To: Neil H who wrote (5470 ) 7/14/1999 8:48:00 AM From: Neil H Respond to of 6021
Wednesday July 14, 8:02 am Eastern Time Company Press Release SOURCE: Network Associates, Inc. Network Associates Ships CyberCop Sting - Industry's First 'Decoy' Server Silently Traces and Tracks Hacker Activity CyberCop Line is First in Security Industry to Scan, Monitor And Apprehend Intruders SANTA CLARA, Calif., July 14 /PRNewswire/ -- Network Associates, Inc. (Nasdaq: NETA - news) today announced the immediate availability of its CyberCop Sting software, a new ''decoy'' server that silently traces and tracks hackers, recording and reporting all intrusive activity to security administrators. CyberCop Sting, an industry first, is an integral component of the CyberCop intrusion protection software family which also includes CyberCop Monitor, a real-time intrusion detection application that monitors critical systems and networks for signs of attack (see related release) and CyberCop Scanner, the industry's most highly-rated network vulnerability scanner. CyberCop Sting addresses the most unfulfilled need in intrusion protection products today by allowing IS managers to silently monitor suspicious activity on their corporate network and identify potential problems before any real data is jeopardized. CyberCop Sting operates by creating a series of fictitious corporate systems on a specially outfitted server that combines moderate security protection with sophisticated monitoring technology. The Sting product creates a decoy, virtual TCP/IP network on a single server or workstation and can simulate a network containing several different types of network devices, including Windows NT servers, Unix servers and routers. Each virtual network device has a real IP address and can receive and send genuine-looking packets from and to the larger network environment. Each virtual network node can also run simulated daemons, such as finger and FTP, to further emulate the activity of a genuine system and avoid suspicion by would-be intruders. While watching all traffic destined to hosts in its virtual network, Sting performs IP fragmentation reassembly and TCP stream reassembly on the packets destined to these hosts, convincing snoopers of the legitimacy of the secret network they've discovered. ''More than 60 percent of all security breaches are caused by authorized employees or contractors already inside the firewall,'' said Wes Wasson, director of product marketing for Network Associates. ''CyberCop Sting gives security administrators, for the first time ever, a safe way to observe and audit potentially dangerous activity on their networks before it becomes a problem.'' CyberCop Sting provides a number of benefits for security administrators, including: * Detection of suspicious activity inside network; Log files serve to alert administrators to potential attackers prying into reserved areas. * Ability to record suspicious activity without sacrificing any real systems or protected information. * Virtual decoy network can contain multiple "hosts" without the expense and maintenance that real systems require. * CyberCop Sting software's virtual hosts return realistic packet information. * CyberCop Sting logs snooper activity immediately, so collection of information about potential attackers can occur before they leave. * CyberCop Sting requires very little file space but creates a sophisticated virtual network. Network Associates' CyberCop Intrusion Protection suite is a collection of integrated security tools developed to provide network risk assessment scanning (Scanner), real-time intrusion monitoring (Monitor) and decoy trace-and-track capabilities (Sting) to enhance the security and survivability of enterprise networks and systems. The suite is also enhanced by the development of technology and research derived from Network Associates' extensive product line, and includes industry-first features such as AutoUpdate, modular construction, and Active Security integration to provide extensive product integrity. A Network Associates white paper on next-generation intrusion detection is available at nai.com . Pricing and availability CyberCop Sting is free with the purchase of CyberCop Monitor, Network Associates' new real-time intrusion detection software. Sting is also available as part of the full CyberCop suite, which also includes CyberCop Scanner, CyberCop Monitor and the CASL Custom Scripting Toolkit. The CyberCop Intrusion Protection suite is priced at $17 per seat for a 1,000 user license.