Skip navigation
Skip navigation
You are using an outdated browser. Please upgrade your browser.

Tripwire, HP, IBM, InstallShield, RSA and Sun Microsystems Form Open Standards Initiative for Safer Computing

Tripwire Inc., the world leader in integrity assurance, today announced the File Signature Database (FSDB) - a partner-based initiative designed to bring to market a heterogeneous collection of known-good file data. Charter members HP (NYSE:HPQ), IBM (NYSE: IBM), InstallShield Software Corporation, RSA Security (NASDAQ: RSAS) and Sun Microsystems, Inc. (NASDAQ: SUNW) join the initiative to advance open standards and methods that address increasing customer demand for more secure, reliable and cost-effective computing solutions. The initiative is open to all OS, application and infrastructure vendors and is gaining support from other technology companies and organisations.

"Partnering to advance standards that enable businesses to achieve their full potential is key in today's technology environment," said Wyatt Starnes, founder, president and CEO of Tripwire. "The ability to establish the authenticity, identity and integrity of files is crucial to enable enhanced security, availability, visibility and accountability of IT systems and applications. The focus of this initiative is to address the challenges of managing complex, heterogeneous software environments and provide ways to better manage these complexities."

The FSDB is a repository of file metadata derived from published software allowing customers to identify, authenticate and assure the integrity of files. It will provide the capability to enhance proactive management of change through granular file dependency structure. By assuring the integrity of file data, customers will reduce systems management vulnerabilities and increase business efficiency.

"As media grows larger, operating systems and application files become more robust, it becomes vitally important to ensure the integrity and authenticity of the files. Having a known good database provides that higher level of integrity checking and provides all of us with a new paradigm by which to protect our infrastructure," said Howard A. Schmidt, former White House cyber security advisor and CSO at Microsoft.

The FSDB is currently populated with more than 11 million known-good file signatures. The database consists of 'born-on' file information, including file name and digital hash values, which provides a unique file 'signature' archive crossing multiple operating systems and applications programmes. The charter members will be systematically populating the database with new file information as new software is manufactured and released. At its core is a relational database capable of storing large volumes of file information submitted by the participating software publishers and accessible to any licensed application with proper credentials.

"We believe that the emergence of the Tripwire-driven FSDB project marks a transition from tracking 'known bad' files, such as viruses and other signature-based malicious code," said Chris Christiansen, vice president of IDC's security products programme. "The traditionally reactive approach to new threats ensures that customers are always one step behind the bad guys. By knowing what the 'good state' is, improper and corrupted files can be eliminated by exception before they execute their poisonous instructions."

"As information become available anytime, anywhere, by anybody - this foundational building block technology allows the information security professional to maintain enterprise wide confidentiality, integrity and availability," said Mark Johnson, chief information security officer at Halliburton.

"Today's operating environment is becoming more diverse each day," said John Freeman, high availability production PCS at Bayer. "The approach taken by Tripwire with its File Signature Database, strongly supported by the other charter members will be an important enabler for enterprises to maintain reliable, secure operating environments."

Many delivery models for the FSDB content are being developed, both by Tripwire and the charter partners. It is anticipated that an open-standard FSDB Web service will be made available through the Internet in the first half of 2004. Additionally, a FSDB appliance will be made available to customers for self-populating and hosting during 2004. Furthermore, the FSDB will also be made available to many government and law enforcement agencies to aid in forensics and cybercrime investigations.


Press Contact :
Sarah Hewitt / Nicola Atkins
+44 (0)1494 434 434

About Tripwire, Inc.
Tripwire Inc. is the world leader in integrity assurance. Tripwire® Integrity Management solutions enable enterprises to reduce operational risk and gain control over IT systems. With Tripwire software, you ensure the security of your systems, instil accountability for change, gain visibility across your enterprise and increase the availability of critical IT infrastructure. Tripwire customers include Global 3000 companies, e-business corporations, and key public sector organisations such as Intuit, AT&T, Ernst & Young and the U.S. House of Representatives. Tripwire is headquartered in Portland, Ore., with offices in Japan, France and the UK, and users in 92 countries around the world. For more information about Tripwire, please visit the web site at

About HP
HP delivers vital technology for business and life. The company's solutions span IT infrastructure, personal computing and access devices, global services and imaging and printing for consumers, enterprises and small and medium business. For the last four quarters, HP revenue totalled $70.4 billion. More information about HP is available at

About IBM
IBM is the world's largest information technology company, with 80 years of leadership in helping businesses innovate. Drawing on resources from across IBM and key business partners, IBM offers a wide range of services, solutions and technologies that enable customers to take full advantage of the on demand era. More information about IBM can be found on the Web at

About InstallShield Software Corp.
InstallShield Software Corp. is the acknowledged leader in software installation, deployment packaging, and updating solutions. The company offers a wide range of products and services that guarantee the successful distribution, management and set up of applications for independent software vendors, systems administrators and end users. InstallShield was founded in 1987 and is headquartered near Chicago in Schaumburg, Ill., with European headquarters in Bristol, England. For more information, visit

About RSA Security Inc.
With more than 11,000 customers around the globe, RSA Security provides interoperable solutions for establishing online identities, access rights and privileges for people, applications and devices. Built to work seamlessly and transparently in complex environments, the company's comprehensive portfolio of identity and access management solutions - including authentication, Web access management and developer solutions - is designed to allow customers to confidently exploit new technologies for competitive advantage. RSA Security's strong reputation is built on its history of ingenuity and leadership, proven technologies and long-standing relationships with more than 1,000 technology partners. For more information, please visit

About Sun Microsystems, Inc.
Since its inception in 1982, a singular vision - "The Network Is The Computer" -- has propelled Sun Microsystems, Inc. to its position as a leading provider of industrial-strength hardware, software and services that make the Net work. Sun can be found in more than 100 countries and on the World Wide Web at

Tripwire is a registered trademark of Tripwire Inc.

File Signature Database Charter Members
Quote Sheet

"One of the challenges in running a stable IT environment is validating the integrity of what is running on your systems, it's a difficult task, particularly in a dynamic, heterogeneous infrastructure. HP's adaptive management software strategy is designed to enable customers to reduce IT complexity while increasing agility through an intelligently managed infrastructure. This alliance with Tripwire will help HP further our goal of meeting the customers' need to easily manage complex environments while providing them with greater adaptability of their enterprises."

Russ Daniels, CTO, HP Software Global Business

"Manageability and security in the datacenter are becoming increasingly important to IT. The assurance of data integrity will allow IT to focus on the development and deployment of e-Business rather than reacting to the latest management issues. This could enable an entirely new paradigm in the deployment of the datacenter in businesses of every size."

Abhijit Talwalkar, vice president, enterprise platforms group and general manager, platform products group, Intel Corporation

"This initiative is great news for the IT industry. As we move to a more integrated, automated IT environment, the ability to have a common method of validating file integrity across multiple manufacturers and operating platforms is vital. We're pleased to be a part of this effort."

Alan Ganek, vice president autonomic computing, IBM

"The FDSB initiative is a huge step in solving the pain the systems administrators face when attempting to effectively manage software. The ability to identify and validate files eliminates security risks caused by malicious, unknown sources. Since over 80 percent of software installations are created with InstallShield, we are in a unique position to assist ISVs in harvesting and providing this much needed information to their customers in the IT community."

Viresh Bhatia, CEO, InstallShield Software Corporation

"This initiative demonstrates Sun's commitment to advancing systems security as well as delivering a standard way to verify integrity across multiple platforms. This effort is a natural extension of the Solaris Fingerprint Database and through our work with Tripwire, customers will be able to tighten security and save costs through better management of system vulnerabilities."

Sin-Yaw Wang, senior director of engineering, Sun Microsystems, Inc.

Please visit for partner contacts.


This press release was distributed by ResponseSource Press Release Wire on behalf of Strategic Public Relations Ltd in the following categories: Consumer Technology, Personal Finance, Business & Finance, Computing & Telecoms, for more information visit