Re: OS/390 - Mainframe query
Quote:
Have people run into a lot, if any questions on security about Mainframes and OS/390? Our organization has them, but when I question anyone on the security of those devices I am met the response of RACF. Being naturally suspicious, I am wondering if anyone works with security still for mainframes? I question it because while mainframe technology is out "there", it doesn't pop up much on the radar for security and I don't think it's discussed here.
Thoughts?
TIA [/B]
There is a lot of MF security admin out there. I am one, for example
why we didnt see news and/or discussion about mainframe security?
because:
a) Most of MF security admins are SO especialist that cant use anything else but Mainframes. :)
so You wont to see those guys around here often
b) MF security use to be discussed on closed forums. Just among MF guys. You cant see MF discussions about networking or databases either. Its a priviledge forum :)
MF security is a Myth. Mainframes are secure just as another platform, depending on basically of Admins Skills and Care. And a Mainframe can be unsecure just as my Dad' Windows 98 installation. In fact, A LOT of mainframe installations (i use to work as a consultant/auditor on that) ARE weak.
Why the mainframes spread this sensation of "security"? because instead of "distributed platforms" where (a lot of) security admins has near no training and just jump on market as
"windows security admin", after a MS course. On Mainframe area, it takes YEARS to be recognized as a "senior guy" and more YEARS to be a "security guy". And a lot, lot, lot of trainning.
Mainframes (im taking just about IBM) O.S.es doesnt have a security software built-in, as other O.S. IBM built it as an "open interface", to allow anyone build their own security subsystem. Nowadays, there is three tools on market:
RACF (IBM)
ACF2 (CA)
TOP-SECRET (CA)
MF OS is also very well developed and its very rare to find a "security flaw" on them. Yeap, IBM took more than 30 years to do that. Also is very rare (i saw very few times in 25 years working with them) to crash. z/OS (successor of MVS) has more than 70% of its code of recovery routines :). On some subsystems you can see 10,15 nested levels of recovery code on a single failure.
Altough you cant see us, we can see you.