eEye Adds Patent-Pending Protection For ActiveX Attacks

Printer-friendly versionPDF version

New technology provides solid protection and allows web-based script code to decrypt itself allowing for more powerful attack identification

(Irvine, CA) January 22, 2009 — eEye Digital Security (www.eeye.com), an expert in integrated security and threat-management solutions, today announced the availability of a new, patent-pending technology for protection against ActiveX controls containing zero-day vulnerabilities.

The new technology has been programmed into eEye�s Blink Endpoint Security solution and effectively blocks all threats within ActiveX, the lowest common denominator attack vector for the majority of Internet Explorer exploits.

Traditionally, intrusion protection systems are required to decrypt malicious scripts which is a memory-intensive process and not very effective. With the addition of this new technology from eEye, users are able to allow Web-based script code to decrypt itself in a safe manner and allow Blink to identify attacks at the last possible state prior to a potentially malicious execution. This saves the user from Web-based script code that is designed to maliciously execute ActiveX controls. This occurs by hooking into the ActiveX system itself, which must be called by Web-based script code in order to exploit ActiveX vulnerabilities.

�This methodology has proven to be much more effective than the decryption methods of other intrusion protection vendors,� said Andre Protas, eEye director of Research and Preview Services. �We developed the technology through our R&D team, which constantly analyzes current attack trends to identify the next evolution of threats. While many of these evolutions have small iterations and change rapidly, we typically identify a common denominator that allows us to provide protection against current attacks as well as the next evolution of attacks.�

The eEye ActiveX protection engine within Blink Endpoint Security also contains a heuristic system that analyzes calls to ActiveX controls that may have zero-day vulnerabilities. If a suspicious call is witnessed, the script is automatically blocked and additional action is not necessary by the user to block the attack.

eEye tested the new technology against threats that have emerged from ActiveX controls during the past several years as well as against a database of zero-day ActiveX vulnerabilities. The protection mechanism has proven to be 100-percent effective at blocking remote-code execution.

�This new mechanism is another example of eEye�s overall protection strategy,� added Protas. �Our mission is to provide zero-day protection for the threats of today along with proactive protection from the threats of tomorrow."

About Blink Endpoint Security

Blink Endpoint Security combines multiple layers of endpoint security capabilities and leverages a host-based intrusion prevention engine that dynamically collects and incorporates new threat data in real time. The solution also enables users to have centralized policy control over applications, system resources and removable storage devices. Blink Endpoint Security also provides virus and spyware protection, intrusion prevention and vulnerability assessment, and system and application firewalls that protect desktops from malicious zero-day attacks, ID theft, keylogging, phishing, and variants of malware such as hijacking by botnets.

Customers and partners interested in information and pricing should contact an eEye Security Account Manager at sales@eEye.com or call (866) 282-8276. For more information on eEye threat management products, visithttp://www.eeye.com/html/products.

About eEye Digital Security

eEye Digital Security� is pioneering a new class of security products:integrated threat management. This next-generation of security detects vulnerabilities and threats, prevents intrusions, protects all of an enterprise�s key computing resources, from endpoints to network assets to web sites and web applications, all while providing a centralized point ofsecurity managementand network visibility.eEye�s research teamis consistently the first to identify new threats in the wild, and our products leverage that research to deliver on the goal of making network security as easy to use and reliable as networking itself. Founded in 1998 and headquartered in Orange County, California, eEye Digital Security protects more than 9,000 corporate and government organizations worldwide, including half of the Fortune 100. For more information, please visitwww.eeye.com

Primary Agency Contact

Victor Cruz
MediaPR

(508) 655-4397

eEye@mediapr.net

title="eEye Internet Security Press - EMEA">EMEA Agency Contact

Ralph Kl�wer
INTERFACE Relations

+49 (0) 89-552 688-66

title="eEye Internet Security Press - EMEA">r.kloewer@interface.pr.de

Corporate Contact

Stacy Newman
eEye Digital Security

(949) 900-4131

press@eEye.com