August 8, 1998
FOR IMMEDIATE RELEASE
Computer Security Institute
600 Harrison Street
San Francisco, CA 94107
415-947-6370
Internet: rrichardson@cmp.com


VPNs: End-to-end privacy or open-ended problems?
CSI's Summer '98 Computer Security Journal delivers answers

SAN FRANCISCO -- The Computer Security Institute's Summer 1998 Computer Security Journal, Vol. XIV, Number 3, (CSJ) includes five articles brimming with practical tips, useful checklists, and brilliant insights to aid information protection practitioners excel in their work.

For example, Virtual Private Networks (VPN) are a hot ticket item. But like every other wave of technology sorting out the unrealistic expectations and hype from the real-world benefits is difficult. In "VPNs: End-to-end privacy or open-ended problems?," Rik Farrow, a leading Internet security consultant and a member of the Computer Security Institute (CSI) training faculty, helps you sort out the wheat from the chaff.

"VPN is the latest in a series of security product phenomena. Once the realm of router and firewall vendors, VPN now covers a bewildering array of products that at least share one common factor--the ability to encrypt TCP/IP packets. My concern is that incorrectly used or implemented VPN products could potentially weaken the security of your networks."

Other timely articles on vital topics include "Criticality of Network Time Synchronization and its Effect on Information Security," Ben Rothke, CISSP, of Ernst and Young LLP explores the issues involved in the oft-overlooked area of time synchronization polices, procedures and implementation.

In "Y2K: Managing the Security Risks," Brent Young, CISSP, of Set Solutions, outlines a defensive strategy for navigating the rapids of Y2K compliance.

In "UNIX Security Checkup," Bob Geiger of USWeb, provides a down-to-earth checklist for the daily monitoring of UNIX environments. The Computer Security Journal, now published quarterly, is one of the many benefits of membership in the Computer Security Institute, such as the 10-page monthly Computer Security Alert. Non-members can purchase individual issues for $25 each. To order, call 415-947-6320.

CSI, established in 1974, is a San Francisco-based association of information security professionals. It has thousands of members worldwide and provides a wide variety of information and education programs to assist practitioners in protecting the information assets of corporations and governmental organizations.