Attacks/Breaches
12/12/2012
05:52 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Sentinel IPS Announces The Global Release Of An Industry-First Collective Intelligence Scoring System

CINS Scores provide view into the malicious activity of hostile IP addresses

Sentinel Intrusion Prevention Systems announces the global release of a new intrusion prevention technology called CINS&trade Scoring. The announcement and live demonstrations of the technology may be seen this week at DELL World 2012, in Austin TX.

"Collective Intelligence Network Security&trade" or CINS, is the data platform upon which the new scoring system is derived. CINS Scores provide an unprecedented view into the malicious activity of hostile IP addresses. The score is a proprietary algorithm that makes use of "CINS factors" that include "zero day" intelligence via rogue packet activity, a multitude of IP reputation feeds, and current and past attack activity from SENTINEL IPS by ECONET sensors around the world. CINS scores for IP's are analogous to FICO scores for borrowers. This new scoring system allows for the relative comparison of the trustworthiness of source IP addresses. CINS Scores are accompanied by detailed reports, akin to credit reports, that show current information about any IP address in the world. CINS data is collected, interpreted, and made anonymous, from a variety of sources, including Sentinel IPS appliances deployed worldwide. These devices along with the CINS data and scores are collected in real time and continuously updated.

CINS data and the ability to derive a reliable score is a potent tool in defending networks from intrusions. Sentinel IPS appliances utilize a variety of detection methodologies including CINS Scores to prevent "bad actors" from causing harm to Sentinel IPS protected networks.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8893
Published: 2015-01-28
Multiple cross-site scripting (XSS) vulnerabilities in (1) mainpage.jsp and (2) GetImageServlet.img in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CVE-2014-8894
Published: 2015-01-28
Open redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the out parameter.

CVE-2014-8895
Published: 2015-01-28
IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.

CVE-2014-8917
Published: 2015-01-28
Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3) dojox/av/resources/audio.swf, and (4) dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media A...

CVE-2014-8920
Published: 2015-01-28
Buffer overflow in the Data Transfer Program in IBM i Access 5770-XE1 5R4, 6.1, and 7.1 on Windows allows local users to gain privileges via unspecified vectors.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If youíre a security professional, youíve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.