ad info




CNN.com
 MAIN PAGE
 WORLD
 ASIANOW
 U.S.
 LOCAL
 POLITICS
 WEATHER
 BUSINESS
 SPORTS
 TECHNOLOGY
   computing
   personal technology
   space
 NATURE
 ENTERTAINMENT
 BOOKS
 TRAVEL
 FOOD
 HEALTH
 STYLE
 IN-DEPTH

 custom news
 Headline News brief
 daily almanac
 CNN networks
 CNN programs
 on-air transcripts
 news quiz

  CNN WEB SITES:
CNN Websites
 TIME INC. SITES:
 MORE SERVICES:
 video on demand
 video archive
 audio on demand
 news email services
 free email accounts
 desktop headlines
 pointcast
 pagenet

 DISCUSSION:
 message boards
 chat
 feedback

 SITE GUIDES:
 help
 contents
 search

 FASTER ACCESS:
 europe
 japan

 WEB SERVICES:
 COMPUTING

ClickNet develops hacker detection product

October 29, 1999
Web posted at: 9:21 a.m. EDT (1321 GMT)

by Ellen Messmer

From...
Network World Fusion

(IDG) -- Desktop management vendor ClickNet Software is jumping into the security field with a product called Entercept that detects and prevents hacker attempts on servers and PCs.

Entercept seeks to prevent hacker activity through host-based server and desktop "agent" software that observes each request made to the operating system and checks to see if it's legitimate by comparing it to a list of known "attack signatures." The NT-based Entercept console can institute a security policy for up to 1,000 of these software agents and generate alerts if trouble is detected.

MORE COMPUTING INTELLIGENCE
IDG.net   IDG.net home page
  Network World Fusion home page
  Free Network World Fusion newsletters
  ISS upgrades intrusion-detection product suite, 8/16/99
  Top 5 intrusion detection downloads
  Reviews & in-depth info at IDG.net
  IDG.net's network management software page
  Year 2000 World
  Questions about computers? Let IDG.net's editors help you
  Subscribe to IDG.net's free daily newsletter for network experts
  Search IDG.net in 12 languages
  News Radio
  * Fusion audio primers
  * Computerworld Minute

ClickNet didn't develop the Entercept product but rather bought it by acquiring Israeli-based start-up Corekt earlier this year for an undisclosed price, acknowledges Christopher Tomlinson, ClickNet's vice president of marketing.

"Corekt was still in the research phase, and their 15 security experts joined our staff," Tomlinson says.

ClickNet will continue marketing its traditional desktop management software, but the firm wants to remake itself into a security firm, he adds. The reason? "The growth in the security market," says Tomlinson, citing an International Data Corp. report predicting that the $2 billion market will triple in three years.

Can a 5-year-old privately held firm such as ClickNet, without known security expertise, convince the corporate world to give it a chance? Aberdeen Group analyst Eric Hemmendinger is ready to give the firm the benefit of the doubt. "A company that has a history already and knows how to run a business probably has a leg up on a start-up that's unknown," he says.

The Entercept product will be formally unveiled in mid-November. A few companies, including EMC, say they are preparing to beta test it.

Entercept will ship with NT and Solaris agent software that can evaluate every incoming request for system resources, such as opening a file, read-write, or a request to access a device. The user names and privileges are defined by the NT domain controller in the NT-based Entercept console, says Oace Dada, senior product manager for security at ClickNet.

At present, Entercept knows about 300 types of attacks, such as buffer overflows and Trojan horses like BackOrifice. As new attacks are identified, the Entercept console can download them in encrypted fashion from the clicknet.com Web site. The agent software can communicate with the Entercept console every 30 seconds as a default setting to get the attack signature updates. If the agent software on the server sees an attack, it can terminate the session, log it or send an alert.

The Entercept console will cost $5,000, with server agents costing $1,000 and desktop agents $95 each.


RELATED STORIES:
The hacker in all of us
October 12, 1999
Returning fire with Network ICE
October 11, 1999
Be a happy hacker with this keyboard
September 13, 1999

RELATED IDG.net STORIES:
ClickNet Y2K provides detailed enterprise view
(Infoworld.com)
ISS upgrades intrusion-detection product suite
(Network World Fusion)
Air Force lab to build intrusion-detection system
(Federal Computer Week)
Security vendors update intrusion-detection capabilities
(Infoworld.com)
Linux hack flies below intrusion-detection radar
(Computerworld)
Network Associates ships intrusion detection and response tool
(Network World Fusion)
Note: Pages will open in a new browser window
External sites are not endorsed by CNN Interactive.

RELATED SITES:
ClickNet
Note: Pages will open in a new browser window
External sites are not endorsed by CNN Interactive.
 LATEST HEADLINES:
SEARCH CNN.com
Enter keyword(s)   go    help

Back to the top   © 2001 Cable News Network. All Rights Reserved.
Terms under which this service is provided to you.
Read our privacy guidelines.