Risk
3/30/2009
06:01 PM
Keith Ferrell
Keith Ferrell
Commentary
50%
50%

BorderWare: Dynamic Inspection Tackles Bad Site Explosion

URL filters, however robust, wall off only a small per centage of malware sites and inappropriate content. How do you keep your employees -- and your business -- from being tagged by the larger universe of dangerous sites? Filtering on the fly is BorderWare's solution.

URL filters, however robust, wall off only a small per centage of malware sites and inappropriate content. How do you keep your employees -- and your business -- from being tagged by the larger universe of dangerous sites? Filtering on the fly is BorderWare's solution.Security vendor BorderWare has introduced a new feature, Dynamic Inspection, that the company says addresses the vast number of unrecognized and unfiltered sites on the Web.

While the Websense URL database, for instance, categorizes several million known sites, there are over a trillion (with a "t") sites on the Net, and the number is growing larger by the second.

BorderWare's latest feature-add to its subscription-based e-mail and Web security platform approaches unknown Web sites your employees seek to surf to, and analyzes them for both malware infections as well as for appropriate (or, more accurately, inappropriate) categories and content, measured against the standards and restrictions established in your security/usage policy.

According to Shawn Eldridge, BorderWare vp of products and marketing, with whom I spoke recently, the real-time scanning and content analysis process is usually quick and essentially unnoticed by the user. "Large sites with lots of content take longer, of course," he says.

What's the advantage of on-the-fly inspection over traditional URL filtering?

"Both are important," Eldridge said. "But the Web is growing so rapidly that no database of URLs can keep up. Dynamic Inspection was designed to bridge that gap between known sites and the far larger number of unknown ones."

As an additional feature for the company's e-mail and Web filtering and security products, Dynamic Inspection offers an effective solution both to inadvertent encounters with risky URLs and the larger, I think, general problem of exuberantly surfing employees.

The feature is an add-on, which brings us back to a question we've looked at here before: Can your business justify the investment of thousands of dollars for filtering and Web monitoring?(BorderWare is sold through resellers, so I don't have specific per seat costs.)

Eldridge's answer was not dissimilar from others I've received:

"It depends on the nature of your IT resources," he said. "Take a look at the amount of time, personnel and money you spend on help desks and IT staff, and measure that against the cost of the service you're considering."

Fair enough: like any other business investment, you have to look at both your resources and your needs.

On the needs front, the question comes down to the volume of unwanted and potentially dangerous e-mail you're receiving throughout your organization. Get that number, then determine how much time and effort your IT staff is spending dealing with the stuff, and you'll have made a good start toward understanding the level of challenge you face, and the level of investment that challenge justifies.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-1375
Published: 2015-01-28
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, which allows remote attackers to write to arbitrary files.

CVE-2015-1376
Published: 2015-01-28
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to arbitrary files via an upload URL with a host other than pixabay.com.

CVE-2015-1419
Published: 2015-01-28
Unspecified vulnerability in vsftp 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.

CVE-2014-5211
Published: 2015-01-27
Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response.

CVE-2014-8154
Published: 2015-01-27
The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer overf...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If you’re a security professional, you’ve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.