Lawrence Livermore National Laboratory, 7000 East Avenue, Livermore, CA 94550

A -- LLNL SEEKS A U.S. LICENSEE TO COMMERCIALIZE AND MARKET THE SECURITY PROFILE INSPECTOR (SPI) SOFTWARE POC For further information, contact the Technology Transfer Office, at 510/423-3139. Announcement Lawrence Livermore National Laboratory (LLNL), operated by the University of California, under contract with the U.S. Department of Energy, is seeking a U.S. Licensee to commercialize and market a suite of tools used to assess the security of UNIX-based computer systems. The current SPI package includes tools to assess the configuration of system services, to ensure reasonable file system access controls are in place, to test the strength of user account passwords, to provide highly configurable change detection for system security parameters, and to judge the authenticity and currency of critical system software. The SPI user interface contains acreens for inspection parameters, job scheduling, and report management, and also provides context-sensitive help. The SPI product is structured to provide a high desgre of customization, both to the end-user and to the developer. The user can design new security checks through the use of a built-in configuration query language, and developers can benefit from the modular, layered design to treat other operating system platforms. An extension to Open-VMS is nearing completion. LLNL is seeking a license with a demonstrated ability to bring such a system to the market, including the capability to provide both continued porting modifications as UNIX and other target systems evolve, and general customer support activities. Moving critical technology beyond the Laboratory to the commercial world helps our U.S. licensees gain a competitive edge in the marketplace. The University of California's Lawrence Livermore National Laboratory can license technology through exclusive or nonexclusive licensing agreements, as appropriate. Interested parties should respond to this announcement by providing a short (two page maximum) description of company history, experience in the field, present position in the market, and ability to commercialize the results of this joint effort. This announcement will be valid for 45 days from the date of publication. (004)

Loren Data Corp. http://www.ld.com (SYN# 0006 19950106\A-0006.SOL)