ThreatSentry
Designed to protect servers running Microsoft® Internet Information Services, (IIS), ThreatSentry™ is an advanced neural application that continuously collects, analyze and organizes server events into an evolving baseline of acceptable activity. Each server connection is compared against this baseline to identify and take action against any activity falling outside of acceptable parameters. Upon installation ThreatSentry begins to collect and organize IIS-specific data into clusters that reflect the normal use patterns (both trusted and untrusted) within the server environment, ("Training Mode"). The process of organizing these clusters is guided through the use of a built-in knowledgebase of published attack signatures. Once the required number of training events has been collected, ThreatSentry shifts automatically into "Monitor" mode. In "Monitor Mode" ThreatSentry compares all incoming requests to IIS against the Training Database to determine whether it falls within acceptable distance of trusted activity. If it does, the process continues. If it does not, ThreatSentry initiates whatever action/s have been configured, ranging from posting an on screen alert, to blocking the untrusted connection, or shutting down IIS. Maintaining ThreatSentry is simple. As described in the maintenance tips above, proper classification of events is essential and can be accomplished as Security Alerts are displayed, or during periodic review of the Security Alert Log. After one or more events have been reclassified, the Training Database should be "Re-Trained" upon which ThreatSentry will remember not only the correct classification of the particular event/s, but also its various characteristics which will be applied to the analysis of subsequent events.
|
ThreatSentry Review
More Popular Web-Security Titles
ComputerSafeTrial
ComputerSafeâ„¢ detects, protects, and reports a variety computer system security threats more effectively than any other product or service. It can also be instrumental in recovering lost or stolen computers.
XShield Lite
If your web site has links to external pages, then they may be, at any time, made to point to inappropriate content that is often adult in nature. XShield will monitor your links and warn you if they have been made to point to inappropriate content.
Rising Antivirus 2008
RISING Antivirus 2008 protects your computers against all types of viruses, Trojans, worms, Rootkits and other malicious programs. Easy to use, Active Defense and Smartupdate technology make RISING Antivirus 2008 an install and forget product.
|
