Internet Security Systems has added a behaviour-based malware-detection engine to its gateway intrusion-prevention system called the Proventia Network Integrated Security Appliance.
The Proventia appliance already used signature-based anti-virus detection from Sophos to detect and block known viruses, says Leslie Horachek, ISS product marketing manager. But in an effort to block worm and virus outbreaks in the minutes before they are identified and given a specific signature, ISS is including a behaviour-based blocking method to stop attacks based on code activity.
“It virtualizes the environment to trick the code to perform,” Horachek says. “The technology watches to see if Outlook is being opened, for instance, or other behaviour.”
The Proventia Network Appliance ranges from US$1,546 to US$15,000.
QuickLink: 052233