SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : Network Associates (NET) -- Ignore unavailable to you. Want to Upgrade?


To: Neil H who wrote (5470)7/14/1999 8:48:00 AM
From: Neil H  Respond to of 6021
 
Wednesday July 14, 8:02 am Eastern Time

Company Press Release

SOURCE: Network Associates, Inc.

Network Associates Ships CyberCop
Sting - Industry's First 'Decoy' Server
Silently Traces and Tracks Hacker
Activity

CyberCop Line is First in Security Industry to Scan, Monitor And Apprehend
Intruders

SANTA CLARA, Calif., July 14 /PRNewswire/ -- Network Associates, Inc. (Nasdaq: NETA -
news) today announced the immediate availability of its CyberCop Sting software, a new ''decoy''
server that silently traces and tracks hackers, recording and reporting all intrusive activity to security
administrators. CyberCop Sting, an industry first, is an integral component of the CyberCop intrusion
protection software family which also includes CyberCop Monitor, a real-time intrusion detection
application that monitors critical systems and networks for signs of attack (see related release) and
CyberCop Scanner, the industry's most highly-rated network vulnerability scanner. CyberCop Sting
addresses the most unfulfilled need in intrusion protection products today by allowing IS managers to
silently monitor suspicious activity on their corporate network and identify potential problems before
any real data is jeopardized.

CyberCop Sting operates by creating a series of fictitious corporate systems on a specially outfitted
server that combines moderate security protection with sophisticated monitoring technology. The
Sting product creates a decoy, virtual TCP/IP network on a single server or workstation and can
simulate a network containing several different types of network devices, including Windows NT
servers, Unix servers and routers. Each virtual network device has a real IP address and can receive
and send genuine-looking packets from and to the larger network environment. Each virtual network
node can also run simulated daemons, such as finger and FTP, to further emulate the activity of a
genuine system and avoid suspicion by would-be intruders. While watching all traffic destined to
hosts in its virtual network, Sting performs IP fragmentation reassembly and TCP stream reassembly
on the packets destined to these hosts, convincing snoopers of the legitimacy of the secret network
they've discovered.

''More than 60 percent of all security breaches are caused by authorized employees or contractors
already inside the firewall,'' said Wes Wasson, director of product marketing for Network
Associates. ''CyberCop Sting gives security administrators, for the first time ever, a safe way to
observe and audit potentially dangerous activity on their networks before it becomes a problem.''

CyberCop Sting provides a number of benefits for security administrators, including:

* Detection of suspicious activity inside network; Log files serve to
alert administrators to potential attackers prying into reserved areas.
* Ability to record suspicious activity without sacrificing any real
systems or protected information.
* Virtual decoy network can contain multiple "hosts" without the expense
and maintenance that real systems require.
* CyberCop Sting software's virtual hosts return realistic packet
information.
* CyberCop Sting logs snooper activity immediately, so collection of
information about potential attackers can occur before they leave.
* CyberCop Sting requires very little file space but creates a
sophisticated virtual network.

Network Associates' CyberCop Intrusion Protection suite is a collection of integrated security tools
developed to provide network risk assessment scanning (Scanner), real-time intrusion monitoring
(Monitor) and decoy trace-and-track capabilities (Sting) to enhance the security and survivability of
enterprise networks and systems. The suite is also enhanced by the development of technology and
research derived from Network Associates' extensive product line, and includes industry-first
features such as AutoUpdate, modular construction, and Active Security integration to provide
extensive product integrity. A Network Associates white paper on next-generation intrusion
detection is available at nai.com.

Pricing and availability

CyberCop Sting is free with the purchase of CyberCop Monitor, Network Associates' new
real-time intrusion detection software. Sting is also available as part of the full CyberCop suite, which
also includes CyberCop Scanner, CyberCop Monitor and the CASL Custom Scripting Toolkit. The
CyberCop Intrusion Protection suite is priced at $17 per seat for a 1,000 user license.