Vulnerabilities / Threats
1/31/2011
11:52 AM
50%
50%

Trend Micro Unveils IBM Security Suite

ScanMail Suite for 64-bit Lotus Domino platforms uses a cloud-based database to detect threats, including those generated by URL-shortening services recently linked to the spread of malware.

Top 10 Security Stories Of 2010
(click image for larger view)
Slideshow: Top 10 Security Stories Of 2010

Internet security software developer Trend Micro Monday unveiled its ScanMail Suite, a solution designed for all 64-bit IBM Lotus Domino platforms, including IBM's new System z platform.

The vendor's newest offering provides anti-spam, anti-malware, Web threat protection, and content protection to prevent data loss and theft, according to Trend Micro. ScanMail Suite, which was designed specifically as a native Lotus Domino server application, was optimized for high-performance scanning, the developer said. The technology supports all current 64-bit Domino platforms, as well as Windows and AIX.

"The release of ScanMail v5 for Lotus Domino for Linux on IBM System z allows us to exploit the world's fastest chip technology on the IBM zEnterprise System to help our customers achieve unrivalled reliability, security, and manageability for their multi-OS datacenters," said Steve Quane, chief product officer at Trend Micro. "Further, since Lotus Domino, ScanMail, and IBM System z all support multiple operating environments, heterogeneity of data centers no longer stands in the way of dramatic consolidation and cost reduction -- a key objective of our large enterprise customers."

IBM's zEnterprise System was designed to be fast and scalable. The solution integrates a number of IBM technologies to support enterprises' multi-architecture data centers and private clouds, according to the vendor. In the fourth quarter of 2010, sales of System z mainframes grew 69% year-over-year, IBM said.

Likewise, Trend Micro turns to the cloud, using its domain-reputation database to track the credibility of Web domains and IP addresses. The database assigns a reputation score, using factors such as the site's age, IP email sending behavior, indications of suspicious activities discovered via behavior analysis, and historical location changes, the developer said. ScanMail immediately can access this rating, allowing the software to instantly block messages that include links to malicious URLs, said Trend Micro.

Malicious URLs are a growing threat today, according to many researchers and security developers. Creators of phishing sites are tapping into users' hunger for the shortened URLs popular on Twitter, direct messages, SNS applications, chat services on Twitter and Facebook, as well as friend-search optimization, according to AhnLabs, a provider of online security solutions.

Earlier this month, a new worm spread via the goo.gl URL abbreviator, said Kaspersky Labs security researcher Nicolas Brulez, in a company blog. The attack, first seen on Jan. 20, tweets a malicious URL, eventually linking a user to a scareware page. Scammers created a similar ruse in December, while a September attack using bit.ly's link shortening service saw more than 116,000 clicks.

To help combat these attacks, Twitter offers a link service that also will be used for analysis.

"A link converted by Twitter's link service is checked against a list of potentially dangerous sites. When there's a match, users can be warned before they continue," the company's site said. "Our link service will also be used to measure information like how many times a link has been clicked. Eventually, this information will become an important quality signal for our Resonance algorithm -- the way we determine if a Tweet is relevant and interesting."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
The Changing Face of Identity Management
Mobility and cloud services are altering the concept of user identity. Here are some ways to keep up.
Flash Poll
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7445
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

CVE-2015-4948
Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVE-2015-5660
Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

CVE-2015-6003
Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVE-2015-6333
Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio

The cybersecurity profession struggles to retain women (figures range from 10 to 20 percent). It's particularly worrisome for an industry with a rapidly growing number of vacant positions.

So why does the shortage of women continue to be worse in security than in other IT sectors? How can men in infosec be better allies for women; and how can women be better allies for one another? What is the industry doing to fix the problem -- what's working, and what isn't?

Is this really a problem at all? Are the low numbers simply an indication that women do not want to be in cybersecurity, and is it possible that more women will never want to be in cybersecurity? How many women would we need to see in the industry to declare success?

Join Dark Reading senior editor Sara Peters and guests Angela Knox of Cloudmark, Barrett Sellers of Arbor Networks, Regina Wallace-Jones of Facebook, Steve Christey Coley of MITRE, and Chris Roosenraad of M3AAWG on Wednesday, July 13 at 1 p.m. Eastern Time to discuss all this and more.