Internet Security Systems (ISS), represent locally by EC-Hold Limited, the JSE-listed information security specialist, has announced new versions of its security scanning solutions. ISS`s Database Scanner, Internet Scanner and System Scanner empower customers to effectively predict, quantify, and eliminate security risks to organisations` e-business and e-commerce infrastructures.
"As the true pioneer of the industry`s first vulnerability detection system, Internet Scanner, ISS has come a long way in the continued evolution of a set of technologies critical to information protection in the age of e-commerce," says Matthew Kovar, senior analyst with the Yankee Group. "Coupled with ISS`s intrusion detection and decision support offerings, ISS is providing customers with a powerful solution for a difficult aspect of information protection - the ongoing management of enterprise security risks."
"As organisations move to reap the benefits associated with e-business, they open up their enterprise networks to risks that are increasingly difficult to measure and manage, thus placing their investments in e-business in danger," says Dov Herdan, MD of EC-Hold.
"ISS is providing an important solution that allows customers to gain multiple perspectives on security performance throughout the enterprise, fostering quick responses to security problems and a safer, more productive e-business environment," adds Herdan.
The ISS risk assessment platform provides customers with three important benefits, providing answers to the following critical questions:
. Predicting Risk.
What is the current state of your systems? Where are security failures likely, or actually occurring? How effective is the security policy?
. Quantifying Risk.
What failures will cause the most harm? What security risks need to be addressed first?
. Managing Risk.
What changes have occurred in the organisation`s risk profile? What changes in security policy should be made to ensure appropriate levels of security? Is security improving over time and if not, what mitigating actions will improve it?
The company`s risk assessment platform is made up of three important types of security management applications: Internet Scanner for network-based risk assessment to manage risk across the network; System Scanner for host-based risk assessment to manage risk within critical servers and desktops; and Database Scanner to manage risk associated with database servers and enterprise applications.
Internet Scanner 6.0 enables customers to automatically receive new countermeasures for defending their networks against the latest vulnerabilities and threats; allows customers to develop their own "Flex Checks" or customised detection methods targeted at unique aspects of their environment; and includes a significant number of new, built-in vulnerability checks for the latest security risks including over 24 checks for evidence of backdoor programs such as BackOrifice 2000 System Scanner 4.0 provides advanced host-based risk assessment capabilities to for the next level of risk management - the lock down of critical Unix and Windows NT-based servers and desktops.
The new version of Database Scanner automates the process of securing mission critical data stored in Microsoft, Oracle and Sybase database servers, enabling customers to easily manage the security and administration of these critical systems.
Internet Scanner version 6.0, System Scanner version 4.0, and Database Scanner 3.0 will be available for download from ISS` Web site, www.iss.net.

