New protection from top 20 internet security attack targets

As you may know, October was Cyber Security Awareness Month. Although over 70% of network attacks are Web-based, most businesses either think they have adequate firewall security, or fear that the steps they would need to take to make their networks truly impenetrable are far too costly.

In the coming weeks, Port80 Software ( www.port80software.com ), a leading developer of enhancements for Microsoft IIS Web servers, will be releasing ServerDefender VP (Vulnerability Protection), a new Web application firewall which protects the application layer (ASPX, PHP, CFM, JSP, etc.) and databases from Web-based attacks, protecting a company’s network.

"Companies pay way too much for services to get comprehensive network security, or for a security solution that does not get the full HTTP/HTTPS picture that only a Web server can see, and thus are not as effective," says Chris Neppes of Port80 Software.

ServerDefender addresses attacks such as SQL Injection, cross-site scripting (XSS) and request forgery (CSRF), directory traversal, zero-day, brute force, denial of service, privilege escalation and other serious Web applications network assaults. In fact, ServerDefender protects networks from the top 20 Internet Security Attack targets listed by SANS: http://www.sans.org/top20/

Some of unique benefit of ServerDefender VP are:

· There is no reliance on signatures; instead, it applies best practices to sanitize inputs to a site and to capture error responses from the application layer.

· This new product offers both audit survivability and adherence to the PCI government data requirements.

· Finally, this product is an entry-level server security product (~$350 per server), enabling companies to avoid having to pay thousands of dollars to security consultants by incorporating security best practices automatically.