Protect Yourself with SCIT

        Protect Yourself with SCIT        Hacker Rattles Security Circles        Sony Hacked Again

Businesses are increasingly vulnerable to security breaches.

The current reactive systems lead to many alerts and require extensive alert (incident) management costs. Furthermore, many of the alerts are false positives, and thus an extensive amount of effort is wasted.

SCIT technology is threat independent.  It reduces the impact of zero day attacks, thus providing protection while the manufacturer develops and distributes a patch.  In this way even the small retailer is protected – there maybe undetected intrusions but the losses are contained.  Further, SCIT servers do not generate alerts and this reduces the need for alert processing.  Without SCIT, effective alert processing is essential, to avoid the long term (days, weeks and months) residency of the bad guys in the system.  For this reason, SCIT servers reduce the cost of operations.

SCIT Benefits

Current servers are online for very long times.  This gives the attacker ample time to scan the server and understand the server vulnerabilities, thus increasing the likelihood of a successful attack.  On the other hand, SCIT servers are online for short periods (a few minutes), thereby reducing the time an attacker has to do damage.In effect SCIT strategy converts static servers into dynamic servers. In this way, the temporal dimension of security is emphasized. This has the added advantage of enabling the use of diversity principles.  Randomization of address space, application or operating system will increase the attacker difficulty.

The SCIT servers have the following advantages:

  • SCIT removes malware every minute without detection.
  • SCIT reduces data ex-filtration.
  • SCIT does not rely on signatures and is threat independent.
  • SCIT automatically recovers from defacement or software deletion attacks.
  • SCIT addition enhances the value of investment in legacy systems.
  • SCIT hot patches do not require online server reboot.
  • SCIT increases the security of virtualized systems.

SCIT’s ECommerce Demo Video

Video is available for download in .wmv formats and can be viewed in streaming video mode.

ECommerce SCIT demo video in wmv format is about 280 MB and can be downloaded from http://cs.gmu.edu/~asood/scit/SCIT-ECommerce-Demo.wmv.