| |
Network Appliance and CyberGuard Protect Corporations Against New 'Exploit-Byte Verify' Attack
¡ª¡ªFrom Network Appliance, Inc. March 21, 2005
Joint Solution Protects Networks Against Rapidly Spreading Spyware Infestation
CyberGuard Corporation (NASDAQ: CGFW), a global provider
of security solutions, and Network Appliance, Inc. (NASDAQ:
NTAP), a leader in reliable data management solutions, announced
that their joint Internet Access and Security solution protects
against the dangerous Exploit-Byte Verify attack as reported
by VitalSecurity.org. The attack is the first known infection
to actually cross web browsers.
Even when browsing the net with a seemingly safe browser
like Mozilla Firefox, the attack compromises the Microsoft®
Internet Explorer browser and Spyware is automatically installed.
Customers using the NetApp® Internet Access and Security
solution, which includes NetCache® appliances and CyberGuard's
Webwasher Content Security Management suite, are protected
from "Exploit-Byte Verify" infections through
Webwasher's proactive filtering technology. CyberGuard and
NetApp have successfully partnered to provide a comprehensive
appliance-based solution for Internet gateway security since
2001.
"As a company focused on protecting enterprises against
the most serious and critical vulnerabilities as their security
needs grow, it is critical to work with companies like NetApp
to pace the industry with the most comprehensive security
solutions," stated Dr. Horst Joepen, CyberGuard's senior
vice president of strategic alliances and general manager
of the Webwasher subsidiary. "This new threat is only
the latest in a series of attacks where the new proactive
filtering technology included in our Webwasher suite provides
protection and improves Internet security for enterprise
customers."
"Our customers don't accept compromises in Internet
security," said Dave Kresse, general manager of the
content delivery business unit at Network Appliance. "That
is why they rely on our NetCache appliances for proxy and
policy control. Together with Webwasher's advanced content
security functionality, we are focused on blocking new threats,
including viruses and worms, at the gateway, giving them
no chance to travel inside a company's network and potentially
attack critical data."
The new attack is based on a vulnerability in the original
Java? Virtual Machine by SUN Microsystems. Digitally signed
javascript applets can be crafted in a way that they execute
outside of the sandbox with access to all system resources.
Certain types of malicious mobile code have appeared recently
that take advantage of this vulnerability. Most of the time
they function as trojans, downloading malicious spyware
as well as compromising the Internet Explorer security settings
and installing malicious Browser Helper Objects (BHOs).
Because of the generic nature of the code taking advantage
of the exploit and the frequency of updates, pattern based
anti-virus engines have a difficult time recognizing and
preventing infections. CyberGuard's Webwasher suite does
not rely on fingerprints but detects code actually trying
to take advantage of the exploit and blocking it already
at the gateway.
About CyberGuard Corporation
CyberGuard Corporation (Nasdaq: CGFW - News) delivers a
suite of integrated information security solutions to provide
Global 2000 enterprises and government organizations with
the confidence that their critical information assets are
protected. Based on the company's Total Stream Protection
framework and managed via its Global Command Center, CyberGuard's
products go beyond network-level security to provide protection
against the most dangerous application-layer vulnerabilities
and avoid potential damage, securing the entire data stream.
With a growing and satisfied number of brand-name customers,
CyberGuard has deployed more than 250,000 products across
the globe. Headquartered near Boca Raton, Fl., the company
has offices and training centers around the world. For more
information visit http://www.cyberguard.com.
|
|