Ads by TechWords

See your link here
Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
 

eEye lifts the lid on endpoint security product

Called Blink, it's designed to help companies stop "zero-day" attacks

July 26, 2004 12:00 PM ET

IDG News Service - EEye Digital Security Inc. announced a new endpoint security product today that it says will help organizations stop attacks launched from the Internet that use previously unknown, or "zero-day," software vulnerabilities.
The Aliso Viejo, Calif.-based company unveiled Blink, an intrusion-prevention software (IPS) client with vulnerability scanning as well as network- and host-based firewall features. The product uses intelligence about software exploits developed by eEye's vulnerability experts to spot an attack, even before security companies have formally identified the attack and issued a "signature" to guard against it, according to Firas Raouf, eEye's chief operating officer.
Blink works at the network layer, reconstructing calls for network services such as file transfer protocol and HTTP and comparing that traffic to eEye's lexicon of different methods of exploits. The approach gives Blink an advantage over competitors that work at what Raouf called the "process layer," analyzing the interactions between applications and the operating system for dangerous behaviors, because Blink allows companies to drop malicious traffic before it even reaches critical applications such as Web servers, he said.
The Blink client will work on servers, workstations and laptops running Microsoft Corp.'s Windows operating system, including Windows 2000, XP and Windows 2003 Server. The clients are controlled from a central management console in an organization's data center, Raouf said.
The product is designed for large enterprises and can be deployed, managed and updated from a central location, eEye said.
For companies with mobile workers, Blink's integrated firewalls will also isolate outbreaks caused by malicious code obtained outside a corporate network. For example, Blink can recognize activity associated with a virus or worm and shut down the infected application on a machine, protecting other network hosts. At the same time, Blink allows other, unaffected applications to keep running, preserving user productivity, he said.
Continental Airlines Inc. has been evaluating Blink on a mixture of desktop and server systems since January, according to Andre Gold, director of information security. The company is testing Blink's IPS and scanning features but doesn't intend to use the network or application firewalls, he said.
Though the airline hasn't used Blink in production, Gold said he was impressed with the amount of protection Blink provides with little or no configuration. "It's a chore to manage [host intrusion prevention] across hundreds or thousands of machines. You have to go in and say, 'This box is a Web server and this box is a SQL server,'" he said.
In contrast, Blink allowed Gold to simply "turn on" the IPS feature and get protection from


Reprinted with permission from

IDG.net
Story copyright 2009 International Data Group. All rights reserved.

Additional Resources

POLL RESULTS
Accelerate your knowledge of the IT world you inhabit by viewing the results of a series of polls taken by your IT peers. These polls of 100+ IT professionals each are available for full viewing. They cover key topics such as virtualization, processor performance, green IT, cloud computing and many others. Be a part of the buzz.
WHITE PAPER
Technology is complex. Keeping it running productively shouldn't be. To that end, you want to minimize the number of solutions needed in-house to simplify operations, maintenance, and support. Kodak offers a best-practices model. One company provides support for both scanner and software, for fast problem resolution without vendor finger-pointing. Download now!
WHITE PAPER
Utilizing demand intelligence improves the precision of pricing, product assortments, channel/store placement, and promotion, which are all essential for sustainable revenue management performance. Learn more, download this free whitepaper today.

White Papers & Webcasts

Centralized Data Backup and Your WAN
Is your organization prepared to tackle the massive challenge of protecting your data in a cost effective and timely manner? With a growing...  

Why Compliance Pays
This OnDemand webcast explores the relationship that firms with best compliance records have higher revenue, greater customer retention, lower financial losses from data...

An All-in-One Approach to Web Security
Granting web access to employees poses challenges to IT administrators and introduces unique security risks. Even as companies have perfected their security techniques...  

Best Practices for Managing Business Risks from the Use of IT
(Source: Symantec) Based on exhaustive benchmarks conducted by the IT Policy Compliance, this session highlights the relationship between business risks and use of...

The Hidden Dangers of Spam
Beyond the well-understood productivity drain that spam inflicts on businesses, threats posed by illicit email circulating through a network are causing many security...  

Managing And Protecting Your Ever Increasing Mobile Assets
(Source: Absolute Software) Your users are becoming more mobile each day. This is great for productivity - yet challenging for IT control. Natalie...

Open Source Security Myths Dispelled
(Source: Astaro) Open Source Software is computer software whose source code is available to the general public. This openly viewable nature...  

Sun OpenSSO Enterprise Webinar
(Source: Sun) This webinar replay discusses Sun OpenSSO Enterprise innovation--the single, open-source solution that helps your business solve the challenges around internal access...

Best Practices for Backing Up VMware® with Veritas NetBackup™
VMware® is used by enterprises large and small to increase the efficiency and cost-effectiveness of their IT operations. With this in mind, Symantec...  

Agile Enterprise Content Management (ECM) for Rapid ROI
(Source: IBM) Content rich business processes are a core feature of daily operations at just about any organization today. Very often these essential...