Simplicita and Sana Security Enable ISPs to Protect Consumers from Zero-Day Botnet Infections

DENVER--(BUSINESS WIRE)--CABLELABS WINTER CONFERENCE – Simplicita and Sana Security today announced a strategic partnership to supply Internet Service Providers (ISPs) with an automated system for protecting their subscribers from zero-day malware that eludes typical anti-virus products and hijacks PCs for use in botnets. As part of the alliance Sana Security’s Primary Response SafeConnect anti-malware detection, removal and reporting software will be integrated into the Simplicita ZBX zombie remediation system. Simplicita will demonstrate ZBX with Sana integration at the CableLabs Winter Conference 2007 at the Colorado Convention Center in Denver, March 4–7.

The Simplicita-Sana Security solution enables ISPs, without any manual intervention, to offer a botnet security service that instantly notifies consumers when their machines have been hijacked, removes the malicious software within minutes, and allows users to automatically resume their Internet services with ongoing protection. In addition, Sana will join Simplicita’s Reputation Data Partner (RDP) Program, which is designed to aggregate real-time feeds from the world’s leading providers of internet reputation data into the Simplicita ZBX.

Real-Time Zombie Detection and Notification

Many Internet users lack security software, are running un-patched operating systems, or fall prey to social engineering schemes, which make their computers easy to hijack. To make matters worse, botnet malware is constantly morphing and often bypasses and/or disables traditional security software before updated signatures are developed and distributed. Since bots operate in the background most infected users are unaware that their machines are remotely controlled by a bot master. Simplicita ZBX detects botnet PCs by aggregating and correlating internal data on an ISP’s network (from network deep packet inspection devices, application and server logs, and complaint feedback loops) as well as external reputation data feeds from Cloudmark, Habeas, Sana, Shadowserver, Sophos and others. Once a bot becomes active and attempts to use the Internet, ZBX switches the computer into a walled garden quarantine. Here the subscriber is notified that their PC is infected and provided with tools, information, and support services to remove unwanted malware.

Free Trial and Instant Protection

Through the Simplicita-Sana Security partnership, ISPs are now able to present subscribers placed in the walled garden quarantine with a 15-day trial of Sana Security Primary Response SafeConnect anti-malware software which instantly removes malware from the infected machine without the delay involved in scanning the hard disk. When a subscriber downloads and installs Primary Response SafeConnect it immediately begins monitoring all system processes to identify behaviors that indicate malicious code is attempting to run on the system. The subscriber is notified and can then direct Primary Response SafeConnect to remove the malware from their system. Once the PC has been disinfected, the subscriber is automatically switched back onto the carrier’s network and regains access to all Internet access services. Primary Response SafeConnect continues to protect the subscriber’s machine from future infections.

“Botnet infection notification and clean-up services are emerging as requirements for service providers, much in the same way consumers now expect their ISPs to block spam,” said Danny Winokur, vice president of business development for Simplicita. “The Simplicita-Sana Security solution enables carriers to cost-effectively offer their subscribers instant alert and remediation capabilities that can disinfect a PC and re-establish Internet service within minutes, while providing ongoing protection.”

”This month alone Trojans used by botnets made up 41% of all Internet traffic, and 35% of these were of the polymorphic variety which are undetectable by traditional anti-virus programs,” said Timothy Eades, senior vice president of sales and marketing for Sana Security, “Primary Response SafeConnect does not rely on signatures, so it can detect and remove botnet malware that eludes anti-virus products – allowing subscribers quarantined by Simplicita ZBX to quickly clean their machines, get back online, and protect themselves against future attacks.”

About Simplicita ZBX

ZBX is a network-based solution that enables broadband ISPs to offer subscribers botnet protection and remediation services. It performs unattended discovery and quarantine of zombie computers, presents subscribers with self-disinfection tools and resources, and restores a subscriber’s Internet service once the malware has been removed. Unlike conventional solutions that simply block zombie traffic, ZBX uproots bot-controlled machines that violate ISP acceptable use policies (AUP) and protects end users by detecting and removing malware that is hiding on their PCs.

About Sana Security Primary Response SafeConnect

Primary Response SafeConnect delivers a whole new approach to anti-malware software for PCs. This security software provides instant and constant protection against known and unknown threats, including Trojans, spyware, adware and rootkits. Advanced behavioral technology detects and removes malicious software attacks as they occur, eliminating the need for scanning and signature updates. As a result Primary Response SafeConnect delivers a higher level of protection that is not only more user-oriented but is also more effective and reliable.

Pricing and Availability

Simplicita ZBX with Sana Security’s Primary Response SafeConnect is available immediately from Simplicita and its business partners worldwide. Simplicita ZBX pricing is calculated per subscriber, with options based on either remediated subscribers only or all subscribers on an ISP’s network. End users can upgrade their free trials of Primary Response SafeConnect to 1-year licenses for $29.95. Simplicita ZBX supports Solaris 10 on Sparc or x86, and Redhat Enterprise v4 on x86. Primary Response SafeConnect supports Microsoft Windows operating systems.

About Simplicita

Simplicita develops subscriber mediation software that dynamically shapes the experience of Internet users to protect them from predatory malware and websites, while helping service providers increase average revenue per user (ARPU) with new sources of income. Using the Simplicita subscriber mediation platform, a service provider can deliver new applications for subscriber safety, service enablement, and customer care. The company’s management team has built Internet infrastructure businesses acquired by Software.com, Excite, and Verio. For more information, visit www.simplicita.com.

About Sana Security

Sana Security creates award-winning security software that is autonomous, aware of environment change, adaptive to new threats and active in preventing attacks before they do harm. Sana Security provides software that protects what others can’t protect or see, providing immunity against threats, both known and unknown. Unlike reactive, legacy solutions that require updates, signatures and scanning, Sana’s products offer enterprises, small businesses and consumers instant and constant protection against threats, increasingly complex attacks, data compromise and identity theft. Sana Security's suite of centrally managed, standalone and on demand products drives innovation in anti-malware solutions. Sana Security, together with its research organization Sana Labs, is headquartered in Silicon Valley, California with offices in global business and technology centers. For more information, visit http://www.sanasecurity.com or contact the company by phone at 650.292.7100.