AppRadar 2.0 to be Released

Application Security Inc. today announced the release of their real-time intrusion detection and security auditing solution, AppRadar, version 2.0. This latest version, which is being showcased at the RSA Conference in San Francisco on Feb. 14-18, 2005, now supports Oracle and will be generally available in March of this year.

Ted Julian, VP of Marketing for Application Security Inc. states, "There are three forces driving the need to secure applications: the demand for pervasive access, insider threats and compliance. It is crucial that enterprises have a repeatable process to secure and audit applications (Gartner believes that more than 75% of attacks are now at the application layer) and databases.

In brief, the new features in version 2.0 include:

• Network-based sensor - Previous versions offered a host-based sensor for SQLServer. Version 2.0 adds a network-based sensor for Oracle.
• Built-in HIPPA and Sarbanes-Oxley (SOX) polices - The built-in SOX and HIPPA polices are based on best practices of customers and professional service provider partners and can be easily edited by the end-user.
• Wizard for custom rule creation - The wizards, which have been significantly enhanced to help build custom rules for both platforms, look for and alert on any user or system event.
• Native database auditing not required - Enterprises are not required to turn on native database auditing, resulting in improved performance.

Architectures for network IDSs are largely signature based, which means they are primarily focused on detecting known threats. AppRadar relies heavily on application level signatures, which focus on the database explicitly. Application Security Inc. achieved this by including in AppRadar the more than thousand checks and tests from its flagship AppDetective scanner vulnerability assessment scanner product. The two products work together to close the loop on application vulnerability management. AppDetective customers can fine-tune AppRadar's monitoring with AppDetective's inventory of database instances, including vulnerability details. This integration will be offered as Beta with AppRadar 2.0.

AppRadar provides the capability to create rules that look for specific activities, alerting on both users and activities. Because the product sits right on the database, it is not limited to flagging outsider threats but can also detect misuse on the part of a legitimate user.

Another major advancement with this release is that a network-based sensor has been added for Oracle. Previously the product had only a host-based sensor for SQL Server. Ted Julian, VP of Marketing for Application Security Inc. states, "Our philosophy going forward will be to build the right sensor for each platform."

The aforementioned AppRadar rule wizard can not only tighten security but also bolster regulatory requirements through the creation of specific rules to monitor sensitive columns in the database. Not only does this allow customers to establish controls on particularly sensitive and/or regulated data, but also track usage for auditing.

For additional information, please visit http://www.appsecinc.com/.