Special Letter to Ecometry Users | Customer Feedback | Client List
Contact Us | Free Demo | Home Page
The simple fact is that anyone can gain full control of your data. Here are some of the basic issues (taken from a standard HP3000 environment MIS audit) and VESOFT's solutions:
1) Logon passwords should be unique to each individual VESOFT recommends that users have session names - ie. "steve,manager.sys", where the relevant password (with all restrictions) is tied to "steve"
2) Automatic password expiration
 VESOFT enforces password obsolescence - users are prompted periodically (manager sets the time threshhold) to change their passwords
3) Password integrity enforcement
 VESOFT ensures that passwords cannot be same as logon ID; cannot be shown during screen sign-on; must meet minimum length requirements; minimum length standards; cannot re-use previously used passwords.
4) Inactivity lockout
 VESOFT offers LOGOFF(part of Security/3000) - terminates unattended sessions - this also helps keep you under your user license limit and helps clear sessions at backup time
5) Lockout after 3 unsuccessful attempts - VESOFT enforces
6) Desirable to have accompanying audit package to analyze securityexposures
 VESOFT's VEAUDIT/3000 reports on security loopholes
7) Should log and report attempted security violations and successful access
 VESOFT offers comprehensive and detailed logging.

There are many loopholes that are standard to HP3000s - for example:
:HELLO MGR.HPLANMGR
is just one of many easily guessable ways to acquire high-level access to your system
 

There are several additional critical issues, such as:
1) Batch security - embedded passwords in job streams are a serious breach of system security ( they can be visible to unauthorized users)
 VESOFT's STREAMX module (part of Security/3000) eliminates the need for embedded passwords
2) Database security VESOFT's VEOPEN
3) Network logons See Security/3000 manual: REMOTE
ACCESS:NETWORK SECURITY LOOPHOLES
4) Device passwording (including modem), time of day and day of week restrictions See Sec/3000 manual: REMOTE ACCESS: TERMINAL
PASSWORDS
5) File security (addressed by MPEX)
How many PM users do you have?

How many without passwords?

 Did you know that a PM user with colon prompt access can acquire SM? VEAUDIT will show all PM users and which ones are unpassworded - often easy to guess!