Global DataGuard Unveils Network Sensors to Isolate Threats to Laptops
Dallas, Texas August 9, 2004 Global DataGuard today announced the availability of three network sensors, which when placed on a network, provide protection from workplace laptops that have gone outside the office and returned with viruses. Threats are identified and isolated on the user's subnet allowing time for administrators to eliminate the threat before it spreads enterprise-wide.
The three sensors -- N-1011-E, N-1020-E and N-2110-E -- complement Global DataGuard's Empirical Surveillance Program (ESP). Deep packet analysis over an extended amount of time, creating a baseline of network activity is the hallmark of ESP. Any deviation from that baseline is flagged for further analysis. This allows Global DataGuard to detect and prevent attacks before they occur. The rack mountable sensors also identify attackers who attempt to evade traditional IDS by distributing the attack over multiple packets.
"The increasing number of portable devices used on our customer's networks has created a growing need for an attack blocking mechanism," said Scott Paly, chief executive officer for Global DataGuard. "More and more employees will take their laptop home or on the road, pick up a virus, and return the infected laptop to the workplace.
Once connected to the network, the viruses will first infect that user's subnet and then spread to the entire enterprise if not detected and eliminated early."
"Security administrators realize that typical IPSs require protection on every subnet of IP addresses in the enterprise from threats," said Mike Stute, chief technology officer for Global DataGuard. "Our method of 'sniping' across the network allows more protection with fewer devices."
Once a server has become infected, it can be cleaned of viruses but still be vulnerable to other or even the same infected device(s) until it's patched. This new line of sensors will provide yet another layer of protection for those servers by creating a window of opportunity to remediate the vulnerability. Another advantage is the reduced number of false positives generated because of integration with GDG's behavioral analysis and correlation system.
ABOUT GLOBAL DATAGUARD
Global DataGuard provides adaptive, behavioral network intrusion detection, network monitoring and design, and security consulting. For more information, visit: http://www.globaldataguard.com.