Public Relations

New service coordinates with firewalls to defend against bot-initiated targeted attacks

- Block access to fraudulent servers with Threat Information List Service from Asgent -

March 6, 2012
Asgent, Inc.
（JASDAQ：4288）

Asgent, Inc. (President & CEO: Takahiro Sugimoto, located in Chuo-ku, Tokyo), a pioneer in network security and operations management solutions announces, as part of “product integrated services” advocated by Asgent, a “Threat Information List Service” to protect networks from targeted attacks executed by bots etc. that cannot be prevented with traditional security measures. The service will begin operations on March 7.

【Traditional security measures are no match for targeted attacks】

A targeted attack is a cyber attack against a specific organization or person with the primary aim of extracting confidential or sensitive information regarding that organization or person. The attacker will often impersonate an organization or person etc. that has a business relationship with the target and will send a PDF, Word, Excel document etc. that has a bot embedded as an attachment to the target. Once the recipient of the e-mail or message opens the attached file or clicks on the embedded URL, the PC is infected with a bot, which will contact the command and control (C&C) server operated by the attacker and will send confidential or sensitive information to the C&C server as instructed.

【Threat Information List Service】

With the threat of these targeted attacks in mind, Asgent announces the “Threat Information List Service” to prevent the loss of confidential or sensitive information as a result of these attacks. This service includes both a threat information list containing information on known C&C servers and a program to implement this list into firewalls on the customer network. In the remote chance that a PC is infected with a bot, the firewall will utilize the threat information list to block access to the C&C server, preventing any loss of confidential information.

As this service uses existing firewalls in the network and incorporates a program to automatically download the list and convert it into firewall rules, the customer can begin operations immediately with the least amount of burden on the network administrator.

【Asgent and product integrated services】

From its inception in 1997, Asgent has developed a business selling a wide range of security products, including Check Point firewalls products. In order to adapt to changing security needs and establish a base for medium- to long-term growth, Asgent is making the shift from a business model focused on product sales to a product integrated service business model with a proven background in security consulting and auditing. The “Threat Information List Service” is a part of these “product integrated services”, enabling existing users of Check Point products to easily and effectively prevent the loss of confidential information through bots by adding this service to their security infrastructure.

【Threat Information List Service】

■Start of operations

March 7, 2012

■Service Charge

¥480,000 (annually)

■Sales Target

150 customers (annually)

■Features

・ Protect confidential information with daily updated threat information list

・ Utilizes existing firewalls for easy implementation

・ Blocks access from any network connected PC that may become infected to attacker servers

・ Automatic processing of the threat information list from download to rule creation makes for simple operation