News

Arbor Networks tracks worm-like behaviour

Karen Gomm
Security supplier Arbor Networks has released Peakflow X 3.0, an internal network security system that aims to detect worms and protect systems from them.

The network security product is designed to analyse the hosts on the network, looking for "behavioural abnormalities".

Rather than check worms and viruses against an existing signature, Arbor Networks said Peakflow X analyses the flows and relationships between hosts on the network to try to identify malicious activities.

The company said that since Peakflow X does not rely on signatures, it can detect a worm as soon as it hits the network, even if it is so new that a signature or even an advisory does not exist.

Peakflow X also includes Worm Vaccine, a tool that warns users through a security advisory service, enabling them to lockdown before the worm hits their network. Further support is available though a tool called Safe Quarantine in the new version of PeakFlow. This creates a list of legitimate traffic and uses existing infrastructure such as firewalls and switches to block worms.

Worms are one of the most severe threats facing users, yet despite firewalls and intrusion detection systems, worms such as Sapphire, Blaster and Slammer have cost organisations millions of pounds.

Email Alerts

Register now to receive ComputerWeekly.com IT-related news, guides and more, delivered to your inbox.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
 

COMMENTS powered by Disqus  //  Commenting policy