Windows Network and Host-based Anti-Reconnaissance

By | February 15, 2006

Arxceo has announced an OEM licensing agreement with Port80 Software. Port80 Software will bundle the Ally ip100 and Ally IP1000 appliances, which mask TCP/IP network signatures from detection, with the company´s leading ServerMask software, a Microsoft IIS Web server module that obscures the identity of a Windows Web server from potential hackers at the HTTP level.

Together, the anti-reconnaissance market leaders will provide a complete solution designed to prevent attackers from accurately identifying a Windows network or Microsoft IIS Web server, the first, most crucial and often overlooked step in hacking.

Arxceo´s Ally ip100 and Ally IP1000 products leverage the company´s Tagged Universal Resource Information Transmission technology that uses a unique tagging methodology to add relevant information to each transmitted packet — such as source IP addresses, OS version and date/time stamps. This technology creates an “always-on” defense that prevents the stealthiest of attackers from using even a single packet to probe a network for vulnerabilities. Port80 Software´s ServerMask software modifies a Microsoft IIS Web server´s “fingerprint” by removing unnecessary HTTP response data, modifying cookie values and adjusting other response information to hide the identity of a Web site/application platform.

“By bundling Arxceo´s Ally appliances with our ServerMask solution, we are offering customers the true promise of anti-reconnaissance protection and server anonymization,” said Joseph Lima, COO of Port80 Software. “ServerMask has always obscured the identity of IIS Web server at the HTTP level, but TCP/IP masking at the origin Web server is impractical and not optimal for performance. By combining Arxceo´s Ally appliances with ServerMask software, small and large Windows networks will be camouflaged from their cracker adversaries. Combined with already-deployed firewalls and full IDS solutions, the new ServerMask origin server software/appliance approach will add a powerful, security-depth layer to any network, IIS Web site or application.”

“We believe that businesses and government organizations can truly benefit from the bundled anti-reconnaissance solution that will result from our new licensing agreement with Port80 Software,” said Don Davidson, Arxceo CEO. “Today, most successful Web attacks begin with probing and enumerating network and Web server information. This is why anti-reconnaissance approaches are critical in preventing attackers from penetrating computer systems and exploiting mission-critical or sensitive information.”

Leave a Reply