Intrusion Announces Internet Investigation Tool to Track Down Bad Guys; New TraceCop Internet Database to be shown at Intelcon 2005.

WASHINGTON -- Intrusion Inc. (Nasdaq:INTZ) ("Intrusion") announced today creation and immediate availability of the largest Internet directory ever developed. The new offering, TraceCop(TM), helps analysts and investigators dramatically reduce the time and complexity required to hunt down and catch criminals, enemies, computer hackers, spammers, and others intentionally exploiting Internet-connected computers and servers.

Until now, there has not been an effective tool to allow computer security investigators to quickly find out identity, ownership and contact information about computer devices on the Internet. With this tool, analysts will be able to investigate more leads in far less time. Often, by the time analysts are able to start tracking down computer "bad guys," they're long gone with no trace or evidence of from where they came.

Until now, Internet management tools such as Domain Name Service (DNS), WhoIs, and Traceroute weren't up to the task, forcing investigators to use time-consuming phone calls and emails to compensate for the fact that there was no master database of the Internet. Furthermore, other tools previously available allowed investigators to ask questions based only on what they already knew. For example, if a security expert knew only an IP address, no previously available tool would allow him to discover all of the owners of all the hosts on that IP address. Even a reverse DNS lookup report gives only one host name and misses the correct answer most of the time. Intrusion's TraceCop allows investigators to instantly find out the identity, ownership, and contact information about suspect Internet-connected devices.

TraceCop has numerous uses for Internet security engineers:

--Firewall and Intrusion Detection System (IDS) operators need to know who to call instantly to stop cyber attacks.

--Law enforcement officers need to know the responsible parties.

--Prosecutors need to know the jurisdiction options, where owners are in one place, hosting is in another place, and operators are located elsewhere.

--Information warfare specialists need accurate attack sensing and warning reference data.

--Domain purchasers want to know owner contacts so they can purchase domains.

--All these users also need to determine how to isolate false data.

Defensive Information Operation tools can be instantly infused with live traffic analysis using TraceCop, thus allowing investigators to determine instantly which communications represent threats from adversaries, competitors, or enemies. "In gathering data for TraceCop, our goal was to include every IP address, every domain, every host, every owner and every controller for each entity, all hosting relationships, the geolocations and legal jurisdictions for each, including the history over time," explained Ben Bittle, Intrusion Director of Product Management. "There are about 8 billion IP addresses, 2.2 billion host names and 60 million domain names in over 1000 Top Level Domains, plus enormous amounts of additional data. All of this information is contained in our TraceCop database for real-time access to all data from any starting point," added Mr. Bittle.

TraceCop's reference database was constructed by Intrusion security experts entirely from publicly available Internet data. TraceCop is a completely new form of Internet directory that takes existing data and indexes it to allow security engineers to quickly and easily correlate this information for more effective countermeasure responses and faster forensics investigations.

About Intrusion Inc.

Intrusion Inc. is a leading global provider of network intrusion prevention, intrusion detection, regulated information compliance and data privacy protection products. In addition, Intrusion Inc. offers deployment technologies along with security services for the information-driven economy. Intrusion's product families include the Compliance Commander for regulated information and data privacy protection, Intrusion SpySnare(TM) for real-time inline blocking of spyware and unwanted Peer-to-Peer (P2P) applications, and Intrusion SecureNet(TM) for network intrusion prevention and detection. Intrusion's products help protect critical information assets by quickly detecting, protecting, analyzing and reporting attacks or misuse of classified, private and regulated information for government and enterprise networks. For more information, please visit www.intrusion.com.