Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

1/26/2011
12:03 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Sourcefire Announces Partnership With NT Objectives

Partnership provides customers with the ability to tailor protection to specific vulnerabilities identified in Web applications

Columbia, MD – January 26, 2011 -- Sourcefire, Inc. (Nasdaq: FIRE), the creator of Snort' and a leader in intelligent cybersecurity solutions, today announced a partnership with NT OBJECTives™ (NTO) to provide customers with the ability to tailor protection to specific vulnerabilities identified in Web applications.

Through the partnership, NTO’s NTOSpider Web application vulnerability scanner automatically generates Snort rules that can be easily added to the Sourcefire' Intrusion Prevention System (IPS), providing immediate and customized detection and protection. The combination of Sourcefire and NTO enables users to quickly pinpoint and secure Web application vulnerabilities, increasing Web application security and satisfying compliance requirements – all without additional security investments.

“This integration helps our customers improve protection for their Web applications and reduces the risk of vulnerabilities being exploited before they can be patched,” said Doug Hurd, Director of Technical Alliances at Sourcefire. “When used in combination Sourcefire and NTO help customers lower their total cost of ownership (TCO), while increasing protection against specific application-level attacks.”

This integration overcomes a common challenge with traditional Web security appliances that leverage generic, “one-size-fits-all” rules, which are limited in their ability to defend unique Web applications. By generating custom rules tailored to application-specific vulnerabilities, Sourcefire and NTO minimize false positives and increase the accuracy of protection. To verify the application is secured, users simply rescan the application and confirm that Sourcefire is protecting the vulnerabilities from attack.

“When protecting Web applications, customization is key. Generic protection against exploits is too reactive to actually secure the application,” said Dan Kuykendall, CEO and CTO at NT OBJECTives. “By partnering with Sourcefire, we are providing customers with protection that is tailored to vulnerabilities we identify in their applications, which leads to significantly improved protection.”

About NT OBJECTives NT OBJECTives is an innovative provider of comprehensive application security solutions designed to help organizations discover threats, analyze risk and protect their web applications against attack. Its unique technology provides automated and accurate application vulnerability assessment regardless of site complexity along with the ability to help companies secure their web applications either by repairing application code or by custom configuring their security infrastructure to block the attacks. NT OBJECTives is located in Irvine, California.

About Sourcefire Sourcefire, Inc. (Nasdaq:FIRE), is a world leader in intelligent cybersecurity solutions. Sourcefire is transforming the way Global 2000 organizations and government agencies manage and minimize network security risks. Sourcefire’s IPS, Real-time Network Awareness and Real-time Adaptive Security solutions equip customers with an efficient and effective layered security defense – protecting network assets before, during and after an attack. Through the years, Sourcefire has been consistently recognized for its innovation and industry leadership by customers, media and industry analysts alike – with more than 50 awards and accolades. Today, the name Sourcefire has grown synonymous with innovation and network security intelligence. For more information about Sourcefire, please visit http://www.sourcefire.com.

 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 7/14/2020
Omdia Research Launches Page on Dark Reading
Tim Wilson, Editor in Chief, Dark Reading 7/9/2020
Why Cybersecurity's Silence Matters to Black Lives
Tiffany Ricks, CEO, HacWare,  7/8/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Threat from the Internetand What Your Organization Can Do About It
The Threat from the Internetand What Your Organization Can Do About It
This report describes some of the latest attacks and threats emanating from the Internet, as well as advice and tips on how your organization can mitigate those threats before they affect your business. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-14499
PUBLISHED: 2020-07-15
Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this vulnerability may allow an attacker to obtain all user accounts credentials.
CVE-2020-14501
PUBLISHED: 2020-07-15
Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. Successful exploitation of this vulnerability may allow an attacker to obtain the information of the user table, including the administrator credentials in plain text. An attacker may also ...
CVE-2020-14503
PUBLISHED: 2020-07-15
Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. Successful exploitation of this vulnerability could allow an attacker to remotely execute arbitrary code.
CVE-2020-14497
PUBLISHED: 2020-07-15
Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code.
CVE-2020-14505
PUBLISHED: 2020-07-15
Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection�) vulnerability. Successful exploitation of this vulnerability may allow an attacker to send a HTTP GET or POST request that create...