Foundstone Expands ``Ultimate Hacking'' Training Courses, Meeting Market Demand for Security Knowledge; Supports Industry and Government Demands for Increased Security Expertise.

Business Editors & High-Tech Writers

MISSION VIEJO, Calif.--(BUSINESS WIRE)--Aug. 21, 2002

Foundstone Inc., the premier provider of enterprise security management, has added three new courses to its renowned "Ultimate Hacking" curriculum.

The courses, "Ultimate Hacking: Principles of Security," "Ultimate Hacking: Expert" and "Ultimate Hacking: Secure Coding," address the expanding need for novice and professional IT security personnel to combat the increased threat of debilitating cyber attacks.

"Ninety nine percent of all enterprise security exploits occur through known vulnerabilities," said Stuart McClure, president and CTO, Foundstone. "These new training programs allow the people responsible for key security infrastructures to proactively manage enterprise vulnerabilities and maintain business continuity."

Foundstone's "Ultimate Hacking: Hands On" courses provide students with the necessary tools and knowledge they need to combat the world's most malicious hackers. The courses combine hands-on training with interactive exercises, step-by-step labs and real-world hacking scenarios.

Foundstone instructors have designed security programs for numerous government agencies and Fortune 500 companies, and have authored numerous books on security, including the best-selling, "Hacking Exposed: Network Security Secrets & Solutions."

"Until the introduction of Foundstone's Ultimate Hacking classes there had been a serious lack of a comprehensive security curriculum designed to assist the IT administrator in securing the company's vital network and Internet assets," said William Chan, vice president of education, Foundstone.

"The need for increased enterprise security expertise has driven the demand for the expansion of our 'Ultimate Hacking' series. These three new classes give security administrators powerful weapons to combat the threats to the integrity of digital information."

From the novice to the expert, IT administrators will find a course ideally suited to their level of expertise. The new classes include:

-- Ultimate Hacking: Secure Coding: This class teaches the best current security practices used in designing and implementing safe Web applications. As it becomes more difficult to hack using published vulnerabilities, many skilled hackers are switching to attacking the application layer, which includes Web-based applications and database vulnerabilities. Flaws in the design and implementation of application software have fallen through the cracks of security reviews of most companies, which is where hackers are focusing their efforts. For the first time in the industry this type of knowledge is available to application developers. This class identifies common security pitfalls to avoid when building applications, as well as detailing buffer overflow exploits, cross-site scripting, SQL injection and input validation attacks. For more information, visit: http://www.foundstone.com/ser vices/ultimate-hacking-web-ap ps.html.

-- Ultimate Hacking: Principles of Security: Designed for IT administrators new to the security arena, this class offers a practical, hands-on security lesson for enterprise environments. The course includes an overview of the various security components that make up corporate/enterprise-wide security programs, including policies, assessments, networks, hosts, application monitoring, intrusion detection, incident response and reactive security. For more information, visit: http://www.foundstone.com/ser vices/principles-security.htm l.

-- Ultimate Hacking -- Expert: Targeted for the advanced security engineer, this course represents the pinnacle of Foundstone's Ultimate Hacking lineup. It encompasses such topics as: wireless security, SQL injection techniques, tunneling traffic, sniffing switched environments, intrusion detection techniques, security scripting techniques, programming for security engineers and advanced resources for securing Windows and Unix. For more information, visit: http://www.foundstone.com/ser vices/ultimate-hacking-expert .html.

Pricing and Availability

For additional information including schedules, availability and enrollment, visit Foundstone's Web site at: www.foundstone.com.

About Foundstone

Foundstone addresses the security and privacy needs of Global 2000 companies with world-class Enterprise Vulnerability Management Software, Managed Vulnerability Assessment Service, Professional Consulting and Education offerings. The company has one of the most dominant security talent pools ever assembled, including experts from Ernst & Young, KPMG, PricewaterhouseCoopers and the United States Defense Department.

Foundstone executives and consultants have authored eight books, including the international best seller, "Hacking Exposed: Network Security Secrets & Solutions." Foundstone has headquarters in Orange County, California and has offices in New York, Washington, D.C. and Seattle. For more information, visit www.foundstone.com or call 877/91-FOUND.