Pulse Smart Card support for Apple iOS platforms

 

Previously, Kyle Adams blogged, in a seven part series on authentication attacks, on some of the weaknesses of userid/password based authentication. 

The Federal government has been working on eliminating password based authentication in their networks for quite some time.  As part of this, the government has mandated the use of Public Key Infrastructure as a way to enhance security through eliminating the need to use passwords as login credentials.  Home Land Security Presidential Directive 12: Policy for a Common Identification Standard for Federal Employees and Contractors (HSPD-12) mandated the use of smartcard based strong authentication.  Perhaps the best known implementations are the Personal Identification Verification (PIV) card used by Civilian Agencies and the Common Access Card (CAC) used by the US Military.

Recently Juniper Networks and Thursby introduced  support for PKI smart cards on Apple iOS devices on our Pulse SSL VPN and Network Access Control Solutions.  As far as I know, these solutions are the only ones that currently support US Federal smartcards on iOS devices.

The Modern Network has a very interesting two part interview with Thursby CTO, Paul Nelson, titled- The impact of Mobile Devices and BYOD on Federal Networks and Mobile Smartcard Authentication and Federal Networks, that are well worth the read.

NIST SP 800-53, revision 4, Information Assurance control IA-2, Identification and Authentication contains control enhancements which mandate support for smartcards on mobile devices.  Enhancement  #11- Remote- Access- Separate Device- states, “the information system implements multifactor authentication for remote access to privileged and non-privileged accounts such that one of the factors is provided by a device separate from the system gaining access” and goes on to say, “the purpose of requiring a device that is separate from the information system gaining access for one of the factors during multifactor authentication is to reduce the likelihood of compromising authentication credentials stored on the system.  Also control enhancement 12- Acceptance of PIV Credentials, states, “The information system accepts and electronically verifies Personal Identity Verification (PIV) credentials.”

I have blogged several times about Juniper Networks Pulse solutions in the past, including how they Support Suite B, use FIPS validated cryptography, and are Common Criteria Certified.  They have also been tested and certified for use on the Department of Defense Unified Capabilities Approved Product List (UC APL) as an SSL VPN and as a NAC solution and have been tested and certified by the Defense Information Systems Agency (DISA) Joint Interoperability Test Command (JITC) Public Key Infrastructure lab.

The Juniper Networks DC Area Juniper User Group (DCJUG) will demo the Junos Pulse partnership with Thursby’s PKard software and card reader at its November 21st meeting at Seasons 52 in Tyson’s Corner, VA.  You can register for the event here.

View the original article here

Read More

For gifted students, skipping a grade is a smart move

As the second month of the school year nears, some parents wonder whether their children are getting all they need. The lessons might seem too simple. Their kids are bored. If their children have been designated gifted, there might be occasional pullout lessons to enrich what they are learning, but that might not be enough.

I have seen no data to confirm this, but it seems to me that schools rarely consider skipping those students ahead anymore. I have talked to area administrators about this. They are uncomfortable with the approach. They think students who are above their grade level learn better, with some extras thrown in, if they stick with kids their age.

A generation or two ago, the attitude was different. I run into far more people who are my age and skipped a grade than friends of my children who did the same thing. My wife skipped second grade in the early 1950s. Her parents had nothing to do with it. Six weeks into the school year in California, after attending a hard-charging school in Kansas, she heard her teacher say, "You can already do this stuff. This is a waste." She was sent immediately to the third grade.

Parents these days appear reluctant to sanction such a jump. If anything, the fashionable move is to make sure your child is a bit old for her grade. People put their children in kindergarten a year late so their chances of academic and social success are enhanced. That is fine for kids who are late developers. But in the long-running debate over what to do with students ready for more, acceleration deserves another look.

In my experience, students are more ready to adjust to age differences in their classes than we give them credit for. A 2004 study by the Belin-Blank Center for Gifted Education and Talent Development at the University of Iowa found that "an overwhelming majority" of students who skipped a grade endorsed the move when surveyed years later. They said they had been both academically challenged and socially accepted.

It can be cheaper and more effective to move a child into a higher grade, compared to hiring an extra teacher to enrich his lessons where he is. Many parents have told me they can't count on public schools to do a very good job with gifted education. School administrators have difficulty finding well-trained teachers with that specialty. The gifted-ed teacher slot may be the first to go in a budget crunch. Acceleration might ease the problem.

Last year Laura Vanderkam, who runs the Gifted Exchange blog, and education author Richard Whitmire of Whyboysfail.com wrote about this topic in Education Week and tried to find school districts that embraced grade-skipping. There were very few, but the ones that did had good ideas. At Zumi Elementary School in Scottsdale, Ariz., all the math classes met in first period. Students went to whatever class they were ready for regardless of their age. In Lebanon, Pa., all children were screened for subject competency and offered a chance to take a higher-grade version of that class, even if it meant a bus ride to another school.

My mother would never have allowed that. She was concerned about my social backwardness, and she had a point. But most children are not as immature as I was. We have fine schools in the Washington area. Why can't they open the door to higher grades for kids ready for more than just an abridged version of the next logical step in their educations?

View the original article here

Read More