In this paper, the authors' explore the technical basis behind a virtual patch, also known as a virtual software patch, a function provided by high-performance Intrusion Prevention Systems (IPS). A virtual software patch is a powerful frontline defense against compromise that can be deployed in minutes to protect an entire organization. The virtual patch capability relies on a special type of IPS filter called a "vulnerability" or "vulnerability-based" filter. Vulnerability filters precisely block attempts to exploit a particular software flaw, while allowing non-attack traffic to pass unhindered.
Related white papers
Balancing Security Against Productivity
What makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...
Secure Desktop On-Demand Webcast
The desktop or endpoint is one of the most vulnerable parts of your environment. Threats are everywhere. You have users who love to experiment with device settings (only to wonder...
Novell Zenworks Endpoint Security Management: Total Control from a Single Console
Still super gluing your USB ports shut? Unauthorized access to networks, lost or stolen laptops and other mobile hardware, and theft of proprietary information or intellectual property accounted for more...
A Cryptanalysis of the High-Bandwidth Digital Content Protection System
This paper describes a weakness in the High Bandwidth Digital Content Protection (HDCP) scheme which may lead to practical attacks. HDCP is a proposed identity-based cryptosystem for use over the...
Aquarium Enhances Data Access, Security, and Productivity With New Operating System
The National Aquarium in Baltimore, one of the premier aquatic resources in the United States, presents 16,000 specimens in an award-winning 250,000-square-foot facility. Limited office space required some staffers to...
Energy Company Boosts Productivity, Enhances Security With Operating System
Oil and Natural Gas Corporation (ONGC) is the leading crude oil and natural gas producer in India. In order to simplify IT management, ONGC wanted to standardize its operating system...
Information Protection - Protecting Sensitive Data With Active Directory Rights Management Services in Windows Server 2008
As more and more of the world's information, commerce, and communications moves to digital form, it will open the door to a new world of connected experiences. Increasingly, people envision...

