Week in Security: SQL Worm Slams Internet, Earnings News, Cisco Buys Okena

• A worm targeting a flaw in Microsoft SQL Server 2000 database software clogged Internet traffic worldwide Saturday as it searched for vulnerable systems, security experts said. The FBI was investigating the source of the worm, alternatively called W32/SQL Slammer, Slammer or SQL Sapphire. Microsoft issued a patch for the vulnerability last year.

• Cisco Systems said it will acquire Okena, a privately held maker of intrusion-prevention software. Under the terms of the deal, Cisco common stock worth close to $154 million will be exchanged for all outstanding shares and options of Okena. Cisco said the acquisition of Waltham, Mass.-based Okena boosts its portfolio of network-integrated security appliances.

• ImageWare Systems, San Diego, announced that the National Football League chose its identification software to design and print identification badges for Sunday's Super Bowl. The deal was made through New York-based systems integrator Idesco. The NFL used ID Card Maker, software developed by ImageWare for Polaroid, to create digital credentials for NFL officials, the media and others.

• Check Point Software Technologies, RSA Security and Network Associates were among security vendors reporting quarterly earnings. Check Point reported income of $64.5 million on $110.3 million in revenue for its fourth quarter, compared with net income of $77 million on $122.5 million in revenue for the same quarter a year ago. Earnings of 26 cents per share surpassed First Call/Thomson Financial consensus estimates of 24 cents.

RSA Security reported a loss on a GAAP basis of $49.8 million on revenue of $61 million for its fourth quarter, compared with a loss of $10.1 million on revenue of $63 million the same quarter a year ago. The fourth-quarter loss included restructuring and other charges. Network Associates fourth-quarter earnings of $44.2 million on revenue of $256 million, compared with a loss of $4.8 million on revenue of $258 million the year-ago quarter.

• • Microsoft announced architectural details in Windows Server 2003 designed to enhance the software's security, including a redesigned Internet Information Server, more than 20 services turned off by default, enhanced public key infrastructure (PKI) services and role-based authentication.

Microsoft Chairman Bill Gates also sent out an e-mail update on the company's Trustworthy Computing Initiative to customers, pledging to continue to improve security of Microsoft's software. The vendor plans to boost its support for smart cards, he said.

• Neoteris, a provider of Web-based remote-access products, announced an agreement with IBM to provide secure access to Lotus applications.

• AirDefense and NCS DataCom unveiled a partnership to provide managed wireless LAN security services. NCS DataCom will use AirDefense's technology to offer midsize companies a service that continuously monitors 802.11 wireless LANs to detect attacks and intruders and enforces security policies.

• DigitalPersona said it is now shipping its Model 4000 fingerprint scanner with all of its U.are.U Pro workstation packages, which cost $149 per desktop. The scanner measures 3 inches long, 2 inches wide and 5/8 inches thick, making it small enough to be easily taken anywhere to provide security for the telecommuter, the company said.

• Astaro announced Astaro Security Linux V4, which combines a firewall/VPN gateway, antispam technology, content filtering and virus protection. The software package bundles a hardened Linux operating system and can run on any Intel server, the company said. Available Jan. 31, the product has an entry license price of $390.