Worm.com

Guide to Spyware and AntiVirus Information

You are currently browsing the Worm.com weblog archives for the day Tuesday, August 7th, 2007.

 

August 2007
M T W T F S S
« Jul   Sep »
 12345
6789101112
13141516171819
20212223242526
2728293031  

Sponsors

Archive for August 7th, 2007

Collaborative solution offers 10-Gigabit line-rate performance of Kaspersky Lab’s award-winning malware protection technology for networking, communications, data center computing platforms

MOUNTAIN VIEW, Calif. — Kaspersky Lab, a leading developer of secure content management solutions, announced today that it is partnering with NetLogic Microsystems, Inc. [NASDAQ:NET], the leader in the design and development of knowledge-based processors, and Raza Microelectronics[R], Inc. (RMI), the leading supplier of multi-core, multi-threaded processors for communications, wireless and security applications, to provide original equipment manufacturers (OEMs) with the industry’s highest performance anti-virus solution that is capable of delivering 10 Gigabits-per-second (Gbps) line-rate performance for the service provider, enterprise and data center markets.

The collaborative solution enables OEMs and network managers to more effectively protect corporate and carrier networks from a growing number of security threats without compromising on network throughput or coverage. NetLogic Microsystems’ NETL7[TM] knowledge-based processor and RMI’s XLR packet processor provide hardware acceleration for Kaspersky Lab’s SafeStream[R] anti-malware signature database by a factor of over 100X compared to a software-based solution.

The hardware-accelerated solution from NetLogic Microsystems, RMI and Kaspersky Lab is capable of scaling from 1Gbps to 10Gbps, therefore enabling customers to design a family of products targeted at different nodes in the network, and to seamlessly scale from entry-level solutions to best-in-class, high-performance systems.

"Our partnership with NetLogic Microsystems and RMI combines Kaspersky Lab’s industry-leading, anti-malware signature technology with the leading networking processors to provide multi-Gigabits-per-second scanning performance with minimal latency. High speed networks, data centers and many latency sensitive applications can now be protected for the first time with line-rate malware protection solution for true defense-in-depth protection and improved ROI against all active malware infections," says Peter Laakkonen, President of Kaspersky Lab Customized Solutions, Inc.

In addition to high speed networks and data centers, Kaspersky Lab’s industry leading anti-virus solutions protect more than 200 million PC users around the world each day. Kaspersky Lab’s anti-malware technology is also being embedded into more than 100 networking, security and messaging solutions from leading vendors such as AOL, Borderware Technologies, Blue Coat Systems, Juniper Networks, LANDesk, Microsoft and others.

"We’re excited about our collaboration with Kaspersky Lab and RMI, both leaders in their respective markets, to accelerate the increasingly compute and memory-bandwidth intensive task of performing full content inspection at wire speeds," said Kelvin Khoo, director of strategic marketing at NetLogic Microsystems. "By effectively solving these bottlenecks with our NETL7 knowledge-based processor, we enable network and datacenter managers to achieve comprehensive inspection coverage and network integrity without compromising network performance."

NetLogic Microsystems’ NETL7 knowledge-based processor family provides wire-speed deep packet inspection (DPI) with advanced regular-expression signature recognition capabilities, and effectively enables network managers to inspect every bit of voice, video and data traffic traversing carrier-class networks at 10-Gigabit speeds. The processor features an advanced superscalar architecture with deep pipelining for maximum performance while minimizing power consumption.

"The combination of RMI’s XLR Processor, NetLogic Microsystems’ NETL7

content processors and Kaspersky Lab’s malware protection technology provide scalable cost-effective solutions for all levels of performance. And within any price-point, the performance and feature set is far beyond competitive offerings available in the market today. This grouping allows customers the ability to develop a full line of unparalleled performance and feature-rich solutions, such as integrated security (firewall, VPN, anti-virus, intrusion detection and prevention), web services, virtualized storage, load balancing, server offload and intelligent routing and switching systems," said Mark Litvack, director of business development, Scalable Processor Solutions at RMI.

The innovative XLR Processor[TM] from RMI consists of up to eight MIPS64-compatible cores with 32 processing threads, designed for maximum throughput and workload efficiency. This technology reduces latency to dramatically improve overall throughput. A true programmable solution, the XLR Processor eliminates the need for microcoding or proprietary programming models, and its industry-standard interfaces (HyperTransport[TM], XGMII, SPI-4.2 and PCI-X[R]) provide an extensive set of connectivity options.

NetLogic Microsystems, RMI and Kaspersky Lab are currently demonstrating the superior capabilities of the collaborative solution to leading customers.

Information provided by: Findarticles.com

Share and Enjoy:
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google
  • Reddit
  • Slashdot
  • Spurl
  • Technorati
  • TwitThis

SAN FRANCISCO — PC Tools malware researchers warn the latest epidemic of the Storm Trojan which is being disguised as e-cards and infecting computers world-wide, is only the tip of the iceberg.

"The malware writers of this latest influx are suspected to be based in Russia or the Ukraine and their attacks are extremely sophisticated using advanced evasion techniques to get on and stay on victims’ PCs," explains PC Tools Chief Threat Officer Kurt Baumgartner.

"What we are seeing with these latest attacks are typical social engineering emails telling recipients they have received an e-card from a friend, loved-one or colleague then enticing the user to click a link to view the card. Once the link is clicked a wave of malware is unleashed by taking the victim to a webpage that exploits their browser and infects the PC without any additional action required," explains Baumgartner.

"Consumers are naked against this new plague of zero-minute attacks. We are talking about new exploits, in large volumes, sometimes every 30 seconds. This next generation of malware requires automated computer systems to combat large volumes of malware as human manpower is simply not enough.

"With thousands of malware threats being released every day, or even every minute, how can products which are solely reliant on signature-based solutions detect rapidly changing exploits? They can’t, the only solution is behavioural-based protection - such as those being developed by PC Tools’ advanced research team," said Baumgartner.

"This is what has brought us into the era of Malware 2.0. Without an automated response present signature-based solutions cannot handle the job."

Baumgartner explains, "Traditional anti-virus products are unable to decrypt, analyse and effectively distribute signatures for thousands of undetected and rapidly changing malware binaries in this extremely small window of time. Their scanners are ineffective against the newest variants at the moment of infection and by the time the signatures catch-up it’s too late."

"The e-card threats not only collect email addresses to be used for sending SPAM but current variants are installing rootkits - which hide themselves and unknowingly change the function and performance of the victims’ computers."

Baumgartner further explains, "Technically, the current variants are installing rootkits that run hidden processes and add the victim’s computer to a large peer-to-peer (P2P)1 network that not only will link it to a large spam producing botnet2, but will slow computer performance.

"Furthermore, these e-card threats are also designed to kill popular anti-virus products when it detects them starting, ensuring a persistent bot-enabled system once the malware is installed and the system rebooted. The threats also leave the system exposed to possible back-door and remote exploits, meaning all the data on the machine is being put at risk."

Baumgartner cautions these new Malware 2.0 threats are infecting computers on a global scale.

PC Tools has posted a detailed technical analysis, generated by their automated threat analysis system Threat Expert, of the latest Storm variant. The report can be viewed online at http://www.pctools.com/threat-expert/sample/report/storm/.

Users and other security researchers are invited to submit their own threat samples to Threat Expert to receive an automated analysis of their submission.

Current awards include: PC Magazine Best Anti-Spyware 2005, Editor’s Choice 2006; Windows XP Magazine, Editor’s Choice; PC Pro Recommended 2006, A List product; PC Answers Editor’s Choice 2006; PC Advisor Gold award 2006; PC User ‘Top Buy’ 2006; Computer Shopper Best Anti-Spyware of 2006. We have also received Virus Bulletin and Checkmark Certification 2007.

ABOUT PC TOOLS(TM)

PC Tools is a global software leader with a cache of security and utility products, including the multi award-winning Spyware Doctor 5.(TM). PC Tools is an industry leader in real-time anti-spyware and has a number of key patents pending. PC Tools’ award-winning Spyware Doctor is now available at all major retailers across North America including GeekSquad(TM), Target, Office Depot, and Best Buy.

PC Tools now has two security research facilities: one in Sydney, Australia and a second in Boulder, Colorado. The company is headquartered in Sydney, with offices in San Francisco, London, Shannon (Ireland), Melbourne, Kiev and now Boulder, Colorado. PC Tools has a global network of distributors, resellers, and retailers.

http://www.pctools.com/

Readers note:

1Peer-to-peer (or P2P), is a type of network where each computer has the equivalent capability and responsibility. This differs from client/server architectures where some computers are dedicated to serving others. In this case your computer becomes a drone or zombie responding to the will of a cyber thief.

2A ‘bot’ is a type of malware that allows an attacker to gain complete control over the affected computer.

COPYRIGHT 2007 Business Wire
COPYRIGHT 2008 Gale, Cengage Learning

Information provided by: Findarticles.com

Share and Enjoy:
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google
  • Reddit
  • Slashdot
  • Spurl
  • Technorati
  • TwitThis