Endeavor Security Inc., a security Knowledgebase company, announced today that it will provide prevention signatures to Secure Computing, the global leader in enterprise gateway security, under a multi-year agreement. The new prevention signatures will be included in the Sidewinder® 7.0 network gateway appliance and are based on Endeavor’s FirstLight component-based signatures.
Customers of Secure Computing’s Sidewinder appliance line will receive constant signature updates from a Global Attack Grid of sensors. This Early Warning capability will enable customers to receive updates to their Sidewinder signature databases from attacks that are seen in Europe or Asia, before they reach North America. The FirstLight Signature Service offers over 8,000 signatures with the BOT library and malware additions, increasing at approximately 400 signatures per month.
"When we decided to add signature-based IDS/IPS to our Sidewinder 7.0 Network Gateway Security appliance, we looked for a partner who shares our commitment to balancing cutting-edge technology with time-tested security principles. Endeavor's broad detection grid and unique component-based approach combine to take advantage of habits and trends in the attacker community. By basing their signature development on the behavior of the black hat community, as well as the research of the white hat community, Endeavor helps us provide our Sidewinder customers with highly relevant signature updates much faster than other services," said David Diehl, senior principal engineer, Secure Computing.
“We deliver an independent source knowledgebase in a format that is tuned for our customer’s engine and we couple that with the tools and user interfaces to make it simple and robust. We are excited to be partnered with Secure Computing and to witness the robust combination of a true application layer firewall with our IPS signatures,” said Chris Jordan, CEO of Endeavor Security.
The key differentiators in the FirstLight Signature offering include:
• Accuracy - FirstLight Component Based signatures cover the attack Exploit/Vulnerability, but also cover the Infection vector, Payload and Frame;
• Completeness - FirstLight signatures reference the entire signature set and are constantly reviewing, updating and testing all of the signatures on a global intelligence sensor grid. FirstLight technical analysts “Collect & Run” process produces signatures not captured by the attack grid;
• Relevancy - FirstLight provides a rating indication as to whether or not a given attack is likely to hit your network, using a global honeynet which tracks occurrences;
• Timing - FirstLight Early Warning grid detects new events and quickly generates a signature for deployment in seconds. This capability provides our technical analysts more time to validate and test our signatures before distribution.
About Sidewinder Network Gateway
The first reputation-based firewall, Sidewinder consolidates all major perimeter security functions under a single management interface, Sidewinder® Network Gateway Security appliances deliver industry-leading, application-layer performance and best-in-class perimeter security. With over twelve years of successful deployments in the most demanding, high-security environments, Secure Computing has gained a reputation for building the world’s strongest self-defending firewall/VPN appliances.
Built with a comprehensive combination of high-speed application proxies, TrustedSource™ reputation-based global intelligence, and a complete arsenal of signature-based security services, Sidewinder appliances defend networks and Internet-facing applications from all types of malicious threats, both known and unknown. Enterprises use Sidewinder appliances to secure network access, protect Internet-facing applications, kill hidden attacks in packet streams, block viruses, spyware and spam, secure employee use of the Internet, decryption of SSL traffic, and create a forensic-quality audit trail for regulatory compliance and reporting.
About Endeavor Security
Endeavor Security (endeavorsecurity.com) is a managed security software company which uses a global early warning grid and technical analysts, to produce a highly accurate Knowledgebase for security devices.
The FirstLight Early Warning and Signature Service are focused on Zer0 Day, mutated threats, BOTS and malware and the ability to stop them, using advanced Patent Pending algorithms. The FirstLight global sensor grid includes government and commercial entities.
About Secure Computing
Secure Computing (securecomputing.com), a leading provider of enterprise gateway security, delivers a comprehensive set of solutions that help customers protect their critical Web, email and network assets. Over half the Fortune 50 and Fortune 500 are part of our more than 20,000 global customers in 106 countries, supported by a worldwide network of more than 2,300 partners. The company is headquartered in San Jose, Calif., and has offices worldwide.
*All company and product trademarks herein are the property of their respective owners.