory and CPU of the host machines, states Computerworld.

The filtering, called identity-based privacy-protected access control (IPCAF), can also prevent session hijacking, dictionary attacks and man-in-the-middle attacks, say researchers at Auburn University in their paper, 'Modelling and simulations for identity-based privacy-protected access control filter capability to resist massive denial of service attacks'.

This new method is suggested as a replacement for IP-address filtering, which is sometimes used to block DDOS attacks but is problematic because IP addresses can be spoofed, says Chwan-Hwa John Wu, a professor of electrical and computer engineering at Auburn and lead author of the paper.

Looking to beef up its network-based enterprise security war chest, AT&T will acquire VeriSign's global security consulting business, says FierceTelecom.

Although AT&T already has a suite of managed security services for its wireline business, customer demand for its enterprise mobility products has driven a need for enhanced enterprise security both within and outside the corporate walls.

In addition to its security experience, AT&T instantly will gain access to VeriSign's large Fortune 500 customer base. VeriSign currently works with large enterprise customers to identify network security threats, to coordinate responses to attacks, and to work on security compliance.