[ news_security_news ] Sana Security Releases Primary Response 2.3
SecurityProNews Staff Writer
2004-09-13
Insider Reports RSS Feed
Out-of-the-Box Code Injection Suppression and Adaptive Profiling Capabilities for Standard, Complex and Custom Enterprise Applications.
Sana Security today announced the availability of Primary Response 2.3, the industry's only anomaly-based solution designed to scale across enterprises that require continuous uptime and business continuity for dynamic, network connected servers without a dependence on signatures and rules-based architectures. With unmatched manageability and usability features, Primary Response 2.3 enables enterprises to quickly deploy, install, configure and protect its assets from known and unknown, zero-day, attacks.
"As a leader in the information security space, we appreciate the need to deploy solutions quickly and without disruption to productivity, so that the value is quickly realized," said Gerry Wilson, CIO at RSA Security. "Sana Security's Primary Response 2.3 includes what we consider two critical elements of host-based intrusion prevention -- out-of-the-box protection and adaptive profiling -- which is the only recipe to protect core applications from known unknown threats."
In addition to providing out-of-the-box protection from code injections, the largest class of system and application vulnerability attacks, Primary Response 2.3 and Sana Adaptive Profiling Technology (SanAPT) detect and prevent unexpected file and process executions that are determined to be a threat. Protection for standard applications such as IIS, Apache and iPlanet web servers, complex applications such as Microsoft Exchange(R), Peoplesoft, SAP and Oracle, and custom, in-house applications ensure the broadest range of enterprise protection.
"The security bar has been raised -- the reasonable level of care for protecting critical servers now includes behavioral-based HIPS defense over signature-based solutions," said Eric Ogren, senior analyst, Security Solutions & Services at the Yankee Group. "IT teams are utilizing enhanced enterprise-wide deployment, performance and scalability features to easily manage the security of those core information assets. The ability to easily manage the security of business applications has made host intrusion prevention one of the most exciting markets in network security."
Additionally, Primary Response 2.3 supports a command line interface (CLI) providing greater manageability of Primary Response agents. Enterprise customers can create custom scripts and leverage their own configuration management and system management tools to administer Primary Response agents. For example, when a new Microsoft patch is released, customers can create scripts to "suspend" the agents, deploy the patch on specific servers, "resume" the agents and have the agents "re-adapt" to learn the incremental new behavior and update the application profiles -- while providing a vulnerability shield throughout the entire process.
"There are 400-500 viruses emerging each month and an estimated 58,000 computer viruses in existence worldwide preventing enterprise users from building a vulnerability shield to protect the applications that power their business. The security arms race will be lead by intrusion prevention companies that offer a combination of standard services and adaptive protection," said Timothy Eades, senior vice president, marketing, Sana Security. "2004 will be remembered as an industry inflection point -- when hackers and virus writers perfected the 'zero-day' attack and bypassed the traditional models of data protection based on hand-written rules and signatures."
The world's only security software approach based upon the principles of the human immune system, Primary Response provides customers with out-of-the-box code injection suppression, proactive vulnerability exploit detection and real-time prevention from zero-day attacks, worms and hackers and an immediate return on investment by forgoing frequent security patch fire drills.
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|