Vulnerabilities / Threats
1/31/2011
11:52 AM
50%
50%

Trend Micro Unveils IBM Security Suite

ScanMail Suite for 64-bit Lotus Domino platforms uses a cloud-based database to detect threats, including those generated by URL-shortening services recently linked to the spread of malware.

Top 10 Security Stories Of 2010
(click image for larger view)
Slideshow: Top 10 Security Stories Of 2010

Internet security software developer Trend Micro Monday unveiled its ScanMail Suite, a solution designed for all 64-bit IBM Lotus Domino platforms, including IBM's new System z platform.

The vendor's newest offering provides anti-spam, anti-malware, Web threat protection, and content protection to prevent data loss and theft, according to Trend Micro. ScanMail Suite, which was designed specifically as a native Lotus Domino server application, was optimized for high-performance scanning, the developer said. The technology supports all current 64-bit Domino platforms, as well as Windows and AIX.

"The release of ScanMail v5 for Lotus Domino for Linux on IBM System z allows us to exploit the world's fastest chip technology on the IBM zEnterprise System to help our customers achieve unrivalled reliability, security, and manageability for their multi-OS datacenters," said Steve Quane, chief product officer at Trend Micro. "Further, since Lotus Domino, ScanMail, and IBM System z all support multiple operating environments, heterogeneity of data centers no longer stands in the way of dramatic consolidation and cost reduction -- a key objective of our large enterprise customers."

IBM's zEnterprise System was designed to be fast and scalable. The solution integrates a number of IBM technologies to support enterprises' multi-architecture data centers and private clouds, according to the vendor. In the fourth quarter of 2010, sales of System z mainframes grew 69% year-over-year, IBM said.

Likewise, Trend Micro turns to the cloud, using its domain-reputation database to track the credibility of Web domains and IP addresses. The database assigns a reputation score, using factors such as the site's age, IP email sending behavior, indications of suspicious activities discovered via behavior analysis, and historical location changes, the developer said. ScanMail immediately can access this rating, allowing the software to instantly block messages that include links to malicious URLs, said Trend Micro.

Malicious URLs are a growing threat today, according to many researchers and security developers. Creators of phishing sites are tapping into users' hunger for the shortened URLs popular on Twitter, direct messages, SNS applications, chat services on Twitter and Facebook, as well as friend-search optimization, according to AhnLabs, a provider of online security solutions.

Earlier this month, a new worm spread via the goo.gl URL abbreviator, said Kaspersky Labs security researcher Nicolas Brulez, in a company blog. The attack, first seen on Jan. 20, tweets a malicious URL, eventually linking a user to a scareware page. Scammers created a similar ruse in December, while a September attack using bit.ly's link shortening service saw more than 116,000 clicks.

To help combat these attacks, Twitter offers a link service that also will be used for analysis.

"A link converted by Twitter's link service is checked against a list of potentially dangerous sites. When there's a match, users can be warned before they continue," the company's site said. "Our link service will also be used to measure information like how many times a link has been clicked. Eventually, this information will become an important quality signal for our Resonance algorithm -- the way we determine if a Tweet is relevant and interesting."

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8802
Published: 2015-01-23
The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.

CVE-2014-9623
Published: 2015-01-23
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quote and cause a denial of service (disk consumption) by deleting an image in the saving state.

CVE-2014-9638
Published: 2015-01-23
oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.

CVE-2014-9639
Published: 2015-01-23
Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.

CVE-2014-9640
Published: 2015-01-23
oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If you’re a security professional, you’ve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.