IBM DB2 Database Software Attains Critical Security Certification

Market Wire, October, 2004

IBM today announced that DB2 Universal Database version 8.2 has attained a security certification of level 4 (EAL4) from the International Common Criteria for Information Technology Security Evaluation, making it the most current database offering in the industry to achieve this level of certification.

The Common Criteria Certification is required by the United States Government before any IT products can be considered for purchase by government offices, departments and other federally funded organizations. In addition, Common Criteria is an internationally recognized security evaluation required by numerous central governments worldwide for any of their departments interested in procuring commercially available products.

Compliance with the Common Criteria certification standard is verified by the National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme (CCEVS) Validation Body -- which is a joint activity managed by both the National Institute of Standards and Technology (NIST) and the National Security Agency (NSA).

The EAL4 certificate, together with its associated validation report, confirms that the security functions of DB2 have been evaluated at an accredited laboratory for conformance to the Common Criteria.

This testing has found that DB2 exceeds the requirements of EAL4 by providing additional assurance in the area of flaw remediation. This means that if a security flaw is discovered in the product, there is a clearly defined procedure in place which can effectively and quickly identify the problem, report it, and take corrective action.

DB2 is the latest IBM software product to be Common Criteria Certified. Products already certified include IBM Directory Server, Tivoli Access Manager, WebSphere MQ, and WebSphere Portal. For a complete list of evaluated IBM products please visit: http://www.ibm.com/security/standards/st_evaluations.shtml.

For more information on DB2 Universal Database, please visit http://ibm.com/db2/udb.

About IBM's Information Management Business

There are more than 60 million DB2 users from 425,000 companies worldwide relying on IBM DB2 Information Management Solutions. IBM is the only data management software vendor to provide customers with integrated solutions for database management, tools, content management, enterprise information integration and business intelligence. For more information please visit http://www.software.ibm.com/data.

IBM, DB2, eServer and the IBM e-business logo are trademarks or registered trademarks of International Business Machines Corporation. For a list of additional IBM trademarks, please see www.ibm.com/legal/copytrade.shtml.

All other company, product or service names may be trademarks or registered trademarks of others. Statements concerning IBM's future development plans and schedules are made for planning purposes only, and are subject to change or withdrawal without notice. Reseller prices may vary.

Contact: Chris Rubsamen IBM Media Relations (914) 766-1803 rubsamen@us.ibm.com