Search DubaiPRNetwork.com

Home >> Technology

SonicWall Defends Businesses, Users from Memory-Based Attacks and Zero-Day Malware

Tuesday, April 10, 2018/ Editor -  

Share

Home >> Technology

SonicWall, the trusted security partner protecting more than 1 million networks worldwide, expands the capabilities of the patent-pending SonicWall Real-Time Deep Memory Inspection (RTDMITM) technology to enhance protection against malicious PDFs and Microsoft Office files. A key component of the SonicWall Capture Cloud Platform, the SonicWall Capture Advanced Threat Protection (ATP) sandbox service, using RTDMI technology, identified more than 3,500 never-before-seen attack variants since January 1, 2018.

“Cybercriminals are executing with extreme agility to exploit any and all vulnerabilities in both technology and user behavior,” said SonicWall President and CEO Bill Conner. “Memory regions are the next key battlegrounds where organizations will combat cybercriminals. If left unmitigated, they’ll leave a key attack vector vulnerable to new waves of modern cyberattacks.”

First announced in February 2018, RTDMI technology is used by the SonicWall Capture Cloud Platform to identify and mitigate even the most insidious cyber threats, including memory-based attacks. RTDMI proactively detects and blocks unknown mass-market malware — including malicious PDFs and attacks leveraging Microsoft Office documents — via deep memory inspection in real time.

“Attacks are leveraging sophisticated and proprietary encryption techniques to mask their attacks within memory,” said SonicWall CTO John Gmuender. “For this reason, organizations need to be proactive in identifying and mitigating attacks where weaponry only is exposed for up to 100 nanoseconds. More and more malware, ransomware and other advanced attacks will be delivered via this vector in the coming months and years.”

The 2018 SonicWall Cyber Threat Report advises that cybercriminals will continue to leverage users’ trust in PDFs and Microsoft Office applications (which represented five of the top 10 attacked applications of 2017). Because of obfuscation techniques, many legacy firewalls and anti-virus solutions are unable to effectively identify and mitigate PDFs or Microsoft Office file types that contain malicious content.

RTDMI is already operational for SonicWall customers with active subscriptions to SonicWall Capture ATP sandbox service and SonicWall Email Security solutions.

Capture ATP, RTDMI Stop Malicious PDFs, Office Documents

SonicWall RTDMI is a core multi-technology detection capability included in the SonicWall Capture ATP sandbox service. RTDMI identifies and blocks malware that may not exhibit any detectable malicious behavior or hides its weaponry via encryption.

By forcing malware to reveal its weaponry into memory, RTDMI proactively stops mass-market, zero-day threats and unknown malware accurately utilizing real-time, memory-based inspection techniques. RTDMI also analyzes documents dynamically via proprietary exploit detection technology, along with static inspection, to detect many malicious document categories, including:

Malicious Flash-based Microsoft Office documents
Dynamic Data Exchange-based (DDE) exploits and malware inside Microsoft Office files
Microsoft Office and PDF files containing malware or other malicious executables
Malevolent shellcode-based and multi-layer files
Macro-based malicious files
PDF documents with “JavaScript infectors”
JavaScript-based exploits in PDF documents
Malicious, phishing-based PDF documents leading to both phishing and malware hosting websites

Earlier this year, SonicWall Capture Labs threat researchers validated that the SonicWall RTDMI technology — specifically the technology’s real-time analysis of instruction and memory usage patterns — is effective against future exploits built on the Meltdown vulnerability.

Meltdown, a processor vulnerability publicly announced by Google’s Project Zero security team in January 2018, could allow an attacker to access sensitive information (e.g., passwords, emails, documents) inside protected memory regions on modern processors.

SonicWall Publishes Advanced Cyber Threat Data for SonicWall Customers and Partners

To further aid organizations’ pursuit of protecting their data, networks, customers and brand, SonicWall launched the SonicWall Security Center with all-new, real-time threat meters to provide actionable cyberattack data and threat intelligence.

The threat meters display ongoing attacks, as they happen, in locations around the world and maps them by origin. It tracks malware, intrusions, ransomware, encrypted threats, spam, phishing and emerging zero-day threats.

Complementing the research in the 2018 SonicWall Cyber Threat Report, the SonicWall Security Center threat meters rank threat volumes and trends month-over-month and year-over-year, so organizations can make better-informed security decisions.

The SonicWall Capture Cloud Platform identified more than 49,800 new attack variants in the first quarter of 2018, with the new SonicWall RTDMITM technology identifying 3,500 never-before-seen variants. In the first quarter of 2018 alone, the average SonicWall customer faced:

7,739 malware attacks, a year-over-year increase of 151 percent
173 ransomware attacks, a year-over-year increase of 226 percent
335 encrypted cyberattacks, a year-over-year increase of 430 percent
963 phishing attacks, a year-over-year increase of 15 percent

“Organizations are better prepared to protect their networks and data if they know the volume and specific cyberattack types they are up against,” said Conner. “SonicWall will continue to arm customers and partners with actionable, real-time threat intelligence to help mitigate advanced attacks in the fast-moving cyber arms race.”

The SonicWall Security Center gathers input from more than 1 million Capture Threat Network sensors worldwide, including active SonicWall firewalls, email security solutions, endpoint security devices, honeypots, content-filtering systems and multi‐engine Capture ATP sandbox environments.


Previous in Technology

Next in Technology


Home >> Technology Section

Latest Press Release

DLD Service Centres serve 39,000 investors with a total value of AED 131 billion

Sharjah and Indonesia hold discussions to review ways of boosting economic and t ...

Astrophysicists Measure Precise Rotation Pattern of Sun-like Stars for the First ...

Huawei Deepens Cooperation with Duisburg to Transform Germany's Industrial Hear ...

IYNC and the UAE Discuss the Way Forward for Global Nuclear Energy at IAEA Gener ...

High-octane inaugural Socca Football World Cup kicks off on September 23 in Lisb ...

Eberhard & Co. Scafograf 100 For Elegant Lady

The Mummies of Dubai Give Their Kids a Preppy Style Makeover

75 percent more speed and 58 percent more efficiency in Huawei's upcoming Mate 2 ...

du Wins Smart Cities Award at the Telecoms World Middle East 2018

Turkish Airlines reached the highest monthly Load Factor in August with 85.6% LF ...

O Boticário Opens in Dubai its First Amphora Store outside Brazil Come Join ...

Dubai Parks and Resorts Celebrates Saudi National Day

Gulf Centre for Aviation Studies hosts development course for students

FOREO To Attend TFWA: the World's Largest Travel Retail Show

Etihad Airways Deepens Ties Between Uae and Saudi Arabia to Mark National Day

Ericsson showcased SMME innovation at ITU Telecom World 2018

DigiCert, Gemalto and ISARA Partner to Ensure a Secure Future for the Internet o ...

Ministry of Human Resources and Emiratisation, Huawei and Honor launch ICT Compe ...

School children wish their favourite Unimoni Asia Cup 2018 teams good luck