CLIENTS

Companies that place information online to improve customer relationships and operational efficiencies can turn to a firm in the Purdue Research Park of Northwest Indiana to control risks associated with using computers to access sensitive business information.

IdentityLogix offers software solutions that help businesses improve transparency into online users' information access permissions and activities. The software monitors computers and security systems that are needed for providing online business information.

Michael A. Hlebasko, managing principal at IdentityLogix, said the firm's software can assist with the Sarbanes-Oxley Act, Health Insurance Portability and Accountability Act compliance, and other security and protection regulations.

"Application security and compliance with security-related regulations place audit reporting burdens on already stressed business and IT staffs," Hlebasko said. "My colleagues at IdentityLogix and I have set out to lower costs and technical complexities associated with when people access business information online. We want to help our clients by driving down costs of information security audits, raising productivity of business and IT staff, and empowering people with enhanced information to improve operational efficiency."

IdentityLogix's security software includes the following products:

* SpyGlass, a software console framework designed to view and output security information using pluggable audit modules for specific sources, including Microsoft's Active Directory, ADAM, Windows file-system, LDAP and EventLogix historic audit data repository.

* SpyLogix, which continuously monitors multiple disparate IT security systems for object changes and specific Windows user activities affecting security, generates well-formed events, and communicates all audit data in the form of an event to EventLogix. SpyLogix employs agentless and agent-based technologies with no reliance on audit data in log files.

* EventLogix, which processes incoming audit events from SpyLogix and stores audit data efficiently for historical record. It also provides an interface to provide historical audit data on demand to SpyGlass for viewing and output.

Hlebasko said IdentityLogix's products might appeal to many types of firms, regardless of size.

"All firms interested in enhanced transparency into online user permissions or activities may be interested in IdentityLogix solutions, especially clients in regulated industries," he said. "The software is designed to appeal to small, medium and large environments, yet be affordable."

The software also has been designed so IdentityLogix officials can enhance it within days or weeks in response to a customer's needs.

"Our focus remains being customer driven," Hlebasko said. "Evolutionary ideas are being worked on in IdentityLogix's computer lab at the Purdue Technology Center of Northwest Indiana. Once security events are consolidated, further automation could occur to reduce IT costs.

"The landscape of threats that affect business data assurance is constantly shifting, so innovative methods of authorizing proper access to data are needed. IdentityLogix is working to leverage its existing technology to improve security by enhancing automation to improve IT service to the business and new application security initiatives."