News
 |
MEDIA CONTACT: Endeavor Security Barnaby Page +1 703 286 5820 bpage@endeavorsecurity.com Michelle Genser Trustwave mgenser@trustwave.com +1 312 873 7288 |
| FOR IMMEDIATE RELEASE |
Trustwave Strengthens Security Effectiveness of Managed Security Appliances
CHICAGO AND WASHINGTON D.C. (August 5, 2008) –Trustwave, the leading provider of on-demand data security and payment card industry compliance management solutions to businesses and organizations throughout the world, announces the expanded security effectiveness of its managed IDS, IPS, and UTM services by joining Endeavor Security’s FirstLight signature library with Trustwave’s asset-based vulnerability correlation technology. Endeavor Security is a leader in intrusion detection and prevention technologies.
Endeavor Security’s global decoy grid and leading-edge signature library equip Trustwave’s signature operations team with the most current intelligence regarding in-the-wild threats. Trustwave’s proprietary technology enables IDS and IPS defense solutions to intelligently adapt to these new threats, modifying detection and prevention policies to any asset, including those with identified vulnerabilities. Trustwave’s UTM appliance delivers a variety of services including Firewall, IPS, Anti-Virus, Web Content Filtering and VPN services, managed and monitored 24 x 7 by Trustwave’s security experts. All of these services can be utilized concurrently to provide the best possible defense against online hazards attempting to access consumers' personal and other critical data.
This intelligence is also integrated into Trustwave’s recently-introduced high-speed IPS solution. As a truly adaptive intrusion prevention solution, Trustwave’s high-speed IPS appliance continually scans and monitors the network and applies that knowledge to the enabled protection signatures. This technique dramatically increases performance while reducing false positives.
“Trustwave’s knowledge of compliance and incident response makes them particularly well suited to manage global security operations” says Chris Jordan, CEO of Endeavor Security. “The Trustwave UTM device and managed service now has a knowledgebase of attacks that is second to none and will greatly enhance an organization’s security posture.”
“The signature library of an IDS, IPS or UTM managed service is a critical component in creating a secure network environment,” says Robert J. McCullen, chairman and CEO of Trustwave. “Continually staying ahead of security threats and vulnerabilities enables Trustwave to provide our clients with the highest level of security available.”
About Endeavor Security Endeavor Security is the leading provider of Signatures for use in Secure Web, UTM, IPS and Policy Gateway devices. Its FirstLight knowledgebase has over 14,000 Signatures and supports more vendor devices than any other service. FirstLight uses a web xml soap service for delivery and constant updating. Endeavor uses a global honeygrid, patent-pending algorithms and technical analysts, to produce over 500 signatures per month. The FirstLight Signatures are formatted for the vendor engine to ensure maximum efficiency and capability. The FirstLight global honeygrid includes government and commercial entities. For more information about Endeavor Security, visit our web portal at: http://www.endeavorsecurity.com
About Trustwave Trustwave is the leading provider of on-demand and subscription-based information security and payment card industry compliance management solutions to businesses and government entities throughout the world. For organizations faced with today’s challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its flagship TrustKeeper® compliance management software and other proprietary security solutions. Trustwave has helped more than 30,000 organizations—ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers—manage compliance and secure their network infrastructure, data communications and critical information assets. Trustwave is headquartered in Chicago with offices throughout North America, South America, Europe, Africa, China and Australia.
Endeavor Drives Industry Adoption of FirstLight Signatures for UTM Appliances
WatchGuard Technologies Using Endeavor for IPS Knowledgebase
Washington DC – June 9, 2008
Endeavor Security, Inc., a leader in intrusion detection and prevention technologies (IDS/IPS), today announced that WatchGuard Technologies, a global provider of network security solutions, is utilizing Endeavor Security’s FirstLight Signatures as the IPS knowledgebase for their award-winning integrated security appliances.
”Protection against intruders at the network gateway is a critical component to developing a highly secure network environment,” said Tim Helming, director of product management, WatchGuard Technologies. “Because of this, WatchGuard selected Endeavor due to its superior IPS knowledgebase, which gives our customers the industry’s best solution for keeping their networks safe.”
“We are excited to be included in the Watchguard family of products,” said Chris Jordan, CEO of Endeavor Security. “The growth of the UTM market is a leading indicator of where the security market is headed. All customers want good security and historically, customers had to pay a lot to get a quality performing appliance.”
The FirstLight Signature Service provides leading security device vendors and enterprise end-users with a timely high quality signature set that is constantly being updated, revised and extended. The FirstLight signature set comprises over 14,000 signatures that cover a broad range of both emerging and established threats.
The FirstLight Signatures enable WatchGuard’s integrated security appliances to catch Policy violations (P2P, VOIP, etc.), Web Attacks (XSS, PHP, SQL) and other multiple, blended threats. Watchguard can select the appropriate signatures for its customer based on the product installed and its application.
About Endeavor Security Endeavor Security is the leading provider of Signatures for use in Secure Web, UTM, IPS and Policy Gateway devices. Its FirstLight knowledgebase has over 14,000 Signatures and supports more vendor devices than any other service. Firstlight uses a web xml soap service for delivery and constant updating. Endeavor uses a global honeygrid, patent-pending algorithms and technical analysts, to produce over 500 signatures per month. The FirstLight Signatures are formatted for the vendor engine to ensure maximum efficiency and capability. The FirstLight global honeygrid includes government and commercial entities. For more information about Endeavor Security, visit our web portal at: http://www.endeavorsecurity.com
Enterasys Secure Networks to Leverage FirstLight Early Warning and Prevention Signatures
Global threats used in real-time to generate Dragon Intrusion Detection/ Prevention System signaturesTysons Corner, VA – Dec 20, 2007
Endeavor Security, Inc. announced today that it has partnered with Enterasys Networks Inc., the Secure Networks Company™, to leverage the Endeavor FirstLight Knowledgebase of security signatures as an additional enhancement to the Enterasys Dragon® Intrusion Detection/Prevention System. Enterasys advanced security applications will receive constant signature updates, developed by Enterasys and Endeavor, to defend against new and mutated attacks, BOTS and worms.
“The constantly evolving IT security threat and vulnerability landscape requires adaptive defenses that can automatically sense and respond to suspicious activity,” said Trent Waterhouse, VP Marketing for Enterasys. “First Light augments Enterasys’ ability to predict and prevent attacks by leveraging the combined experience, expertise and thought leadership of both organizations to assure the confidentiality, integrity and availability of our customers’ information.”
Endeavor Security focuses on determining the root cause of an anomaly. The capability of determining “what is wrong” in a more automated fashion allows vendors to reduce the amount of resources required to handle anomaly discrepancies while delivering better and timelier signature updates to customers. In simple terms, Endeavor generates component-based signatures that can define an attack at the content level by using anomalies to initially determine the event. The benefit of this approach is that it profiles the network at the application layer without dependence on lower level attributes. The resulting signatures are more accurate, require less time, and the signature set’s breadth is more complete.
“The Enterasys Dragon IDS/IPS is respected for its unique ability to apply signature, protocol, anomaly and behavioral techniques to secure networks,” said Christopher Jordan, CEO of Endeavor Security. “Endeavor's broad detection grid and unique component-based approach combine to take advantage of habits and trends in the attacker community such that threats seen in Europe or Asia can proactively be addressed before they reach North America.”
With the addition of the FirstLight Knowledgebase, Dragon IDS/IPS customers will continue to receive an expanded signature set, focusing in on the most complex threats – including peer-to-peer, instant messaging, SOA and VoIP applications. Dragon’s advanced intrusion prevention system (IPS) is designed to block attackers, mitigate denial of service attacks and prevent information theft while remaining totally invisible to the network.
About Enterasys Networks
Enterasys Networks—the Secure Networks Company—is owned by a private investor group led by The Gores Group, LLC and Tennenbaum Capital Partners, LLC. Enterasys’ unique Secure Networks solutions secure any network to ensure the confidentiality, integrity, availability and performance of IT services and the business users that rely on them. Thousands of leading companies, government agencies and educational institutions in more than 70 countries rely on Secure Networks solutions to maintain business continuity and protect vital information. The company's culture is centered on the principle "There is nothing more important than our customers." Delivering on that commitment, Secure Networks provides granular, policy-based command and control of individual user, application, device, port and flow performance and security. Enterasys’ architectural approach to network security offers a long technology lifecycle and significant operational and business benefits, while reducing total cost of ownership. Information about Enterasys’ award-winning policy-enabled switches, routers, wireless products, security software, and services is available at http://www.enterasys.com.
About Endeavor Security
Endeavor Security is a Software-as-a-Service (SaaS) company which uses a global early warning grid and technical analysts, to produce a highly accurate Knowledgebase of over 10,000 signatures for security devices offered by OEM vendors. The FirstLight Early Warning and Signature Service are focused on Zer0 Day, mutated threats, BOTS and malware and the ability to stop them, using advanced Patent Pending algorithms. The FirstLight Knowledgebase is formatted to the vendor engine to ensure maximum efficiency and capability. The FirstLight global sensor grid includes government and commercial entities. For more information about Endeavor Security, visit our web portal at: http://www.endeavorsecurity.com
Endeavor Powers Secure Computing
McLean, VA – Apr. 13, 2007 - Endeavor Security Inc., a security Knowledgebase company, announced today that it will provide prevention signatures to Secure Computing (NASDAQ: SCUR), the global leader in enterprise gateway security, under a multi-year agreement. The new prevention signatures will be included in the Sidewinder® 7.0 network gateway appliance and are based on Endeavor’s FirstLight component-based signatures.
Customers of Secure Computing’s Sidewinder appliance line will receive constant signature updates from a Global Attack Grid of sensors. This Early Warning capability will enable customers to receive updates to their Sidewinder signature databases from attacks that are seen in Europe or Asia, before they reach North America. The FirstLight Signature Service offers over 8,000 signatures with the BOT library and malware additions, increasing at approximately 400 signatures per month.
"When we decided to add signature-based IDS/IPS to our Sidewinder 7.0 Network Gateway Security appliance, we looked for a partner who shares our commitment to balancing cutting-edge technology with time-tested security principles. Endeavor's broad detection grid and unique component-based approach combine to take advantage of habits and trends in the attacker community. By basing their signature development on the behavior of the black hat community, as well as the research of the white hat community, Endeavor helps us provide our Sidewinder customers with highly relevant signature updates much faster than other services," said David Diehl, senior principal engineer, Secure Computing.
“We deliver an independent source knowledgebase in a format that is tuned for our customer’s engine and we couple that with the tools and user interfaces to make it simple and robust. We are excited to be partnered with Secure Computing and to witness the robust combination of a true application layer firewall with our IPS signatures,” said Chris Jordan, CEO of Endeavor Security.
The key differentiators in the FirstLight Signature offering include:
- Accuracy - FirstLight Component Based signatures cover the attack Exploit/Vulnerability, but also cover the Infection vector, Payload and Frame;
- Completeness – FirstLight signatures reference the entire signature set and are constantly reviewing, updating and testing all of the signatures on a global intelligence sensor grid. FirstLight technical analysts “Collect & Run” process produces signatures not captured by the attack grid.
- Relevancy – FirstLight provides a rating indication as to whether or not a given attack is likely to hit your network, using a global honeynet which tracks occurrences.
- Timing - FirstLight Early Warning grid detects new events and quickly generates a signature for deployment in seconds. This capability provides our technical analysts more time to validate and test our signatures before distribution.