Take The Security Nightmares Out Of Wireless

[William Knowles <wk () C4I ORG>]

http://www.informationweek.com/story/IWK20000605S0003

By George V. Hulme, InformationWeek
Jun 5, 2000 (7:02 AM)

The goal of providing remote users with wireless access to critical
company data has led to sleepless nights for IT managers charged with
overseeing such projects. Their chief concern: securing data as it
flies across the airwaves. But plans by Certicom Corp. to deliver a
client for handhelds that enables secure, virtual private network
connections may help some administrators skip that Nyquil nightcap.
The software, to be unveiled this week, supports many encryption
algorithms and the IPSec security protocol. Certicom is working to
ensure interoperability with VPN server software from companies such
as Cisco and Nortel Networks. The VPN client, due in the second half
of 2000, initially will run on handhelds using version 3.5 of the Palm
OS. Pricing hasn't been revealed.

RSA Security Inc. has a similar product that uses 1,024-bit encryption
technology. Elliptic-curve cryptography (ECC), which is supported by
Certicom, provides "the same level of security with less code and
encryption key size," says Jennifer Vancini, strategic marketing
director at Certicom. "That's why it's perfect for handhelds," which
have limited processing power and generally use slow wireless
connections.

RSA says any performance advantages of 163-bit ECC are negligible.
"It's like saying a lighter pen makes your briefcase weigh less," says
Scott Schnell, RSA senior VP of marketing.

Regardless, the time is ripe for robust security in handhelds
accessing VPNs. Research firm TechnologyEvaluation.com says the VPN
market, which saw revenue of $2.3 billion last year, is poised for
short-term revenue growth of 300% to 1,000%. Cisco isn't surprised.
"We've seen an explosion in VPN access, and we want to make sure
Certicom's 163-bit encryption interoperates with our products," says
Greg Marcotte, Cisco's VPN solutions director.


*-------------------------------------------------*
"Communications without intelligence is noise;
Intelligence without communications is irrelevant."
Gen. Alfred. M. Gray, USMC
---------------------------------------------------
C4I Secure Solutions             http://www.c4i.org
*-------------------------------------------------*

ISN is sponsored by SecurityFocus.com
---
To unsubscribe email LISTSERV () SecurityFocus com with a message body of
"SIGNOFF ISN".