W. Curtis Preston, Himanshu Dwivedi and Michel Kabay Collaborate on "Storage Security Handbook" To Be Published Online

MILPITAS, CA (October 21, 2002) - NeoScale Systems, Inc., a provider of enterprise storage security solutions for the burgeoning network storage market, announced its support and contribution to a new online industry reference book entitled "Storage Security Handbook." The book "levels the playing field" for security and storage professionals by offering security subject matter in context with popular storage applications.

Written and edited by W. Curtis Preston, Himanshu Dwivedi, and Michel Kabay, the series will span storage security issues and risk mitigation techniques associated with protecting the availability, integrity and confidentiality of enterprise storage infrastructures. The free book, sponsored in part by isitSTORAGE.com, is available by visiting www.isit.com/storsec or www.neoscale.com/storsec.

"There is a communication and implementation gap between storage and security professions –- one which can be costly in terms of re-engineering security post deployment or putting our fires after an incident," said W. Curtis Preston, founder of The Storage Group and author of "Unix Backup and Recovery" and "Using SANs and NAS" (O’Reilly). "Key to closing this gap is to initiate an open dialog on storage security issues, experiences, and techniques. It is our endeavor to spur interest, investigation and results that better equip IT staff to address the most pressing storage security problems."

Integrating Storage Security

Targeting storage and security professionals, "Storage Security Handbook" endeavors to provide concise, clear explanations of security issues surrounding storage applications –- including Storage Area Networks (SAN), Network Attached Storage (NAS) and Direct Attached Storage (DAS). Derived from industry interviews, customer deployments, proven practices and available subject matter, the authors will examine policy and procedures, common pitfalls, alternative security approaches, and suggested actions. Various storage security topics covered include:

• Definitions: security vs. risk
• Secure architecture tradeoff
• Zoning and masking in’s & out’s
• Tape media management
• Business continuity considerations
• Reducing fabric threats
• Outsourced storage
• Storage security policy
• Storage access provisioning
• Breach and fault response

Online Availability

"Storage Security Handbook" will be available to those registering online at http://www.isit.com/storsec. The book is divided into sections which encompass a total of seven chapters. Each month, registrants will receive an email to inform them of the current available sections in HTML format. Upon the conclusion of the book, the entire edition will be sent electronically with a subsequent release planned in print. Users can visit http://www.isit.com/storsec or http://www.neoscale.com/storsec to register online for electronic delivery provided by isitSTORAGEcom.

About the Contributors

W. Curtis Preston, lead author of the Storage Security Handbook, has previously authored the popular Using SANs and NAS and Unix Backup and Recovery, the seminal O’Reilly book on backup. Mr. W. Preston is the founder of the independent consulting and integration firm, The Storage Group. He also founded the Web site, Storage Mountain (previously known as Backup Central). He has been designing, managing and implementing storage systems for over 10 years - helping dozens of companies design resilient storage systems. Mr. W. Preston’s engagements range from small business backup solutions to large scale enterprise system deployments; including many Fortune 500 and Fortune 100 companies. He routinely speaks at industry events and is an expert on SearchStorage.com.

Himanshu Dwivedi, author of the Storage Security Handbook, is Managing Security Architect at @Stake with over 9 years experience in security information technology. Mr. Dwivedi runs the @stake’s Storage Center of Excellence (CoE) is a part of the @stake Academy - where he is a lead instructor in several security classes, including Storage Network Security. His professional experience includes application programming, security consultancy, storage security, and secure product design with an emphasis on secure network architecture and server risk assessment. Mr. Dwivedi has given numerous presentations / workshops regarding security in SANs and recently released a white paper describing security threats and security solutions.

Michel Kabay, PhD, CISSP, and technical editor of the Storage Security Handbook, is an associate professor of information assurance in the Computer Information Systems at Norwich University. He has published over 350 technical papers in operations management and security, wrote a college textbook on enterprise security (McGraw-Hill, 1996), and was technical editor of the Computer Security Handbook, 4th edition (Wiley, 2002). He is the technical editor for this Storage Security Handbook. Dr. Kabay joined HP in 1980 where he was a performance specialist. He was the director of education for the International Computer Security Association (ICSA), and most recently was a security leader for AtomicTangerine’s INFOSEC Group. A prolific security issues speaker and author, he currently writes two columns a week for Network World Fusion.

About NeoScale

Founded in June 2000, NeoScale Systems is a leading provider of enterprise storage security solutions which provide robust, cost-effective data protection for networked storage. NeoScale offers a family of wire-speed, policy-based storage security appliance that delivers strong network storage and media privacy. NeoScale is backed by Bay Partners and LightSpeed Venture Partners, two top tier venture capital firms specializing in network infrastructure. NeoScale is located at 1500 McCandless Drive, Milpitas, California, 95035. The company can be reached by telephone at (408) 586-1300, by email at info@neoscale.com or on the Web at http://www.neoscale.com.