Home > News > Press
Releases > 2011 > Press Release
Backbone Security Announces Enhanced Insider Threat Detection Capability
Network Security Appliance Detects 960 Steganography Applications in Real-Time
PRESS RELEASE
September 21, 2011
FAIRMONT, WV - Backbone Security is pleased to announce availability of a new and
improved version of their Steganography Analyzer Real-Time
Scanner (StegAlyzerRTS), the world’s only commercially available network
security appliance for detecting digital steganography in real-time.
Digital steganography is an Internet era version of an information hiding technique
dating back to the days of Ancient Greece. Using digital steganography, a file can
be embedded within, or appended to, another file in such a way that it cannot be
seen or heard. Unlike cryptography, which translates information into an unintelligible
sequence of letters and numbers, steganography conceals the very existence of the
information.
Insiders are increasingly becoming aware of the value of information they work with
on a daily basis. Accordingly, insider theft of sensitive information is increasing
at an alarming pace. Insiders can use any of the 1,000+ steganography applications
available on the Internet as freeware or shareware to ex-filtrate personally identifiable
information, protected health information, or intellectual property, for example,
outside the enterprise network. The current generation of network security appliances
does not detect insider use of steganography.
StegAlyzerRTS version 3.2, developed in Backbone’s Steganography Analysis and Research
Center (SARC), detects insiders downloading any of the 960 digital steganography
applications currently in the SARC’s library of steganography applications. Detecting
this type of insider activity is an early warning indicator the insider is planning
to steal sensitive information.
Using the analytical approach to detecting steganography developed in the SARC,
StegAlyzerRTS can also detect insider use of a subset of the 960 applications through
a unique signature-based detection model.
Among many other enhancements, the new version features a dramatic speed improvement
due to performing all packet processing in RAM rather than writing the packet stream
to disk which incurs the overhead of disk input and output.
Another key feature is the inclusion of a statistics display that allows the user
to actively monitor 50 performance metrics related to the system and the inbound/outbound
network traffic stream.
A code signing feature was added to allow our customers to confirm the software
was authored by Backbone Security and to guarantee the code has not been altered
or corrupted since it was signed.
“Enterprises with sensitive information to protect are vulnerable to the threat
from trusted insiders using steganography to steal the crown jewels. Our real-time
steganography detection appliance can mitigate that threat.” stated Bart Guerreri,
Founder, Chairman, and CEO of Backbone Security.
The next version of StegAlyzerRTS will include the capability to manage multiple
geographically dispersed scanners from one location. This feature will be of particular
interest to enterprises with multiple data centers located anywhere in the world.
StegAlyzerRTS is available for both 100 Mbps and 1 Gbps networks. For more information
please visit www.sarc-wv.com.
About the SARC - The SARC is a Center of Excellence in digital steganography research and development within Backbone Security. The SARC has established the world's largest commercially available repository of digital steganography applications, fingerprints, and signatures and has developed industry leading computer forensics and network security steganalysis tools for detecting and extracting information hidden with digital steganography applications.
About Backbone Security - In addition to being the leading provider of digital steganalysis tools, Backbone is a Payment Card Industry Data Security Standard (PCI-DSS) Approved Scanning Vendor (ASV) that conducts automated PCI-DSS compliance assessments with their industry leading One-Stop PCI Scan service. Backbone also provides real-time intrusion monitoring, vulnerability assessment, penetration testing, and business continuity and disaster recovery planning services.