OVERVIEW SECURITRE is an interface that allows all ADABAS/NATURAL related security data to reside in the SSF. This enables the site to have a single rule base for all resources and allows the SSF to control ADABAS, NATURAL, and ADABAS/NATURAL Utilities, providing a complete security system.
If you are still wondering if SECURITRE is the right choice for you, check out the following quotes from TSI customers. As you will see, these comments date back several years, and many of these people have moved on to work at other places. Regardless, they turned to SECURITRE because of blatant security violations and security related accidents that continued to occur despite all of their security efforts. Consider using SECURITRE and eliminate security-related disasters at your site.
FIND OUT WHAT OUR CUSTOMERS HAVE TO SAY ABOUT SECURITRE:
SECURITRE STOPS ACCIDENTS!
"We were always interested in protecting ADABAS through RACF, our centralized security system - and with SECURITRE, we are now able to do that. As soon as we install SECURITRE for NATURAL, we will be able to protect all of our NATURAL programs, too.
"SECURITRE gives us a single point of control. That is, all access and update authority is administered through just one point, so it's a simple process and there is a single structure that's easy for us to maintain. SECURITRE stops a lot of accidents from happening."
Allen Lamb, Senior Data Base Analyst
Alton Ochsner Medical Foundation
New Orleans, Louisiana
SECURITRE PROVIDES UNAVOIDABLE SECURITY!
"Having SECURITRE means we no longer have to maintain our own code for ADABAS security. We had been using a ten-year-old security system that we had repeatedly modified and which used ACF2 rules for combinations of databases and file numbers. SECURITRE uses those same rules - so we did not have to redefine thousands of rules - plus it addresses all of our security needs. We just rolled the old security system out, rolled SECURITRE in, and it works much better than the old. For one thing, the old system existed outside an MPM exit so it could be bypassed. SECURITRE exists inside an MPM exit so now everybody must go through it. There's no way to avoid it, so our data is absolutely secure."
Keith Newsom
State of Washington
Department of Information Services
Olympia, Washington
SECURITRE STOPS THE SECURITY BOTTLENECK!
"SECURITRE lets us utilize ACF2 to control ADABAS and NATURAL resources in a centralized fashion. In other words, a centralized system ensures we have one place to go for all resource access - and that means we have consistency of access control. Since the people here who provide our access control are dedicated to the task, their knowledge of various resources and their ability to facilitate the access is enhanced. Therefore, the process is much less a bottleneck than in shops where security is distributed."
Ted Moore, Database Administrator
Blue Cross/Blue Shield of Oregon
Portland, Oregon
SECURITRE CONTROLS UTILITY USAGE!
"At Canadian Utilities, we use SECURITRE only for ADABAS Utility Security. It works very well with RACF and is compatible with our global strategy for security. During the implementation of ADABAS 5, many options were evaluated for ADABAS Utility Security, and SECURITRE proved to be our most effective option."
Michelle Smith, Data Base Analyst
Canadian Utilities Limited
Edmonton, Alberta, Canada
SECURITRE SECURES DATA!
"SECURITRE - an alternative to both ADABAS security and the NATURAL SECURITY product marketed by Software AG - solves for us the direct call security exposure within ADABAS. SECURITRE interfaces at the ADABAS exit points to the mainframe security product, which in our case is TOP SECRET, and it cannot be bypassed. That means all accesses to our database must go through the exit point that's used, and that means we have the ability to control direct call programming. In other words, our data is secure from personnel who are not authorized to access it."
Ken Shaurette, Information Security Advisor
American Family Insurance
Madison, Wisconsin
SECURITRE PROTECTS ADABAS DATA!
"[The] simple, clear-text password system [employed by ADABAS] is a little like putting a lock on the door, then leaving the key in a location where others could easily find it. We were concerned, especially since passwords can't stop users from creating programs, which issue unauthorized direct calls to access data in ADABAS. What we needed was a much greater level of security. We had to have a reliable security product that would protect the integrity of our ADABAS data - precisely and effectively," said Dean Clothier, Information Security Manager at Kerr-McGee Corporation. Whatever the solution, Clothier knew it would have to interface ADABAS with Kerr-McGee's mainframe security product, Computer Associates' ACF2.
"We determined the cost of [developing a solution in-house] would easily run into hundreds of thousands of dollars," notes Clothier. "Furthermore, we quickly learned that a security solution developed in-house quite often creates its own set of security risks and maintenance support problems."
Clothier contacted Treehouse Software, from whom Kerr-McGee had already purchased several other products. "The staff at Treehouse," notes Clothier, "told us their solution would be ready soon, plus they assured us it would do everything we wanted and would even have some features we could grow into. To top it off, the product would have a reasonable price tag." The resulting Treehouse product is called SECURITRE. It is an interface between ADABAS and a System Security Facility (SSF), such as Computer Associates' ACF2 or TOP SECRET; IBM's RACF, or any other SSF, which accepts System Authorization Facility (SAF) protocol. "Treehouse really came through for us," says Clothier. "SECURITRE was delivered on schedule, it performs as promised, and it really is reasonably priced."
"We were so impressed," continues Clothier, "that we agreed to attend CA's 1990 and 1991 annual Security Conferences to give presentations on how SECURITRE was used to solve our ADABAS security problems."
No sooner had Kerr-McGee addressed their ADABAS security concerns by installing SECURITRE than it became obvious they also had to consider security for ADABAS utilities and NATURAL applications. "Much to our surprise," says Clothier, "Treehouse developers already had the utility solution and were busy designing a NATURAL security feature. We were happy to find those two major areas of concern being addressed directly in SECURITRE, but we were happier still to discover Treehouse would provide them to us at no extra cost."
"The value, the sensitivity, and the privacy associated with any given data," says Clothier, "determine the amount of security we need to apply against our information assets. In the case of our corporate Human Resources application, a very high level of security was required. We had to have a way to let some users access certain fields of information while preventing them from getting to other fields. This level of protection is now available with SECURITRE."
"SECURITRE is now a mature product," adds Clothier, "protecting our production data and applications. We feel this product is very definitely of significant value, and we recommend it for other Software AG sites."
"With SECURITRE in place," Clothier concludes, "our ADABAS/NATURAL security concerns have been addressed in a comprehensive, efficient, cost-effective manner."
Dean Clothier, Information Security Manager
Kerr-McGee Corporation
Oklahoma City, Oklahoma
