Related Links

  • Sunbelt Software
  • Elsevier Ltd is not responsible for the content of external websites.

Related Stories

  • Sunbelt upgrades Vipre, CounterSpy
    Sunbelt Software has updated its products on all fronts, refreshing its anti-malware and anti-spyware software lines, in addition to its central control tools.
  • Malware threat reports fail to add up
    The December malware threat reports are trickling in from vendors — and they all appear to be different. Fortinet, Sunbelt Software, and Kaspersky all published their lists of the most prevalent malware strains for the last month of 2009, but they didn't match up, leading to an admission that users will inevitably be confused by the results.
  • Comment: Anti-Malware Automation Tools Save Time and Money
    IT budgets continue to be squeezed while malware challenges become more formidable each day. Matt Allen of Norman Data Defense Systems discusses how sandboxing technologies can deliver on cost-effectiveness and timeliness claims by doing high-volume malware analysis in a safe environment.
    Members' Content
  • Does Web 2.0 Need Security 2.0?
    With the proliferation of Web 2.0 services, security concerns have escalated. Davey Winder investigates how infosec vendors are addressing these challenges and wonders whether security 2.0 actually exists
    Members' Content
  • File Reputation Comes of Age
    Using reputation in the security field makes users safer. Danny Bradbury takes a look at file reputation technology, and finds that if carefully managed and skillfully honed, it can be a useful addition to a security suite
    Sponsored Content

News

Sunbelt Software updates Sandbox to tackle zero-day attacks

25 March 2010

Sunbelt Software has updated its Sandbox automated dynamic malware analysis utility to deal with the increasing problem of zero-day targeted internet attacks.

According to Sunbelt, Sandbox 3.0 uses behavior analysis technology to identify malicious threats such as Adobe PDF exploits, fake media players and other socially engineered attacks against enterprise or government networks.

Sunbelt says that the advanced offering is the direct result of research from Sunbelt Labs, its malware research and analysis division.

In use, Sandbox 3.0 is billed as allowing security analysts and incident response teams to analyze the behavior of suspected files by executing code inside a controlled and monitored environment. While executing the code, the software records all malicious activity, including system changes, network traffic and memory dumps.

Central to the software is its Digital Behavior Traits (DBT) technology, which Sunbelt claims will intelligently interpret the behavior of any file, document or website to automatically determine whether it is malicious.

This feature, the Sunbelt says, is critical in the effort to quickly discover new and emerging malware that has not yet been uncovered by traditional antivirus tools.

"Automated threat analysis is essential to organizations that are targeted by malware writers with brand new viruses that have not yet been categorized or cataloged by traditional antivirus solutions", said Chad Loeven, vice president of Sunbelt Labs.

Sandbox, he explained, gives users the ability to safely analyze virtually any Windows application or file, including infected documents, malicious URLs, custom applications and scripts in Flash ads.

It also gives researchers the ability to compare multiple data sources for differences and similarities, and to send malware samples to multiple sandbox configurations and centrally manage the process.

Unlike other malware analysis tools on the market today, Sunbelt says that Sandbox provides true automation to analyze in bulk and save crucial time.

By simulating the way in which a user would interact with a rogue application, Sandbox automates what is otherwise a manual process.

 

This article is featured in:
Data Loss Malware and Hardware Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.