RSA unlocks its security conference 20 April, 2009 By Steve Wexler

PromoPipeline Exclusive Channel Promotions Find Out How You Can Make Money Today! ENROLL FREE! >> Underpromising William Vanderbilt - Innovative Learning Channels Services: I Can See Clearly Now Beth Vanni - Amazon Consulting Cutting the margin so many times William Vanderbilt - Innovative Learning Channels The Sign of Success - High Maintenance William Vanderbilt - Innovative Learning Channels Question for the Times: Build or Resell? Gary Bixler - AMD

This year's RSA Conference, the 18th edition, features an extensive roster of speakers, including Melissa Hathaway, Acting Senior Director for Cyberspace for the National Security and Homeland Security Councils, Lieutenant General Keith B. Alexander, Director of the National Security Agency (NSA) and Chief of the Central Security Service (CSS), and Don Tapscott, consultant and author of Wikinomics and other widely-read books on the impact of technology. There are hundreds of exhibitors and information sessions, with the event running until the 24th. Here are some of the announcements coming out of RSA.

The conference host and EMC division launched the RSA Share Project, a new initiative designed to bring world-class security tools within reach of corporate and independent software developers and project leaders. The new online community will provide support, answers and strategies from security experts as well as no-cost access to technology from RSA. The company is offering application developers a no-cost download of the RSA BSAFE Share encryption toolkit, encouraging built-in versus bolted-on security, using tools based on RSA BSAFE products. To help drive interest and participation in the RSA Share Project, RSA is also launching a programming contest offering a US$10,000 grand prize for the most creative and practical use of RSA BSAFE Share software in a web-based application. Entries will be accepted on the RSA Share Project web site from April 20, 2009 to May 20, 2009, with judging expected to be completed and the winning entry announced by the end of June. Contest rules and entry forms can be found on the RSA Share Project web site. To join the community or to find out more information, visit www.rsashare.com.

CA, Inc. has announced three security products: CA Enterprise Log Manager for managing security information; CA Role & Compliance Manager, a new release of an acquired Eurekify product to help manage the identity lifecycle; and CA DLP, a data loss prevention solution that identifies sensitive data and information throughout the enterprise and helps protect it from loss and misuse. For more information, visit www.ca.com.

To be sold through NEC's US channel, SiteShell is a firewall intended to protect Web applications and data from vulnerability attacks such as personal information leaks and Website tampering caused by unauthorized access to websites. In addition, it will provide protection for web applications operating on application servers, without any modification of the application. SiteShell can be installed in various types of application servers such as WebLogic, Apache and WebOTX, and also to Web servers such as IIS. To be available this summer, more information can be found at http://www.necst.co.jp/product/ss/index_en.html

Application Security, Inc. has announced AppDetectivePro 6.0, featuring new user rights review capabilities. The User Rights Review (URR) module, which can be purchased separately, or as part of the full database scanning solution, provides auditors, IT advisors, and consultants with a detailed view of an organization's data ownership, access controls, and rights to sensitive information. It offers cross platform support for all Tier 1 DBMS, including Oracle, MS SQL Server, IBM DB2, Sybase, MySQL, and Lotus Notes/Domino. For more information, visit www.appsecinc.com.

Art of Defence launched the Hyperguard SaaS (security as a service) solution to enable cloud technology providers to easily offer new, comprehensive and flexible security solutions at the web application layer. It is built on the company's dWAF technology, and adds high-level proactive security features typically not found in other WAF solutions, such as secure session management, URL encryption and a web authentication framework. For more information, visit www.artofdefence.com/en.

Microsoft is celebrating the one-year anniversary of the launch of its End to End Trust vision with a new Web site that outlines the company's vision to help create a safer, more trusted Internet. Among other content, the site features short, two-minute videos of the industry's leading security and privacy experts discussing their thoughts on mutual authentication, trust, security, and related topics. Additionally, the site will be updated with new videos leading up to and during the conference. For more information, visit http://www .microsoft.com/endtoendtrust.

The DataGuise Know Your Data program combines software in combination with onsite service to automate the process of discovering where sensitive data is located. It helps organizations pinpoint the location of credit card numbers, social security numbers, addresses, salaries, and other sensitive content stored throughout the enterprise to secure information from unauthorized access. For more information, visit www.dataguise.com

ArcSight Inc. has announced its new family of compliance and security monitoring appliances targeted at mid-size organizations with limited resources. ArcSight Express eliminates the need for in-house security experts to build custom threat detection rules, dashboards, and reports as is the norm for other security information and event management (SIEM) products focused on this market segment. With ArcSight Express, security incident detection and notification is automated and IT personnel are able to focus on responding to important security incidents. Itis available now and pricing starts at $45,000. Visit http://www.arcsight.com/products to learn more.