Our sponsors are beginning to migrate their UNIX and NetWare based networks over to Windows NT. I am currently involved with a group that is trying to develop a security toolkit consisting of Commercial Off the Shelf (COTS) products for these sponsors. Our efforts are just beginning and we are in the process of performing an in-depth evaluation of ISS SafeSuite, Kane Security Analyst, and similar tools. We are also looking at tools with more specific functions such as Event Log Analyzers, Access Control Analyzers, and Registry Analyzers. Overall, this toolkit must allow for a comprehensive analysis of network health, while not being too cumbersome to use.

Future goals will include developing a recommended security posture for implementation of NT Server and Workstation in a large-scale environment. This will embody recommended Registry settings, security profiles, group profiles, and the like. Meanwhile it must be adaptable to a different sponsor requirements.

Sponsorship includes several DOD agencies.

Raymond Galloni
INFOSEC Engineer
MITRE Corporation
202 Burlington Road
Bedford, MA 01730
(617)271-5267
rpgallon@mitre.org