eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.
SAN FRANCISCO—Hewlett-Packard Co. Tuesday introduced a suite of security services spanning the enterprise, SMB and consumer PC markets. The company said the new, integrated solutions are designed to provide comprehensive protection against malware such as viruses, worms, spam and spyware.
Called the HP Security Incident Management Program, the offering is a suite of threat detection and assessment technologies combined with management processes that help organizations head off viruses, worms or denial-of-service attacks before they get out of hand.
HP is offering these integrated services because “the threats are becoming more complex, more malignant, more persistent and … more pervasive,” said Tony Redmond, chief technology officer with HP Services, based in Dublin, Ireland.
“We are very conscious that we have to provide protection across all the elements of our portfolio” because all market segments are equally vulnerable to attack, Redmond said.
The most advanced element of the lineup is software for enterprise and SMB (small and medium-sized businesses) customers that will automatically detect and suppress virus and worm attacks to give system administrators time to isolate and remove the problem code, he said.
Such technology is essential these days, Redmond said, because virus infections are designed to multiply far faster than even a few years ago, so fast that its impossible for humans to respond to them manually.
Hackers are also extremely quick to respond to public notices of system and security vulnerabilities than ever before. Some respond with exploits just weeks after the release of a public vulnerability notice.
HPs package is based on technology the company developed over the past four years to protect its own systems and is running internally, according to Douglas Brown, HPs security solutions architect. The company plans to release the incident management package early in 2005 for enterprise and SMB customers. HP has yet to set the pricing for this suite.
The package allows the system to detect when it has come under attack from a virus or worm that has newly emerged “in the wild,” Brown said. HP provides the expertise to analyze and reverse-engineer the virus or other threat to determine the most effective way to block it, he said.
The suite brings together in an integrated package a wide range of security products, processes, features and functions that are available separately from HP or third-party suppliers.
Its components can work with HPs OpenView network management software, but its not a requirement, Redmond said. For example, customers can choose the latest component of HPs federated identity management technology, called OpenView Select Federation, which provides centralized management of user authentication and data resource access.
Next Page: Partners contribute security technology.
Partner contributions
The contributions from third-party vendors span both software and hardware: Microsoft Corp.s server software; Trend Micro Inc.s anti-virus and anti-spam software; Symantec Corp.s anti-virus and firewall software; Sygate Inc.s end-point security agent technology; Harris Corp.s trusted computing systems; Trustgenix Inc.s federated sign-on and user authentication technology; Kensington Technology Groups locking devices for PC physical security; and Credant Technologies Inc.s security products for mobile computers.
The suite also includes vulnerability detection along with threat analysis and response tools that can assign severity and criticality levels as well as suggest effective responses or remedial action
Other services in the package include network-intrusion detection and response that can thwart attempts by hackers to gain access to corporate data, HP said. The suite can also watch for denial-of-service attacks and provide an early warning for system administrators to take action and head off the attack before it causes significant service disruption.
In addition, the package provides investigation and forensic analysis features that will allow organizations to assess the damage and costs of malware attacks. This will help companies when working with legal and law enforcement authorities to prosecute attackers if they can be identified.
The concept of a comprehensive security bundle for SMBs sounded potentially useful to Mike Hogan, CEO of Zixxo Inc. of Belmont, Calif. Zixxo is preparing to launch a new nationwide online classified advertisement service that will compete with the well-known Craigs List online classified ad service.
Zixxo currently uses HPs Internet Security Acceleration Server, developed in conjunction with Microsoft, that combines a firewall, VPN (virtual private network) and cache server functions, Hogan said.
“What we are currently using is more of a best-of-breed point solution,” Hogan said. “Now the idea of having a complete solution that addresses all of those other aspects with virus protection and intrusion detection is something we would be very interested in,” Hogan said.
His company has already obtained adequate virus protection for its desktops, laptops and servers, he said. But having an automated system that can detect and suppress infections from newly emerging viruses would be interesting to Zixxo, he said.
For home PCs, HP is offering a PC Security Initiative, which provides a combination of anti-virus and anti-spam software along with dedicated online security support with one-hour e-mail response on security questions. It also offers real-time chat for PC users who want help setting up new security systems or who are trying to troubleshoot security problems.
These services will be provided at no charge for HP PCs that are now under warranty, company officials said.
HP will also provide virus alert classes that will be held via the phone during major virus outbreaks. Other recorded security tutorials are available on the Web. An HP Help and Support Center will support performance and security diagnostic software installed notebooks.