Symantec's new ManHunt product is an advanced network-based IDS solution that provides protocol anomaly
detection for known and unknown or "zero day" attacks, signature detection with custom signature support, and behavioral anomaly analysis or statistical flow analysis intrusion detection for denial of service attacks, at speeds of up to 2 gigabits per second, dependent upon system configuration.
TippingPoint is also offering protection for VoIP in the form of Denial of Service attacks and VoIP protocol anomaly
Seaway's patented silicon technology delivers 10 times the performance of software-based solutions in part by offloading processing from software to hardware, enabling security appliance manufacturers to support multi-gigabit data rates and multiple simultaneous security applications including pattern recognition, protocol analysis, traffic anomaly detection and protocol anomaly
detection in a single system.
It uses multiple detection methods including signature detection, protocol anomaly
and traffic anomaly, resulting in a near zero rate of false alarms.
It remotely updates TippingPoint systems with new vulnerability filters, signatures, protocol anomaly
filters, and traffic anomaly filters to preemptively protect against the latest worms, viruses, Trojans, Denial of Service attacks, Spyware, and VoIP threats.
0, which offers increased threat prevention against HTTP POST attacks (see recent release: StoneGate[TM] IPS Detects and Blocks Attacks That Use New Evasion Techniques Announced by CERT/CC) through the use of regular expressions and protocol anomaly
Sentarus uses a combination of stateful signature, protocol anomaly
, traffic anomaly and other advanced detection methods to accurately identify real attacks, dropping the connection and responding to new attacks by complete packet denial.
UnityOne Intrusion Prevention Systems use statistical traffic anomaly and protocol anomaly
protection methods, and are also updated with the latest vulnerability protection through the Digital Vaccine service.
In addition to offering vulnerability-based protection, TippingPoint also offers protocol anomaly
and statistical anomaly-based protection so that it can block or throttle malicious behavior.
Unique features of Next Generation SynApps Architecture include: * Advanced health monitoring for application specific services such as VoiP; * Bandwidth management per client session enabling the control over bandwidth per subscriber while reducing bandwidth costs; * Up-to-date attack database supported by Radware's Security Update Service for immediate and ongoing security filter updates that protect against the latest application security threats; * Stateful inspection to protect all network traffic against application level attacks; * Real-time protocol anomaly
detection; * Syn flood protection providing security against unknown intrusions and Syn flood attacks
IntruGuard's solutions protect traffic at the ingress point of the attack from DDoS floods, and from protocol anomaly
attacks, port, network and dark address scans, and other unwarranted traffic based assaults.
Using distributed sensors, protocol anomaly
detection, and high-speed statistical analysis, ManHunt can identify known and novel attacks in real time-even on high-speed gigabit networks.