Archive for the ‘application security’ Category

Endpoint security is critical for millions of businesses around the world. What about yours?

Tuesday, July 7th, 2009 by clear-blue-security

What is endpoint security software?

Endpoint security software is a centrally-managed software system that protects end-user devices such as laptops, PC’s, Smart phones, PDA’s, POS terminals and more. Endpoint security systems are hosted on a server or gateway, and installed on every endpoint or user device that connects to the business network.

Why is endpoint security software important?

Today’s business environment has changed drastically over the last decade.  As businesses expand, they require more and more users to access their corporate network.  Employees, contractors, strategic partners and others consistently access network data via remote locations, LANs or wireless connections.  These types of access points create a windfall of potential entry points for security threats to infiltrate the network.  This makes it increasingly difficult for IT managers to protect the network from worms, Trojans, spyware and other malicious code that can threaten business continuity, compromise data, jeopardize productivity and require costly and time-consuming incident remediation.

Clear Blue Security™ monitors your company’s endpoint security status and lets you know how to solve any problems it detects using the following agents:

  • Unapproved Software: Ensure that all software applications installed on your computer networks are approved by your company’s security policy.
  • Suspicious Traffic: Detect abnormal traffic on your network that could indicate an attempt to access or manipulate your computers.
  • Intrusion Vulnerability: Identify open ports or other undesired access points that could put your network at risk of intrusion.
  • Malware Protection: Protect your network by ensuring antivirus and other endpoint security software are installed, updated and functioning properly on all computers.
  • Updates & Patches: Assure all critical security updates and patches are installed, with Microsoft’s minimum protection.
  • Security Practices: Ensure all your computers are configured and used in accordance with best practices for network security.
  • Clear Blue Agents: Monitor your endpoint security status and lets you know how to solve any problems it detects.
  • Virtual Security Assistant: Provide 24/7 security for your entire network at a fraction of the cost of human domain experts.

Protect your network today. Download your free trial of Clear Blue Security’s Endpoint Security software.

How important is Endpoint Security?

Tuesday, July 7th, 2009 by clear-blue-security

How important is Endpoint Security? A recent study shows that 100% of participating companies were infected with malware. What about yours?

A recent security threat assessment uncovered that active malware and threats reside undetected on corporate networks and endpoints on 100% of all participating companies from North America, Latin America, Europe and Asia Pacific. The participating companies average over 11,000 employees in industries like finance, healthcare, education, manufacturing and government.

The study, taking place between October 2008 and June 2009, performed over 100 assessments on enterprises worldwide and discovered that:

  • 100% were infected with active malware
  • 50% had at least one data-stealing malware hidden in their network
  • 45% had multiple data-stealing malware infections
  • 72% had at least 1 IRC bot
  • 50% had 4 or more IRC bots
  • 83% had at least 1 malware web download
  • 60% had more than 20 malware web downloads
  • 35% had at least 1 network worm

What caused these network security intrusions?  Without endpoint security solutions, network security intrusions are inevitable.  There are many ways for malware and other viruses to infiltrate corporate networks.  Here are a few examples:

  • Mobile users frequently log on and off the business network using devices that are already infected, compromising network security.
  • Businesses employ inadequate remote security solutions, lack onsite IT personnel, and fail to enforce security policies.
  • Employees use easily exploited technologies such as P2P, file sharing, streaming media and instant messaging.

Clear Blue Security™ monitors your company’s endpoint security status and lets you know how to solve any problems it detects using the following agents:

  • Unapproved Software: Ensure that all software applications installed on your computer networks are approved by your company’s security policy.
  • Suspicious Traffic: Detect abnormal traffic on your network that could indicate an attempt to access or manipulate your computers.
  • Intrusion Vulnerability: Identify open ports or other undesired access points that could put your network at risk of intrusion.
  • Malware Protection: Protect your network by ensuring antivirus and other endpoint security software are installed, updated and functioning properly on all computers.
  • Updates & Patches: Assure all critical security updates and patches are installed, with Microsoft’s minimum protection.
  • Security Practices: Ensure all your computers are configured and used in accordance with best practices for network security.
  • Clear Blue Agents: Monitor your endpoint security status and lets you know how to solve any problems it detects.
  • Virtual Security Assistant: Provide 24/7 security for your entire network at a fraction of the cost of human domain experts.

Protect your network today. Download your free trial of Clear Blue Security’s Endpoint Security software.

How does Clear Blue Security help ensure and maintain HIPAA Compliance?

Tuesday, June 30th, 2009 by clear-blue-security

Clear Blue Security is a comprehensive network security monitor that continuously detects and alerts vulnerabilities that could impact business continuity or result in data loss.

Using Clear Blue Security is considered an Audit Control under HIPAA Standard 164.312(b) and part of the Evaluation Process under HIPAA Standard 164.308(a)(8).

In a network where Clear Blue Security is running, the likelihood of detecting vulnerabilities is much higher, decreasing the risk of EPHI loss.

Clear Blue Security directly addresses the HIPAA Security Standards for Security Awareness and Training, Section 164.308(a)(5)(ii)(B).

Get Compliant, Stay Compliant

Clear Blue Security monitors your entire network, including laptops, 24 hours a day - 7 days a week. As a SaaS enabled product, Clear Blue Security constantly provides updated security best practices and policies to your network.

It also supports periodic audits by generating reports and information to validate compliance to policies and identify noncompliance issues prior to an audit.

Ensure and maintain HIPAA Compliance. Download your free trial of Clear Blue Security’s HIPAA Compliant Security software.

How does Clear Blue Security help ensure and maintain GLBA Compliance?

Tuesday, June 30th, 2009 by clear-blue-security

Clear Blue Security addresses the heart of GLBA compliance, monitoring and safeguarding client’s nonpublic personal information (social security numbers, credit information, etc.).

It also supports periodic audits by generating reports and information to validate compliance to corporate policies and identify noncompliance issues prior to an audit.

The GLBA safeguard rules require all financial institutions to complete a risk analysis on the current processes and security practices. From the risk analysis, a written information security plan must include:

  • Develop, monitor, and test a program to secure the information, and
  • Change the safeguards as needed with the changes in how information is collected, stored, and used

Clear Blue Security is a comprehensive network security monitor that continuously detects and alerts vulnerabilities that could impact business continuity or result in data loss.

In a network where Clear Blue Security is running, the likelihood of detecting vulnerabilities is much higher, decreasing the risk of losing clients nonpublic personal information.

Who is required to comply with GLBA? All financial institutions are required to comply with GLBA.

The Federal Trade Commission (FTC) has jurisdiction over financial institutions similar to, and including, these:

  • non-bank mortgage lenders
  • loan brokers
  • some financial or investment advisers
  • debt collectors
  • tax return preparers
  • banks
  • real estate settlement service providers

These companies must also be considered significantly engaged in the financial service or production that defines them as a “financial institution”.

Insurance has jurisdiction first by the state, provided the state law at minimum complies with the GLBA. State law can require greater compliance, but not less than what is otherwise required by the GLBA.

Get Compliant, Stay Compliant. Download your free trial of Clear Blue Security’s GLBA Compliant Security software.

Is your business network secure? Security spending stays strong in downturn.

Tuesday, June 23rd, 2009 by clear-blue-security

Are you investing in the long-term security of your business network?

Organizations are investing more in data security and privacy systems during the downturn.  The latest numbers suggest that spending on security software is running at a level 18.6% higher than one year ago.  According to Gartner Inc., worldwide security software sales hit $13.5 billion in 2008, compared with $11.3 billion in 2007.

Full story: Security spending stays strong in downturn

Clear Blue Security is the most comprehensive business network security, network monitoring and remediation tool available for small and medium-sized businesses.  Easy to install and use, it gives you an instantaneous picture of your entire IT security situation down to every on-the-go laptop.

Protect your data today. Download your free trial of Clear Blue Security’s PCI Compliant Security software.

Corporate IT Solutions | Open Source, Web 2.0 Gains Appeal as Budgets Shrink

Tuesday, June 23rd, 2009 by clear-blue-security

Open Source, Web 2.0 Security Solutions are IN.  Are you?

As the ongoing recession continues to choke IT capital spending, buying integrated software from big-name vendors is on the way out — fast. What’s in is “IT lite,” which includes Web 2.0 technologies and services that are cheaper and easier to implement, mix and match.

Full story: Corporate IT done ‘lite’: open source, Web 2.0 gain appeal as budgets shrink

Clear Blue Security™ is a revolutionary Software-As-A-Service based Computer Network Security Monitoring Assistant for small and medium sized companies. Our Virtual Security Assistant slashes network downtime while skyrocketing your productivity… letting you take all the credit for a well-managed network.

Get affordable corporate IT solutions today. Download your free trial of Clear Blue Security’s security software.

Is your business PCI Compliant? Weak security enables credit card hacks.

Tuesday, June 23rd, 2009 by clear-blue-security

Is your business PCI Compliant?

More than 70 retailers and payment processors have disclosed security breaches since 2006, involving tens of millions of credit and debit card numbers, according to the Privacy Rights Clearinghouse. Meanwhile, many others likely have been breached and didn’t detect it. Even the companies that had the payment industry’s top rating for computer security, a seal of approval known as PCI compliance, have fallen victim to huge heists.

Companies that are not PCI compliant — including 10% of medium-sized and large retailers in the United States — face fines but are free to process credit and debit card payments.

Full story:Weak security enables credit card hacks

Clear Blue Security addresses 5 of the critical PCI Compliance requirements. It also supports periodic audits by generating reports and information to validate compliance to corporate policies and identify noncompliance issues prior to an audit.  Find out how.

Protect your data today. Download your free trial of Clear Blue Security’s PCI Compliant Security software.

PCI Compliance Security Software | Clear Blue Security

Tuesday, June 23rd, 2009 by clear-blue-security

PCI compliance is critical for millions of businesses around the world.  What about yours?  And how does your network security provider help you to maintain PCI compliance?

Payment Card Industry (PCI) is a worldwide information security standard assembled by the Payment Card Industry Security Standards Council (PCI SSC). The standard, which is currently comprised of 12 guidelines, was created to help organizations that process card payments prevent credit card fraud through increased controls around data and its exposure to compromise.

The standard applies to all organizations which hold, process, or pass cardholder information from any card branded with the logo of one of the card brands, including shopping cart sites, e-commerce and retail merchants and other merchant services providers.

Clear Blue Security addresses 5 of the critical PCI Compliance requirements. We also support periodic audits by generating reports and information to validate compliance to corporate policies and identify noncompliance issues prior to an audit.  Here’s how:

Build and Maintain a Secure Network

Requirement 1: Install and maintain a firewall configuration to protect cardholder data

Requirement 2: Do not use vendor-supplied defaults for system passwords and other security parameters

Clear Blue security helps maintain the integrity of the firewall by scanning for open ports that create outside access to the network. As part of the applied security policy, Clear Blue Security identifies blank passwords and checks against 25 other security best practices.

Maintain a Vulnerability Management Program

Requirement 5: Use and regularly update anti-virus software

Requirement 6: Develop and maintain secure systems and applications

Regularly Monitor and Test Networks

Requirement 11: Regularly test security systems and processes

Clear Blue Security monitors your entire network, including laptops, 24 hours a day - 7 days a week. As a SaaS enabled product, Clear Blue Security constantly provides updated security best practices and policies to your network.

Protect your data today. Download your free trial of Clear Blue Security’s PCI Compliant Security software.

IT Security Breaches More Severe | Clear Blue Security

Tuesday, June 23rd, 2009 by clear-blue-security

IT security breaches have become more severe over the past 12 months — a time when most organizations have been under pressure to cut IT budgets. That’s not surprising as more mobile devices such as notebooks and smartphones make businesses more vulnerable and social networking sites pose new threats. Despite these budget cuts, IT professionals still rank security as a top priority, according to a new survey.

Full story: IT Security Breaches More Severe

Clear Blue Security is the most comprehensive IT security, network monitoring and remediation tool available for small and medium-sized businesses.  Easy to install and use, it gives you an instantaneous picture of your entire IT security situation down to every on-the-go laptop.

Protect your data today. Download your free trial of Clear Blue Security’s IT Security software.

Clear Blue Security Releases New Version of its IT Security Monitoring Solution

Saturday, June 20th, 2009 by clear-blue-security

On Tuesday, June 9, 2009, we released version 2.6 of our comprehensive network security, network monitoring and remediation tool for small and medium-sized businesses.

New Features
•    Suspicious Traffic Domain - Enhanced implementation of Suspicious Traffic domain implementation using rules by Sourcefire, a global leader in Intrusion Prevention Systems
•    Domain Policies - Policies can be created to specialize each domain according to security criteria specific to a customer network
•    Network Policy Groups - Specialized Policy Groups can be defined with a policy for each group
•    Printing - Improvements in printing behavior

You don’t have to do anything to upgrade!
Clear Blue Security is a SaaS – Software-as-a-Service – distributed solution. This means, the second we release an update you can start using the new and improved features to make your network even more secure.

Don’t be a stranger
We love feedback and are always interested in your opinion – may it be a feature request, questions or just to let us know how you use Clear Blue Security. So please don’t hesitate to contact us.

Protect your network today.
Learn more and download your free trial of Clear Blue Security’s latest IT Security software.