ADVISORY/Distributed Denial of Service Attacks Threaten Web Sites Worldwide.

Business/Technology Editors

ADVISORY...for Tuesday (June 26)

--(BUSINESS WIRE)

More Than One Million Unsuspecting Machines Could Be Already Infected

and Launch DDoS Attacks Against Corporations

Distributed Denial-of-Service (DDoS) attacks are one of the most serious forms of cybercrime employed by hackers against corporations and government organizations. It is estimated that computer crimes cause $15 billion in damage (J.D. Morgan H&Q, 2001) and DDoS attacks are a major cause. What makes organizations susceptible to these attacks?

"Most DDoS attacks are effective due to weaknesses in protocol design and resource utilization," says Paul Robertson, director of risk assessment at TruSecure(R). "Hackers find and exploit these weaknesses, taking down Web sites and sending vendors scrambling for ways to eliminate their vulnerability."

Estimates place the number of weekly DDoS attacks at 4,000 or more (eWeek, 2001). How can organizations best defend themselves against DDoS attacks?

Robertson suggests that companies, "Make their security efforts proactive and not reactive. Bring in a service provider who can help minimize risk on an ongoing basis by ensuring that security resources are deployed properly and effectively. Work closely with your vendor on security issues to guarantee that everything possible is being done to work against an attack. Finally, make security a priority when choosing products and select ones that have been certified by a reputable independent lab."

Media and analysts interested in speaking with Mr. Robertson regarding DDoS attacks and the security susceptibility of network and server products can contact Jason Morris or Sherry Moskowitz of Schwartz Communications (781/684-0770, [e-mail]) to set up an interview.

Companies can learn more about the preventative measures necessary to lessen the risk of DDoS attacks by contacting the Alliance for Internet Security, an organization founded by TruSecure. The Alliance was formed to ensure that ISPs, industry professionals and corporations are committed to the widespread adoption of security measures to address the problem of Distributed Denial of Service attacks. Learn more about the Alliance for Internet Security at www.trusecure.com.

About the Expert

Paul Robertson is director of risk assessment at TruSecure and an internationally recognized security expert. Mr. Robertson is a contributing writer to Information Security(R) magazine, the industry's leading trade publication, providing news, analysis, insight and commentary on today's infosecurity marketplace. He has more than 16 years of experience in TCP/IP, Internet services and software as they relate to computer, network, and information security. Prior to TruSecure, Mr. Robertson was a lead analyst for the Gannett Company where he assisted in the planning of USAToday.com, the online site for the top circulation daily newspaper in the U.S. and one of the most heavily trafficked sites in the world. Prior to Gannett, he worked for the United States Armed Forces where he provided computer and telecommunications support for the White House staff.

About TruSecure Corporation

TruSecure provides global 10,000 companies with comprehensive enterprise risk management programs that assure the ongoing security of their critical systems and information. By integrating disparate security products and processes into a comprehensive risk management program, TruSecure helps hundreds of companies achieve greater risk reduction at lower cost. TruSecure's ICSA Labs is the security industry's central authority for product standards and testing, and today certifies more than 95% of the market's anti-virus software, network firewalls, cryptography and IPSec products. Based in Reston, VA, TruSecure Corporation is privately-held with investors including J. & W. Seligman & Co., J.P. Morgan Partners, Weston Presidio Capital, Greylock and WaldenVC.

For more information about TruSecure please visit www.trusecure.com.