The Computer Security Industry Explosion - A RIB-IT Technology UpdateVolume 96 No. 4 -- October, 1996
![]() Has your computer network been victimized by criminal hackers, crackers, or techno-weenies looking for entertainment at your expense? If your answer is yes, you're in good company. In the last two years, GE, IBM, and the San Diego Supercomputer Center are just a few of the companies who have had major security breaches. If your answer is no...are you sure? Unfortunately, only a few of us have bothered to implement security procedures to protect our networks from malicious mischief, criminal hackers, or dishonest employees. Most companies wait until they are forced into implementing measures after considerable damage has been done. And, for those that have security measures in place, coupled with diligent maintenance, it's terribly hard to remain confident that you have competently implemented strategies for your network when IBM, of all companies, has had a major security breach. According to the a 1995 report from the Computer Emergency Response Team (CERT) at Carnegie Mellon University, 2,241 Internet security breaches were reported in 1994. These attacks continued to increase in 1995 while CERT funding decreased from the Defense Department's Advanced Research Projects Agency (ARPA). Even the Department of Defense (DoD) ran a penetration test on its own system in 1994 and found 7,860 holes, of which only 390 were detected by alert network security administrators. Of those 390 detections, a scant 19 were reported. So, we live in an age where security incidents are on the rise with professional criminal hackers operating in relative obscurity because law enforcement agencies are ill-equipped to catch or prosecute them. Add to this, the inability to make the Internet secure. However, while your system won't be impregnable, there are solutions that will make your system less vulnerable and more unattractive to causal hackers and inexperienced criminals. The National Computer Security Center (NCSC), operating under the direction of the National Security Agency (NSA), has set up guidelines to assist companies in developing Internet and firewall policies, but, with the proliferation of companies entering the computer security market, there is justifiable chaos in deciding which solution(s) to apply. Earlier this year, the National Computer Security Association (NCSA) announced that they are currently developing a program to establish what a firewall should offer. Enter Gemini Computers, Inc., a California-based company with 14 years experience in secured computer communications research and development. The company has developed and implemented secure networks for a variety of US Government customers, including the Pentagon, Ballistic Missile Defense Organization (BMDO), Small Business Administration (SBA), and DoD. As a result of their work with high level US Government security systems, Gemini Computers Inc. has perfected their Trusted Security Firewall and its integrated Encryption System to the degree that it has met the requirements for an A-1 rating by the National Computer Security Center (NCSC). Presently, it is the only commercially-available security system that holds the A-1 rating; a rating that was earned only after 10 years of rigorous testing. The DoD evaluates government security products through the NCSC, which performs operating systems compliance testing for vendors and assigns ratings from A-1 through D. This provides government users the ability to match up their security needs with products available from government vendors. Gemini Computers Inc. has also provided secure computer service on an international level; the United Kingdom's Corporate Headquarters Office of Technology (CHOTS) installed a Gemini security system that is currently maintained by Gemini. One of their current projects, sponsored by the BMDO and the Small Business Administration (SBA), is the Trusted Secure Electronic Bank Loan Pilot System. The goal is to secure electronic loan processing for the largest SBA Service Center in the country, which processes over two billion dollars in loans annually. New, innovative technology, developed by Gemini and well-known in the top secret enclaves of the BMDO community, will be the foundation of this security system. Gemini is ready to expand the use of this government-funded technology and has hopes of breaking into the commercial computer security industry with their innovative brand of solutions. While they are leaders in the government security arena, they are relatively unknown beyond military and intelligence consumers. The Far West Regional Technology Transfer Center (RTTC) in Los Angeles, California seeks to change that situation. Gemini Computers Inc. was one of two projects selected by the Far West RTTC for inclusion in Rib-It, a national program designed to speed federally-based or federally funded technology into the commercial marketplace. This joint Federal Laboratory Consortium (FLC) and NASA RTTC program reviewed over 400 technologies and selected 12 projects: 2 projects for each of the 6 nation-wide RTTCs, as candidates for Leap Reports. Leap Reports will assess the company's technology, its commercial viability and plan a strategy for commercialization. While the Gemini report is still in its infancy stages, one recommendation for commercialization of its security system has already emerged. A commercial partner would be the ideal situation to transition Gemini into the commercial marketplace. This partner would potentially have an existing market share in the industry and/or name recognition that would recommend itself to potential buyers. A marketing campaign is being developed by the Far West RTTC to ferret out such a partner. Interested commercial partners should contact:
|