Aberdeen Group Report Expands Intrusion Detection Category; Cites MEMCO SECURED as a Next Generation Solution for Preventing Hacks Before They Occur.

REDWOOD CITY, Calif.--(BUSINESS WIRE)--Feb. 23, 1999--MEMCO Software, Inc. (Nasdaq: MEMCF), a leading provider of information security software, today announced that the Aberdeen Group, an information technology research and consulting organization, has published an Impact paper discussing an important new type of solution in security - Intrusion Prevention.

Positioned as a reinforcement to traditional Intrusion Detection and Response (IDR) solutions, Intrusion Prevention adds another layer of defense for enterprise servers and shortens the time system administrators spend analyzing intrusion reports. MEMCO's recently announced SECURED for Internet product line is cast in the report as an Intrusion Prevention solution that proactively offers a way to prevent security breaches from occurring in the first place.

The Aberdeen Impact report, entitled "MEMCO Blazes Trail to Intrusion Prevention," explores the importance of augmenting existing Intrusion Detection and Response solutions with what they see as an "evolutionary step" in security; Intrusion Prevention. Building on a proven Dynamic Security Extension technology, MEMCO delivers Intrusion Prevention with the SECURED for Internet product line by incorporating a patent-pending technology, called Stack Overflow Protection (STOP), that prevents common buffer overflow attacks. Buffer overflow attacks were responsible for more than 50% of the advisories issued by the Computer Emergency Response Team (CERT) during the past two years. A copy of the Aberdeen Impact paper is available at www.memco.com.

"MEMCO's products represent an evolutionary step for the category of IDR solutions by applying the company's wealth of operating system security expertise to Web-focused servers," said Eric Hemmendinger, senior analyst, information security group, Aberdeen Group. "With MEMCO's new SECURED products, IS decision makers can harness the potential and avoid the downside of less capable IDR systems."

"In today's complex open systems environments, Intrusion Prevention offers corporations an improved way to fortify security while saving time and valuable IT resources," said Kurt Ziegler, general manager, MEMCO Software Inc. "The Aberdeen Impact report points out that Intrusion Prevention is a natural extension of Intrusion Detection."

MEMCO's new SECURED for Internet product line protects the content and availability of Web, email and firewall servers against hacker attacks. This product line features MEMCO's STOP technology. STOP is the only automated solution that protects against stack (or buffer) overflow attacks, a primary technique used by hackers to gain administrator authority and unrestricted access to server content and resources. With SECURED, companies are able to protect home pages from unauthorized modifications, prevent the hacking of Web scripts and Sendmail programs, and keep firewalls properly configured and running.

About Aberdeen Group

Aberdeen Group, founded in 1988, is a Boston-based information technology research and consulting organization that closely monitors user needs, technological innovation, and market developments. It focuses its research efforts on the business impact of technology changes. For more information about the Aberdeen's ongoing research on IT trends, please consult the Aberdeen Web site at http://www.aberdeen.com or contact George Katavolos at [phone] or [e-mail].

About MEMCO Software

MEMCO Software Ltd. (Nasdaq: MEMCF) is the supplier of choice for securing mission critical applications and providing enterprise-wide security for distributed computing environments. MEMCO's flagship software product, SeOS (Security for Open Systems), provides access control security for Unix and Windows NT servers. MEMCO's new SECURED for Internet product line protects the availability and content of Web, email and firewall servers. MEMCO addresses the single sign-on market with its Proxima product suite, which automates user logins and centralizes user account management. MEMCO also offers the award winning SessionWall-3 network surveillance, intrusion detection and response software. The company's customers include leaders in finance, telecommunications and other industries where information security is critical. MEMCO successfully partners with many of the world's largest software companies, systems integrators and value-added resellers, including a strategic OEM relationship with Tivoli Systems, Inc., an IBM company. In August 1998, MEMCO Software signed a definitive agreement to be acquired by PLATINUM technology International, inc. (Nasdaq: PLAT). For more information, please visit the company's Web site at site at www.memco.com.

Note to Editors: MEMCO Software Ltd. MEMCO, SECURED, SeOS, SessionWall-3 and Proxima are proprietary trademarks of MEMCO Software Ltd. All other product names mentioned herein are trademarks of their respective owners.