VILIB
Establish a Visual Inspect session with a function user such as SUPER.SUPER without knowing the password — and log all activity.
Overview
In a SECOM environment, access to all functional users is granted by SECOM without the need to know the password.
To run Visual Inspect for a functional user, the user’s password has to be known. This is — for a SECOM, and any secure environment — a security breach, because it bypasses the SECOM security functions: knowing the password of a functional user allows a ‘logon from scratch’. The connection between an individual user and him accessing a function gets lost.
The solution to this is the VILIB library product, which is attached to the Visual Inspect servers, replacing the original user’s authentication and performing the mapping of an individual user to a granted functional user.
VILIB logs all events.