Free Newsletter
Register for our Free Newsletters
Access Control
Deutsche Zone (German Zone)
Education, Training and Professional Services
Government Programmes
Guarding, Equipment and Enforcement
Industrial Computing Security
IT Security
Physical Security
View All
Other Carouselweb publications
Carousel Web
Defense File
New Materials
Pro Health Zone
Pro Manufacturing Zone
Pro Security Zone
Web Lec
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor

Automatic Security Testing For Enterprise Users

Core Security Technologies : 24 June, 2010  (New Product)
Core Insight Enterprise has been released in Beta enabling continuous test and measurement of enterprise IT security systems
Core Security Technologies has announced the introduction of an entirely new solution, Core Insight Enterprise.

Built from the ground up to empower leadership to continuously test and measure their organizations' overall security standing in the face of real-world threats, Insight Enterprise allows IT security executives to gain greater visibility into their organizations' enterprise-wide security profile, to verify actual business risks, and to validate their protective controls.

Unlike existing security assessment and management solutions that use hypothetical models or simulations to estimate IT risks, or merely aggregate historic log data to detail events that have already transpired, Insight Enterprise utilizes the power of confirmed exploitability to demonstrate actual exposures, eliminating the potential for false positives and allowing organizations to proactively identify available paths to protected information spanning multiple layers of IT infrastructure - before incidents can occur.

By providing management with the ability to identify specific points of risk to critical business assets and filter through their mountains of security data, Insight Enterprise empowers IT, security and business leadership to finally answer to the question: "Are we more, or less, secure today than we were yesterday?"

"Core Security is uniquely positioned to address a significant gap in management's ability to understand where their greatest IT-based information risks currently reside, and to associate these threats with the critical business operations and electronic data that they need to protect most - all in real time," said Mark Hatton, CEO and president of Core Security.

"The introduction of Core Insight Enterprise represents the culmination of many years of highly focused research and development, as well as our deep experience delivering our solutions to over 1,000 customers worldwide. This is the arrival of an entirely new class of security testing and measurement solutions that finally allow organizations to understand their level of IT risk in a truly relevant, efficient and timely manner," Hatton said.

Beyond IT, security and business executives, Insight Enterprise provides operational security teams with benefits including:

* Distributed management capabilities and the ability to empower other non-security team members to perform safe, reliable testing.
* The ability to scale testing initiatives without having to hire costly consultants or dedicated, experienced professional testing staff.

'The 451 has long believed that IT security testing needed to evolve from a specialized skill set to a core enterprise competency. That's even more true now, as the enterprise security landscape shifts from protecting against indiscriminate attackers, worms and viruses to adaptive, persistent adversaries," said Paul F. Roberts, senior analyst, Enterprise Security at The 451 Group. "What have been lacking are tools that make meaningful testing accessible to a broader audience. Core's Insight Enterprise is a big step in that direction.'

Core Insight Enterprise helps organizations understand whether any of their critical business information is exposed to a security breach. Customers begin by defining which assets are important to their organizations, such as:

* Systems for financial transactions, operations controls, or other mission-critical functions.
* Databases housing sensitive information such as financial data, customer or patient records.
* Data formats such as credit card numbers, social security numbers, or employee ID numbers.

Insight Enterprise then automatically maps an organization's entire IT environment and searches for exploitable pathways to identify any critical information that is available. The product's many dashboards and reports categorize and present test results using terminology relevant to the customer's business, allowing IT security management to more easily communicate information risks to line of business leaders and other executives.

Insight Enterprise utilizes automated attack planning technology coupled with an exploit engine that makes use of Core Security's 15-plus years of penetration testing expertise to find any available avenues to critical data and assets, to filter data from other security solutions, and to allow organizations to trend security and compliance controls performance over time.

By replicating threats seeking to compromise defined business assets through web, network and client-side channels, the product's centralized dashboards and reports also track the efficacy of security controls in terms of relevant operational areas, such as specific business units or compliance mandates.

Each of the solutions' dashboard windows offers a unique, at-a-glance view of security posture, plus full drill-down capabilities for conducting further analysis and informing response efforts.

Effective today the Insight Enterprise Beta Program is available to select industry-leading organizations interested in implementing a prototype version of the security testing and measurement solution in appliance form. Beta participants will able to conduct full automated and continuous testing across their IT infrastructure and provide feedback to Core Security to further support production of the G/A version of the product, due to release near the end of 2010. The Beta program arrives on the heels of a highly successful and oversubscribed Alpha Program, which included organizations deploying an early release prototype appliance and running thousands of individual tests to provide input into development of the Beta version.
Bookmark and Share
Home I Editor's Blog I News by Zone I News by Date I News by Category I Special Reports I Directory I Events I Advertise I Submit Your News I About Us I Guides
   © 2012
Netgains Logo