Conference noted::latmaster

1309.0. "Security/Authentication" by NETRIX::"richard.quan@meo.mts.dec.com" (Richard Quan) Thu Feb 20 1997 23:04

Any comments from one of our customers/channels partners;

Outer Eastern Institute of TAFE has had a major security breach on campus, 
where Police are involved and doing internal investigation. This issue stem 
from the fact that someone has broken into their Digital VAX (admin) and 
accessed sensitive data. It appears from their internal investiagtion that 
someone has sniffed the network and picked up the main admin login and 
password. This information is sent over the Net as ASCII Text, so can easily 
be picked up by anyone having access to the right equipment and with the 
right knowledge.

They are currently reviewing security and would like to look at Security 
Options on the VAX running VMS.
I have suggested Kerberos which encrypts data over the network , so a 
sniffer cannot decode it. Previous discussions indicated that this can be a 
administration headache.

Can you advise what Digital Products we can recommend to the Tafe to enhance 
Security ? They have a Vax supporting Lat and TCP-IP, and DECServers 700 
Terminal Servers. This has become priority one for the TAFE.

Richard Quan
CSF - Tech Support
[Posted by WWW Notes gateway]

DEC ACB SPD 39.53.02 appears to be a possible solution
[Posted by WWW Notes gateway]