Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

1/26/2011
12:03 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Sourcefire Announces Partnership With NT Objectives

Partnership provides customers with the ability to tailor protection to specific vulnerabilities identified in Web applications

Columbia, MD – January 26, 2011 -- Sourcefire, Inc. (Nasdaq: FIRE), the creator of Snort' and a leader in intelligent cybersecurity solutions, today announced a partnership with NT OBJECTives™ (NTO) to provide customers with the ability to tailor protection to specific vulnerabilities identified in Web applications.

Through the partnership, NTO’s NTOSpider Web application vulnerability scanner automatically generates Snort rules that can be easily added to the Sourcefire' Intrusion Prevention System (IPS), providing immediate and customized detection and protection. The combination of Sourcefire and NTO enables users to quickly pinpoint and secure Web application vulnerabilities, increasing Web application security and satisfying compliance requirements – all without additional security investments.

“This integration helps our customers improve protection for their Web applications and reduces the risk of vulnerabilities being exploited before they can be patched,” said Doug Hurd, Director of Technical Alliances at Sourcefire. “When used in combination Sourcefire and NTO help customers lower their total cost of ownership (TCO), while increasing protection against specific application-level attacks.”

This integration overcomes a common challenge with traditional Web security appliances that leverage generic, “one-size-fits-all” rules, which are limited in their ability to defend unique Web applications. By generating custom rules tailored to application-specific vulnerabilities, Sourcefire and NTO minimize false positives and increase the accuracy of protection. To verify the application is secured, users simply rescan the application and confirm that Sourcefire is protecting the vulnerabilities from attack.

“When protecting Web applications, customization is key. Generic protection against exploits is too reactive to actually secure the application,” said Dan Kuykendall, CEO and CTO at NT OBJECTives. “By partnering with Sourcefire, we are providing customers with protection that is tailored to vulnerabilities we identify in their applications, which leads to significantly improved protection.”

About NT OBJECTives NT OBJECTives is an innovative provider of comprehensive application security solutions designed to help organizations discover threats, analyze risk and protect their web applications against attack. Its unique technology provides automated and accurate application vulnerability assessment regardless of site complexity along with the ability to help companies secure their web applications either by repairing application code or by custom configuring their security infrastructure to block the attacks. NT OBJECTives is located in Irvine, California.

About Sourcefire Sourcefire, Inc. (Nasdaq:FIRE), is a world leader in intelligent cybersecurity solutions. Sourcefire is transforming the way Global 2000 organizations and government agencies manage and minimize network security risks. Sourcefire’s IPS, Real-time Network Awareness and Real-time Adaptive Security solutions equip customers with an efficient and effective layered security defense – protecting network assets before, during and after an attack. Through the years, Sourcefire has been consistently recognized for its innovation and industry leadership by customers, media and industry analysts alike – with more than 50 awards and accolades. Today, the name Sourcefire has grown synonymous with innovation and network security intelligence. For more information about Sourcefire, please visit http://www.sourcefire.com.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
DevSecOps: The Answer to the Cloud Security Skills Gap
Lamont Orange, Chief Information Security Officer at Netskope,  11/15/2019
Attackers' Costs Increasing as Businesses Focus on Security
Robert Lemos, Contributing Writer,  11/15/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-16860
PUBLISHED: 2019-11-19
Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an ele...
CVE-2019-16861
PUBLISHED: 2019-11-19
Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated ...
CVE-2014-5118
PUBLISHED: 2019-11-18
A Security Bypass Vulnerability exists in TBOOT before 1.8.2 in the boot loader module when measuring commandline parameters.
CVE-2019-12422
PUBLISHED: 2019-11-18
Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.
CVE-2012-4441
PUBLISHED: 2019-11-18
Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin.