HBGary Unveils Technology To Detect And Gather Intelligence On Malware

PRESS RELEASE

InfoSec World 2009 " March 9th, 2009 -- HBGary, Inc., (http://www.hbgary.com), the leader in memory forensics and malware analysis, today unveiled Digital DNA, a breakthrough technology that takes a unique forensic approach to helping enterprises detect and obtain critical intelligence on malware in their computer memory to better protect against advanced computer security threats such as Zero-Day attacks. HBGary will demonstrate the new technology at InfoSec World 2009, booth #217.

"Today the majority of malware cannot be detected by signature-based security solutions and other traditional security methods. While these solutions play a role in a company's defense-in-depth security strategy, malware now is more sophisticated and can easily go around these solutions," said Greg Hoglund, CEO and founder of HBGary. "Our Digital DNA technology detects malware that is polymorphic, using advanced techniques or currently unknown that these solutions can't find." HBGary Digital DNA: How it Works Digital DNA is a patent-pending technology to detect advanced computer security threats within computer memory without relying on information provided by the computer's operating system. All software modules residing in memory are identified and ranked by level of severity. The Digital DNA sequence appears as a series of trait codes when concatenated together describe the behaviors of each software module. For an example of a Digital DNA sequence, pleases use this link http://www.hbgary.com. Observed behavioral traits are then matched against HBGary's new Global Threat Genome database to classify digital objects as good, bad or neutral. The database currently contains more than 2500 codified behavior traits. . Customers gain access to database through a secure portal. Here are some examples of behavior traits:

Trait: 8a C2 Description: The driver may be a rootkit or an anti-rootkit tool. It should be examined in more detail.

Trait: 0F 51 Description: There is a small indicator that detour patching could be supported by this software package. Detour patching is a known malware technique and is also used by some hacking programs and system utilities.

Trait: 0F 64 Description: The driver has a potential hook point onto the windows TCP stack. This is common to desktop firewalls and is a known rootkit technique. This deeper malware intelligence provides users with the critical information needed to secure their systems. Pricing and availability Last year HBGary announced that the company had joined the McAfee Security Innovation Alliance (SIA) partner program. Under the McAfee SIA program, HBGary integrated its flagship product, HBGary Responder , with McAfee' ePolicy Orchestrator' (ePO ) software, the first platform that lets enterprises and governments centrally manage security and compliance products from multiple vendors. HBGary Digital DNA is generally available and currently integrated with McAfee ePO. HBGary currently is in the process of obtaining McAfee certification.

Additional security vendor integration announcements are expected by end of Q2 2009. HBGary is also offering Digital DNA as a software module for its own stand-alone flagship product, HBGary Responder Professional. HBGary is currently offering an introductory price for HBGary Responder Professional with Digital DNA technology for $9000 plus subscription. About HBGary, Inc. HBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing advanced computer analysis solutions for Information Assurance (IA) analysts, Computer Emergency Response Teams (CERT's), and Computer Forensic Investigators to detect, diagnose, and respond to computer intrusions and other cyber crime activities. The company is headquartered in Sacramento with sales offices in the Washington D.C. . area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com.

For more information: Karen Burke 650-814-3764 [email protected]