PRZOOM - /newswire/ -
Tysons Corner, VA, United States, 2007/12/20 - Global threats used in real-time to generate Dragon Intrusion Detection/ Prevention System signatures. Endeavor's 12,000 component-based signatures focus on targeted malware, BOTS, client and server side attacks for Policy and Prevention application.
Endeavor Security, Inc. announced today that it has partnered with Enterasys Networks Inc., the Secure Networks Company™, to leverage the Endeavor FirstLight Knowledgebase of security signatures as an additional enhancement to the Enterasys Dragon® Intrusion Detection/Prevention System. Enterasys advanced security applications will receive constant signature updates, developed by Enterasys and Endeavor, to defend against new and mutated attacks, BOTS and worms.
“The constantly evolving IT security threat and vulnerability landscape requires adaptive defenses that can automatically sense and respond to suspicious activity,” said Trent Waterhouse, VP Marketing for Enterasys. “First Light augments Enterasys’ ability to predict and prevent attacks by leveraging the combined experience, expertise and thought leadership of both organizations to assure the confidentiality, integrity and availability of our customers’ information.”
Endeavor Security focuses on determining the root cause of an anomaly. The capability of determining “what is wrong” in a more automated fashion allows vendors to reduce the amount of resources required to handle anomaly discrepancies while delivering better and timelier signature updates to customers. In simple terms, Endeavor generates component-based signatures that can define an attack at the content level by using anomalies to initially determine the event. The benefit of this approach is that it profiles the network at the application layer without dependence on lower level attributes. The resulting signatures are more accurate, require less time, and the signature set’s breadth is more complete.
“The Enterasys Dragon IDS/IPS is respected for its unique ability to apply signature, protocol, anomaly and behavioral techniques to secure networks,” said Christopher Jordan, CEO of Endeavor Security. “Endeavor's broad detection grid and unique component-based approach combine to take advantage of habits and trends in the attacker community such that threats seen in Europe or Asia can pro-actively be addressed before they reach North America.”
With the addition of the FirstLight Knowledgebase, Dragon IDS/IPS customers will continue to receive an expanded signature set, focusing in on the most complex threats – including peer-to-peer, instant messaging, SOA and VoIP applications. Dragon’s advanced intrusion prevention system (IPS) is designed to block attackers, mitigate denial of service attacks and prevent information theft while remaining totally invisible to the network.
About Enterasys Networks
Enterasys Networks—the Secure Networks Company—is owned by a private investor group led by The Gores Group, LLC and Tennenbaum Capital Partners, LLC. Enterasys’ unique Secure Networks solutions secure any network to ensure the confidentiality, integrity, availability and performance of IT services and the business users that rely on them. Thousands of leading companies, government agencies and educational institutions in more than 70 countries rely on Secure Networks solutions to maintain business continuity and protect vital information. The company's culture is centered on the principle "There is nothing more important than our customers." Delivering on that commitment, Secure Networks provides granular, policy-based command and control of individual user, application, device, port and flow performance and security. Enterasys’ architectural approach to network security offers a long technology lifecycle and significant operational and business benefits, while reducing total cost of ownership. Information about Enterasys’ award-winning policy-enabled switches, routers, wireless products, security software, and services is available at Enterasys’ website.
About Endeavor Security
Endeavor Security is a Software-as-a-Service (SaaS) company which uses a global early warning grid and technical analysts, to produce a highly accurate Knowledgebase of over 10,000 signatures for security devices offered by OEM vendors. The FirstLight Early Warning and Signature Service are focused on Zer0 Day, mutated threats, BOTS and malware and the ability to stop them, using advanced Patent Pending algorithms. The FirstLight Knowledgebase is formatted to the vendor engine to ensure maximum efficiency and capability. The FirstLight global sensor grid includes government and commercial entities.