MOUNTAIN VIEW, Calif. – March 23, 2010 – Symantec Corp. (Nasdaq: SYMC) today announced Web Security Monitoring, a new managed security services offering designed to help customers protect their end users and online Web presence from pervasive Web threats. Web Security Monitoring provides 24x7 monitoring and analysis of Web security technologies to protect organizations – enabling rapid reaction to threats to end users, Web presence and confidential data, identifying gaps in security controls to foster proactive security improvements and demonstrating compliance to internal policies and industry regulations.
The 2009 Symantec Global Internet Security Threat Report (ISTR) XIV reported that 63 percent of the 12,885 site specific vulnerabilities identified in the prior year alone affected Web applications. The 2009 ISTR also reported that Symantec identified 15,197 distinct new bot command-and-control servers with 43 percent operating through IRC channels and 57 percent using HTTP, demonstrating that bots are hiding their communications in Web traffic, making it nearly impossible to find them without Web monitoring techniques to ferret out the malicious traffic.
With the number and sophistication of Web-based threats escalating, organizations are fighting back with a layered security approach that leverages Web proxy, Web gateway and Web application firewall security technologies. While deployment of these Web security technologies undoubtedly helps to strengthen corporate defenses, the combination of real-time monitoring and notification from security analysts enables IT teams to quickly zero in on hard to find compromised systems and close gaps in their security controls.
“The Web has become the new threat vector of choice by hackers and cyber criminals to distribute malware and perpetrate identity theft, financial fraud and corporate espionage,” said Chris Christiansen, program vice president, Security Products and Service at IDC. “By including Web threat data into analysis, organizations receive a real-time panoramic view of security incidents via comprehensive correlation of security events and malicious Web event awareness.”
Web Security Monitoring Capabilities
Through Web Security Monitoring, Symantec synthesizes customer log data with a reliable source of up-to-date global threat intelligence and performs vigilant monitoring to help ensure optimal protection. Furthermore, the service monitors organizations’ proxy and gateway security devices for connections from hosts within their networks to sites suspected or known to contain malicious code and provides a daily summary report of this activity. If a policy violation or compromise occurs, the customer is notified immediately. This constant vigilance establishes an ‘early warning’ system and facilitates strengthening of policies and protective measures against the ever-present Web threat vector.
Symantec Web Security Monitoring fosters an ongoing, dynamic relationship between Symantec and its customers by giving them superior security coverage through correlation with existing network security protections, host and endpoint activity and real-time global threat intelligence. Web Security Monitoring provides the following capabilities:
- Extends security monitoring capabilities deeper into a clients Web based activities and Web presence
- Gives early awareness to potential malicious activity
- Provides advanced analysis powered by the extensive Symantec Global Intelligence Network
- Expands security monitoring coverage providing enterprise-wide security monitoring (from edge to endpoint including all threat vectors)
“As cyber criminals shift from targeting networks with high-volume spam and malware attacks to focusing more on stealth technologies, the Web is the new front line for the compromise of assets with the express goal of stealing confidential information,” said Grant Geyer, vice president of Symantec’s Global Managed Security Services. “The new Symantec Web Security Monitoring service gives customers the assurance that their endpoints and servers are protected from evolving Web-based threats.”
Symantec Web Security Monitoring service complements Symantec products and services designed to protect customers from the explosion of Web threats, including Symantec Web Gateway and Symantec Hosted Web Security. The combination of gateway devices, active monitoring and management, real-time threat intelligence and cloud-based Web security services delivers a comprehensive portfolio to protect against today’s Web threats.
Pricing and Availability
Symantec Web Security Monitoring service is now available globally. Subscription-based pricing is dependent on a per device basis, varying by expected device throughput.
About the Symantec Global Intelligence Network
The Symantec Global Intelligence Network maintains massive databases from data collected around the world to identify emerging threats, develop defenses and distribute solutions. This network captures worldwide security intelligence data that gives Symantec analysts unparalleled ability to identify, analyze, deliver protection and provide informed commentary on emerging trends in attacks, malicious code activity, phishing and spam. Symantec maintains 11 Security Response Centers and utilizes 240,000 attack sensors to track malicious activity.
About Symantec
Symantec is a global leader in providing security, storage and systems management solutions to help consumers and organizations secure and manage their information-driven world. Our software and services protect against more risks at more points, more completely and efficiently, enabling confidence wherever information is used or stored. More information is available at www.symantec.com.
