InterScan AppletTrap
1.0


Supplier:

Trend Micro
Platforms:

Win NT
Description:

InterScan AppletTrap blocks malicious Java applets, JavaScript, and ActiveX objects that can steal, delete or modify information and compromise corporate security. It allows network administrators to centrally manage mobile code security in real time from a web proxy server with intelligent policy-based software.

AppletTrap automatically attaches special code to each applet that instructs the client as to acceptable or unacceptable behavior. These applets are "wrapped" to ensure that malicious code can do no damage. If malicious code is found, the "wrapped" applet is shut down, leaving the desktop unaffected. No software is installed on the desktop. All policy instructions are managed from the server.

AppletTrap provides three levels of security:

  • Certificate Verification - Java and ActiveX certificates are filtered and verified before being admitted through the gateway. The administrator may filter applets and objects by identifying the trusted partner sending the code or the certificating organization. Applications from trusted partners can be re-signed at the server with the company's own certificate.

  • Known Malicious Code Filter - Using a similar approach to traditional virus checking methods, AppletTrap compares code to known malicious pattern samples. AppletTrap can regularly update its malicious code list from Trend's website.

  • Unknown Applet Filter - Administrators may guard against unknown malicious applets by selecting from a list of pre-written policies or by customizing policies. AppletTrap shuts down any applet that breaks a policy, and its intelligent updating service automatically adds the applet's identifying patterns to the list of undesirable applets that are blocked from entering the network.
Features:

  1. Proxy server based, so needs only to be installed on one system - no client deployment required
  2. Known (static) code filtering at the server checks for signatures and certificates as well as against an updatable database
  3. Real-time (dynamic) code monitoring at the client ensures that malicious behavior results in termination of current Java thread
  4. Provides high security without significant impact on Internet traffic performance
  5. Uses Trend's patent-pending Instrumentation technology to monitor applet behavior in real time
  6. Newly detected malicious code automatically added to malicious applet database
  7. Lets you re-sign applets processed in the proxy server using your own 'private key' before being sent to clients
  8. Comprehensive system log records all key events as they occur
  9. Compatible with Netscape Navigator and Microsoft Internet Explorer
  10. Java-based, platform independent management console
Certification:

Price:

From $600 for 25 users
URL:

 

© Copyright Townsend & Taphouse, 1998-2002. All rights reserved.
Home   Products Section