Simplicita Taps Real-Time Data from Around the Globe to Precisely Identify and Eliminate Botnets on ISP Networks.Reputation Data Partner Program Brings Leading Information Feeds to Simplicita ZBX; Enables Carriers to Instantly Quarantine quarantine (kwŏr`əntēn), isolation of persons, animals, places, and effects that carry or are suspected of harboring communicable disease. Hijacked PCs DENVER -- Simplicita, the company that frees carrier networks from zombies Zombies Companies that continue to operate even though they are insolvent. Also known as living dead. Notes: It's advisable to avoid investing in zombies at all costs their life expectancies are highly unpredictable. and botnets, today announced its Reputation Data Partner (RDP (Remote Desktop Protocol) The presentation services protocol that governs input/output between a Windows terminal client and Windows Terminal Server. It is based on the T.share protocol. See Windows Terminal Server. (protocol) RDP - 1. ) Program. The RDP Program is designed to aggregate real-time feeds from the world's leading providers of internet reputation data into the Simplicita ZBX remediation system to help ISPs precisely pinpoint, quarantine, and eliminate botnet-hijacked computers on their networks within minutes of infection. The RDP Program's charter members are Cloudmark, Habeas, Shadowserver, and Sophos. Automated Detection To identify zombie A computer that has been covertly taken over in order to perform some nefarious task. It is estimated that millions of PCs around the world have been compromised and, under the control of a third party, routinely transmit messages unbeknownst to the user. infected computers, Simplicita ZBX enables ISPs to aggregate and correlate internal reputation data from network devices, application and DNS server A dedicated server or a service within a server that provides DNS name resolution in an IP network. It turns names for Web sites and network resources into numeric IP addresses. DNS servers are used in large companies, in all ISPs and within the DNS system in the Internet, a vital service logs, and third party data such as spam traps or "honey pots", and complaint feedback loops. With the creation of the RDP Program, leading third party data feeds of IP addresses that belong to zombie infected computers and bad domains that belong to botnets from around the world are pre-integrated with ZBX and supported by Simplicita. This enables carriers to mix and match best of breed reputation data sources and purchase them from a single source. RDP Partners continuously supply live data to Simplicita, which instantly reformats and distributes the information to ZBX deployments at service providers worldwide. The entire process occurs dynamically and within minutes. In addition, Simplicita and RDP Program members that provide network-based security elements are developing modular adapters to exchange data between their respective products and ZBX in real-time. This integration will enable threat information detected in network traffic streams by in-line products to be simultaneously imported to ZBX and transformed into reputation data. Instant Quarantine Armed with this real-time information, ZBX identifies hijacked machines on a carrier's network the instant they attempt to connect to the Internet or send e-mail, and then uses a DNS (Domain Name System) A system for converting host names and domain names into IP addresses on the Internet or on local networks that use the TCP/IP protocol. For example, when a Web site address is given to the DNS either by typing a URL in a browser or behind the traffic switch to isolate the zombie into a walled garden Refers to a network or service that restricts its users to its own content. Cable TV and satellite TV are walled gardens, offering a finite number of channels and programs to its subscribers. quarantine. Here subscribers are alerted to the problem and provided with resources to fix their machines including connectivity required to download tools, security definitions and operating system operating system (OS) Software that controls the operation of a computer, directs the input and output of data, keeps track of files, and controls the processing of computer programs. updates. "Positively identifying zombies on a service provider network requires timely and accurate data from a variety of sources to eliminate false positives," said Danny Winokur, vice president of business development for Simplicita. "The integration of reputation data from the industry's leading sources with our ZBX remediation system enables service providers to add valuable real-time intelligence for accurately and immediately pinpointing botnet-controlled machines and switching them into quarantine. We are pleased to be working with these world leading security organizations." The charter members of the RDP Program each extend the reputation assessment capabilities of ZBX in the following ways: * Cloudmark - Provides the leading messaging security solution for filtering spam, phishing and viruses. Cloudmark's solution is based on its Global Threat Network of over 120 million users that provides visibility into all threats in propagation. Cloudmark automatically applies this intelligence to identify in real-time and on a global basis zombies located within service provider networks, including those on port 25 blocked ISP (1) See in-system programmable. (2) (Internet Service Provider) An organization that provides access to the Internet. Connection to the user is provided via dial-up, ISDN, cable, DSL and T1/T3 lines. networks. * Habeas - The Habeas SenderIndex is a combination of data from DNS block lists (DNSBLs), information collected from worldwide Apache SpamAssassin queries and a set of proprietary Habeas reputation tests that produce a distilled list of spam zombie See zombie. addresses. * Shadowserver Foundation - This team of volunteer researchers employs a collaborative network to finger the "botmasters" that remotely control zombies and bot (1) (roBOT) A program used on the Internet that performs a repetitive function such as posting a message to multiple newsgroups or searching for information or news. Bots are used to provide comparison shopping. Bots also keep a channel open on the Internet Relay Chat (IRC). armies, making it possible to more easily identify and clean entire blocks of zombies being used for a range of malicious activities including identity theft, phishing and denial of service attacks An assault on a network that floods it with so many additional requests that regular traffic is either slowed or completely interrupted. Unlike a virus or worm, which can cause severe damage to databases, a denial of service attack interrupts network service for some period. , as well as spam. * Sophos - Sophos ZombieAlert(TM) Service is based on an extensive international network of spam traps that trigger alert notifications identifying spam zombies, often within minutes of infection. The immediacy of these alerts enables prompt disinfection disinfection, n the process of destroying pathogenic organisms or rendering them inert. disinfection, full oral cavity, n a procedure used to reduce active periodontal disease, usually completed within a certain short time frame. of compromised computers and limits damage. The Simplicita Reputation Data Partner Program As part of the RDP Program, Simplicita has licensed and integrated into ZBX data feeds on zombie infected PCs from Cloudmark, Habeas, Shadowserver, and Sophos. Data feeds on phishing URLs are also being provided by some of these partners. In addition, Simplicita is working with RDP companies that supply network-based appliances to integrate their products with ZBX using modular adaptors. Simplicita will conduct joint marketing, selling, and referral programs with RDP Program members. About Simplicita ZBX ZBX is a network-based solution which enables broadband ISPs to automate zombie discovery and cleanup, and disable To turn off; deactivate. See disabled. botnets. Unlike conventional solutions that simply block Zombie traffic, ZBX uproots bot-controlled machines that violate ISP acceptable use policies (AUP See acceptable use policy. AUP - acceptable use policy ) and protects end users by detecting malware that is hiding on their PCs. ZBX dynamically identifies hijacked PCs, switches them off the network, and provides subscribers with disinfection tools. Pricing and Availability The RDP data feeds for Simplicita ZBX are available immediately from Simplicita and its business partners worldwide. Each data feed is priced separately. Simplicita ZBX pricing is calculated per individual subscriber that is remediated by ZBX. Simplicita ZBX supports Solaris 10 on Sparc or x86, and Redhat Enterprise v4 on x86. About Simplicita Simplicita frees carrier networks from zombies and botnets. The company has developed the first commercial software product for ISPs, including cable and telco network operators, which dynamically identifies, isolates, and fixes computers that have been hijacked by zombie-botnet malware. The company's management team has built Internet infrastructure businesses acquired by Software.com, Excite, and Verio. For more information, visit www.simplicita.com. Partner Quotes Simplicita Taps Real-Time Data Real-time data denotes information that is delivered immediately after collection. There is no delay in the timeliness of the information provided. Some uses of this term confuse it with the term dynamic data. from Around the Globe to Precisely Identify and Eliminate Botnets on ISP Networks "We are pleased to be able to use the data we collect from processing three billion messages per day to offer service providers this highly accurate and complete solution. The ability to rapidly identify a threat, quarantine the user inadvertently delivering the message, and provide a way to clean it up will help service providers save relationships and reputation, and increase their customers' satisfaction with their service." * Jamie de Guerre, VP of Technology Services, Cloudmark "Partnering with a market leader such as Simplicita will not only add significant value to our existing offering, but will also extend the breadth and depth of our presence in the ISP market. This joint offering is yet another proof point to the usefulness of the Habeas SenderIndex reputation database and demonstrates continued adoption of the certification standards of Habeas SafeList." * Des Cahill, CEO (1) (Chief Executive Officer) The highest individual in command of an organization. Typically the president of the company, the CEO reports to the Chairman of the Board. , Habeas "The integration of detection and remediation technologies at both the service provider and end-user level is a major component in the control of botnets and malware. Shadowserver is very pleased to be a resource to Simplicita in their efforts to provide these technologies for greater Internet security ''This article or section is being rewritten at Internet security is the process of protecting data and privacy of devices connected to internet from information robbery, hacking, malware infection and unwanted software. ." * Andre M. Di Mino, Director and Co-Founder, Shadowserver Foundation "Hackers and spammers are exploiting innocent users' computers to bombard bom·bard tr.v. bom·bard·ed, bom·bard·ing, bom·bards 1. To attack with bombs, shells, or missiles. 2. To assail persistently, as with requests. See Synonyms at attack, barrage2. 3. the internet with unwanted marketing messages, malware and denial-of-service attacks. ISPs have a vital role to play in the fight against botnets and zombie computers. Simplicita and Sophos can help provide operators with a means to identity and remove hijacked PCs before they can cause serious disruption." * Mark Harris, global director, SophosLabs |
|
||||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion