Blaster Worm Requires Incident Disclosure for California Senate Bill 1386 Compliance; Addamark Enables Companies to Deal with Legal Ramifications of Disclosing Security Incidents.

Business Editors/High-Tech Writers

SAN FRANCISCO--(BUSINESS WIRE)--Sept. 8, 2003

According to a new report by Giga, a wholly-owned subsidiary of Forrester Research, companies affected by the MSBlast/LoveSan or "Blaster" worm must investigate all audit trails protected by the California Senate Bill 1386 (CA 1386), to meet security incident disclosure requirements outlined in CA 1386, or risk serious legal ramifications, such as class action lawsuits. The report entitled, "IdeaByte: Microsoft Blast/LoveSan Worm -- Disclosure Impact From California Legislation" (Aug. 15, 2003), recommends that companies look to log aggregation, storage and analysis technologies from companies including Addamark Technologies in order to comply with this new state law. The report is available free of charge on the Addamark Web site at www.addamark.com/news.

Addamark's information security solution, Omnisight, enables rapid detection and investigation of damaging attacks, particularly insider abuse, long-term attacks and other suspicious activity inside the firewall. By centrally collecting and analyzing event data generated by all systems and applications, Addamark empowers companies to store and analyze immense volumes of event data to pinpoint and contain security breaches, and to reduce the costs of investigations necessary for reaching compliance across their organizations.

According to Forrester analyst Michael Rasmussen, companies have a false sense of security that firewalls will protect them from attacks. The Blaster worm has demonstrated that firewall security measures are not enough to prevent worms from infecting systems, yet most organizations are not collecting detailed log and event information as part of their audit trails, which leaves them exposed to legal ramifications.

Widespread hacker attacks, such as the Blaster worm, raise important security response and legal disclosure issues for companies doing business with Californians. CA 1386 requires companies that conduct business in California to disclose incidents where unauthorized people have accessed California residents' information. This is the first widespread security attack to bring CA 1386 requirements into play after it was passed in July 2003.

"Many organizations are dealing with the aftermath of the Blaster worm attack," said Mark Searle, CEO at Addamark. "Addamark's Omnisight suite of solutions are unique in enabling companies to aggregate and flexibly query security event data from anywhere in the enterprise for any length of time. This is essential in order for companies to quickly investigate and respond to internal and external attacks and to reach compliance with government regulations such as CA 1386."

About Addamark

Addamark Technologies is a security software company that enables enterprises to cost-effectively store and manage high volumes of log data to monitor security events and extract business critical information. With Addamark, enterprises can store and correlate log data from multiple sources and run ad-hoc queries to analyze user behavior and network activity to the highest granularity. Founded in October 2000 by enterprise software veterans, Addamark was named one of the top 10 software start-ups of 2002 by Venture Reporter. For more information please visit www.addamark.com.

Addamark is a trademark of Addamark Technologies.