InDefense Launches 'Behaviour Analysis' Anti-Virus in Europe through Genus Associates

The MyDOOM virus that hit the Internet on January 26th is further evidence of the methods virus creators are using to gain access to the corporate network. Email, and email attachments are the source of more than 86% of all virus, Trojan Horse and worm infections, and maintaining network uptime is an increasingly complex burden. With more than 36 billion emails expected daily by 2005, the problem is expected to escalate. The new breed of 'Behaviour Analysis' Anti-virus software provides additional protection from new and unknown viruses and mutants from Day Zero - the day a virus is first unleashed.

(PRWEB) February 6, 2004 --MyDOOM has a malevolent payload, the impact of which may last long after the current outbreak passes its peak, and serious enough to prompt the FBI to mount an investigation. MyDOOM, otherwise known as W32.Novarg.A, provides its author with a 'back door' enabling infected computers to be controlled remotely, and installs a key logger with the capability to capture anything that is entered, for example passwords and credit card details. As expected, MyDOOM has already successfully launched a Denial of Service attack against the SCO Group, the Unix operating system company, prompting speculation that the authors have a commercial purpose. SCO said it was offering a $250,000 reward to find who was responsible.

Most Antivirus solutions rely on updated signature databases, and by their very nature are reactive rather than proactive. But the speed with which new and unknown forms of malicious code are distributed, means that signature-based solutions cannot detect and prevent the spread of a new mass-mailing worm. Even with multiple antivirus solutions deployed at the desktop and the server, viruses are still wreaking havoc.

"Behaviour Analysis technology from InDefense solves the problem of providing protection from DAY ZERO", according to Peter Murphy, director at Genus Associates. "During a virus attack, there is a period of high vulnerability while patches are developed and deployed. Then there is the cost and disruption of cleaning up. InDefense products, marketed under the names Maildefence and Achilles Shield solve the problem by providing 'set and forget' protection against new and unknown threats," he said.

"Reactive solutions cannot provide sufficient protection. MailDefense uses positive intrusion prevention technology, protecting both inbound and outbound mail and preventing email-borne infections from entering or leaving the system. It's easier to install and maintain than distributed endpoint security systems. Independent industry tests over the last four years confirm that InDefense is the only behaviour-based threat-prevention technology with a 100% detection rate of 'in the wild' viruses during that time without using updates," he said.

David Hill, vice president of EMEA for Spirent Communications said "Evidence indicates that smart hackers can deliver potentially destructive payloads to almost 90 percent of the world's Internet servers within 18 minutes or less. We agree. Positive security logic is the only way for the enterprise to be protected, and InDefense appears to be a capable and low maintenance solution for this and other attacks based on similar approaches and mutations which will inevitably follow."

About InDefense.
InDefense, Inc is the leader in Pro-active threat prevention software, providing its modular behaviour-based technology on a stand-alone basis or for porting into third-party products. InDefense secures the enterprise gateway, server and mobile desktop for continuous 7/24 protection without requiring updates, thereby enabling true 'Day Zero' protection. InDefense supports customers around the world from its headquarters in Santa Cruz, California, and through Genus Associates In Europe.

About InDefense Technology.
More than thirty man-years in development, InDefense core technology is known as IDCA - InDefense Dynamic Code Analysis. Combining an extensive knowledge base of behaviour with fully configurable rule sets, IDCA performs robust behaviour analysis to defend against threats from malicious code embedded in the email message, in attachments including PDFs, or in non-approved macros. The administrator can configure and deploy Policy Management and Enforcement across the enterprise within days, without the problems associated with setting up and managing distributed firewalls, and ensuring that endpoints have updated antivirus signatures before they are allowed to connect to the corporate network.

By monitoring application and file behaviour, IDCA guards against unauthorised modifications to files, system files and folders and the boot sector. This holistic shield of protection can extend throughout the network, providing a complete line of defence against known and unknown threats, regardless of the source of an attack, whether internet-borne, or the result of network intrusion.

InDefense technology is the only purely behaviour-based, signature-free product ever to receive West Coast Labs prestigious Checkmark certification, and has maintained this distinction continuously since the initial award in 1999. This confirms the ability of IDCA technology not only to detect and quarantine 100% of in-the-wild viruses, but to do so without the need for a signature based database.

About Genus Associates
Genus Associates are based in London, England, and specialise in Proactive web-based security and network management solutions for small and medium enterprises, major corporates and the ISP and Telco sector.
###