Arbor Networks tracks worm-like behaviour


Arbor Networks tracks worm-like behaviour

Karen Gomm
Security supplier Arbor Networks has released Peakflow X 3.0, an internal network security system that aims to detect worms and protect systems from them.

The network security product is designed to analyse the hosts on the network, looking for "behavioural abnormalities".

Rather than check worms and viruses against an existing signature, Arbor Networks said Peakflow X analyses the flows and relationships between hosts on the network to try to identify malicious activities.

The company said that since Peakflow X does not rely on signatures, it can detect a worm as soon as it hits the network, even if it is so new that a signature or even an advisory does not exist.

Peakflow X also includes Worm Vaccine, a tool that warns users through a security advisory service, enabling them to lockdown before the worm hits their network. Further support is available though a tool called Safe Quarantine in the new version of PeakFlow. This creates a list of legitimate traffic and uses existing infrastructure such as firewalls and switches to block worms.

Worms are one of the most severe threats facing users, yet despite firewalls and intrusion detection systems, worms such as Sapphire, Blaster and Slammer have cost organisations millions of pounds.

Email Alerts

Register now to receive IT-related news, guides and more, delivered to your inbox.
By submitting your personal information, you agree to receive emails regarding relevant products and special offers from TechTarget and its partners. You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

COMMENTS powered by Disqus  //  Commenting policy