Stonesoft discloses 163 new samples of Advanced Evasion Techniques
(Thomson Reuters ONE) -
A practically unlimited number of combinations
can be run simultaneously on several protocol layers
Helsinki, Finland - October 10, 2011 - The network security company Stonesoft,
today announced it has delivered 163 new advanced evasion technique (AET)
samples for global vulnerability coordination. The new samples include AETs over
a number of various protocols, including IPv4, IPv6, TCP and HTTP.
Since the discovery of AETs a year ago, Stonesoft has continued extensive
research in the area and now delivered CERT-FI (Finnish national computer
security incident response team) a new set of 163 AET samples for global
vulnerability coordination. The set comprises of 54 atomic evasions and 109
combinations that can be further combined with each other or with the evasions
in the previous releases to create new AETs. They work efficiently also over
IPv6, which results in increased security risks and challenges.
In Stonesoft's tests, the latest samples of AETs have successfully bypassed IPS
(Intrusion Prevention System) devices currently on the market. As the number of
AETs and their potential combinations is constantly growing, building efficient
protection against them requires profound understanding of network traffic.
However, most network security vendors still have not understood where the
problem lies.
"Network security vendors have now had more than a year to provide their
customers protection against AETs, but unfortunately we still have not seen much
success in this area. Very few vendors have truly understood the magnitude of
the problem, while some are struggling to provide some kind of protection. Most
of the vendors who acknowledge the problem are incapable of building a working
solution - instead, they are keeping themselves busy doing temporary and
inflexible fixes. The rest just ignore the issue and do nothing", said Ilkka
Hiidenheimo, founder and CEO of Stonesoft.
According to Stonesoft, network security must be regarded as a dynamic,
constantly evolving process. A security vendor who still uses ten year old
protocol normalization methods in order to look for exploits or other malicious
activities is prone to miss the contemporary, that is, AETs. The core
functionality of the protocol parsing cannot be static - instead, it has to
evolve in order to meet the constantly changing threats. While new exploits,
vulnerabilities and even attack vectors are constantly discovered and must be
addressed quickly by the security products, the new evasions require equally
dynamic and fast responses.
For more information about AETs, please visit www.antievasion.com or
www.stonesoft.com.
Contact:
For more information, please contact:
Klaus Majewski
Director, Business Development
Stonesoft Corporation
Tel. +358 40 824 7908
E-mail: klaus.majewski(AT)stonesoft.com
About Stonesoft
Stonesoft Corporation (NASDAQ OMX: SFT1V) is an innovative provider of
integrated network security solutions to secure the information flow of
distributed organizations. Stonesoft customers include enterprises with growing
business needs requiring advanced network security and always-on business
connectivity.
StoneGate(TM) Secure Connectivity Solution unifies firewall, VPN, IPS and SSL
VPN blending network security, end-to-end availability and award-winning load
balancing into a unified and centrally managed system. The key benefits of the
StoneGate solution include low TCO, excellent price-performance ratio and high
ROI. The StoneGate Virtual Security Solutions protect the network and ensure
business continuity in both virtual and physical network environments.
StoneGate Management Center provides unified management for StoneGate Firewall
with VPN, IPS and SSL VPN. StoneGate Firewall and IPS work together to provide
intelligent defense all over the enterprise network while StoneGate SSL VPN
provides enhanced security for mobile and remote use.
Founded in 1990, Stonesoft Corporation is a global company with corporate
headquarters in Helsinki, Finland and Americas headquarters in Atlanta, Georgia.
For more information, visit www.stonesoft.com, www.antievasion.com and the
corporate blog http://stoneblog.stonesoft.com.
This announcement is distributed by Thomson Reuters on behalf of
Thomson Reuters clients. The owner of this announcement warrants that:
(i) the releases contained herein are protected by copyright and
other applicable laws; and
(ii) they are solely responsible for the content, accuracy and
originality of the information contained therein.
Source: Stonesoft Oyj via Thomson Reuters ONE
[HUG#1553521]
Unternehmensinformation / Kurzprofil:
Datum: 10.10.2011 - 13:25 Uhr
Sprache: Deutsch
News-ID 74255
Anzahl Zeichen: 5252
contact information:
Town:
Helsinki
Kategorie:
Business News
Diese Pressemitteilung wurde bisher 186 mal aufgerufen.
Die Pressemitteilung mit dem Titel:
"Stonesoft discloses 163 new samples of Advanced Evasion Techniques"
steht unter der journalistisch-redaktionellen Verantwortung von
Stonesoft Oyj (Nachricht senden)
Beachten Sie bitte die weiteren Informationen zum Haftungsauschluß (gemäß TMG - TeleMedianGesetz) und dem Datenschutz (gemäß der DSGVO).
