Networks Unlimited, distributor for IronPort Systems, the world leader in e-mail security, announced that IronPort Systems has begun issuing real-time virus outbreak alerts via e-mail from its Threat Operations Centre.
IronPort users and anyone signing up for the e-mail alerts will have the immediate advantage of being the first to know when new virus outbreaks occur.
The e-mail alerts are a product of IronPort`s early warning system of detection, Virus Outbreak Filters, which during the recent Mabutu variant outbreak, W32/Mabutu-A, protected Outbreak Filters users 12 hours and 26 minutes before an AV signature was available from any of the major AV vendors*.
Mabutu variant outbreak details and timeline:
W32/Mabutu-A is an e-mail worm and backdoor Trojan. It sends itself as an attachment to an e-mail with a ZIP or SCR extension. Once W32/Mabutu-A has infected a PC, it attempts to gather personal information and send this information to remote users via an IRC channel.
* Date: 17 November 2005
* Name**: W32/Mabutu-A (Mabutu variant)
* 00:58 GMT: Virus threat level raised and protection starts
* 13:24 GMT: First anti-virus signature published*
* 12 hours and 26 minutes of additional protection with Virus Outbreak Filters
Real-time alerts - free to all, IronPort`s expertise and insight benefits the global e-mail community
IronPort`s automated e-mail virus outbreak alert delivery is the latest benefit IronPort brings to the world of e-mail. Though IronPort users automatically receive the e-mail virus outbreak alerts, IronPort encourages everyone to subscribe for free automated e-mail virus outbreak alert delivery at www.ironport.com. The automated virus outbreak alerts include a name for the virus or virus variant and any pattern or relevant history of the detected virus.
"Effective virus detection systems should have a global view of e-mail traffic patterns and sophisticated virus-identifying algorithms that are balanced with human oversight," said Teney Takahashi, Market Analyst at the Radicati Group. "IronPort has all the critical components of an effective system. Their virus alerts can give companies an advantage by alerting them of viruses before they can do any damage. In addition, they serve to better the industry as a whole by increasing awareness and decreasing virus outbreaks."
"Traditional anti-virus technologies lack the ability to fully defend against today`s virus outbreaks," said Patrick Peterson, Vice-President of Technology for IronPort Systems. "The weakness is primarily due to the time it takes for traditional virus signatures to be developed and distributed. The delay between a virus attack and availability of a reactive virus signature can result in considerable damage and cost."
IronPort has been first to detect and act against more than 140 virus outbreaks since the company launched the Threat Operation Centre in 2004. The lead time of this preventive security system over traditional signature-based solutions has been 13.6 hours on average, with a lead time of more than 50 hours for certain polymorphic viruses that are difficult to characterise with a traditional signature. Included in the list are multiple variants of the popular and dangerous Bagle, Netsky, Sober, MyDoom and MyTob viruses.
IronPort`s Threat Operation Centre is a 24/7, 365-day operation, manned by a remarkable team of professional multilingual analysts fighting against malicious e-mail activity. Intently focused on the ever-metamorphosing world of perverse global e-mail activity, the Threat Operation Centre is dedicated to producing remarkable results for the global e-mail community, saving hundreds of millions of dollars with every virus outbreak. ISPs, enterprise, corporate and small business networks, and ultimately consumers, all benefit. Automated e-mail virus alert delivery is a product of IronPort`s unmatched expertise and service from which all e-mail users can benefit now.
IronPort Systems is the leading e-mail security products provider for organisations ranging from small businesses to the Global 2000. The company has developed a family of e-mail security appliances, the IronPort C-series, which offer breakthrough performance, unprecedented ease of use, reduced total cost of ownership, and is shipped with pre-loaded Symantec Brightmail, the industry leader in anti-spam technology. IronPort is driving new standards and providing innovative products for those faced with the monumental task of managing, protecting, and growing mission-critical e-mail systems.
IronPort has over 1 500 customers spanning 45 countries, including governments in 10 nations. In Q4 2004, IronPort added more than 30 Global 2000 companies as new customers and won the largest purchase in e-mail security history, delivering a large-scale system for the US Federal Government. IronPort powers and protects the e-mail for six of the 10 largest ISPs in the world, six of the 10 largest technology companies, and five of the 10 largest media companies.
* Calculated as first published alert time from any of the following vendors: Sophos, Trend Micro, Computer Associates, Kaspersky Labs, Symantec or McAfee.
** As named by Sophos.
Share
Editorial contacts