The worm defense technology is among the first of its kind in the industry and works by identifying PCs that show signs of worm infection. When infection is detected, it shuts that computer off from the rest of the network. The technology works hand in hand with the quarantining feature, which automatically shuts off outgoing traffic from infected computers. However, InterSpect allows quarantined computers to receive incoming traffic, enabling administrators to download patches or other fixes, said Check Point officials."The automatic identification and containment is key for us," said Greg Murray, vice president of information security at Information Resources Inc., in Chicago, which has been testing InterSpect. "We do a lot of evidence-based security here, where we see an attack happening on a log or IDS [intrusion detection system] and then react to it. But ... automatic blocking [is] easy to tune, and it lets our security officers go out there and do their jobs." At the other end of the spectrum is the new version of Ingrians DataSecure. The solution is designed to protect data while its in storage, in use and in transit among machines through the use of strong encryption, said company officials in Redwood Shores, Calif. Applications or databases can access DataSecure via a secure session. The system encrypts, digitally signs and performs an integrity check on all the data it sees. That information can be sent to a networked storage device or database. When its retrieved, the data passes through the DataSecure system for decryption. DataSecure employs a hardware security module to perform the cryptographic operations itself, relieving other applications of the computational overhead. The newest release, due within the next few weeks, will include better integration with a variety of databases.
The appliances ability to react to attacks on its own has proved invaluable, beta customers said.