15
Jul
09

Facebook Spammers Charged

(WEB HOST INDUSTRY REVIEW) — A longtime spammer may potentially serve jail time in relation to a Facebook lawsuit after a California judge ordered him to appear in front of the US Attorney General’s Office for criminal proceedings.

The case follows another Facebook spamming case last November, when the company won a $873 million ruling against a Montreal spammer that flooded members’ inboxes with sexually explicit messages.

Judge Jeremy Fogel of the US District Court for the Northern District of California referred Sanford Wallace to the US Attorney General’s Office to undergo criminal proceedings for allegedly violating a court order that prevented him from accessing Facebook.

In February, Facebook filed a lawsuit against Wallace, Adam Arzoomanian and Scott Shaw for allegedly spamming and phishing the website.

The three men were issued a temporary restraining order prohibiting them from accessing Facebook’s network.

Facebook released this statement via company spokesman Barry Schnitt addressing the ruling:

“We see Fogel’s ruling as a strong deterrent against spammers. Spammers feel that they are immune from criminal prosecution. Fogel’s ruling demonstrates that judges will enforce restraining orders and spammers who violate them will face criminal prosecution.”

The ruling on the social network community’s civil lawsuit against Wallace stalled after the defendent filed for bankruptcy.

Wallace has had a long history of spamming that dates back to the 1990s.

He started his spamming career with fax spamming, where he sent out thousands of unsolicited offers for timeshares, insurance policies, and foreclosed real estate deals to fax machines.

Last May, a federal judge ruled in favor of MySpace after Wallace and another defendent failed to show up to a hearing.

The two men were ordered to pay $230 million for phishing and spamming MySpace users with links to gambling and pornography websites.

23
Apr
09

Internet Security Trends – Conficker Worm Expected to Influence Rise in Spam

Internet Security Trends – Conficker Worm Expected to Influence Rise in Spam

As a provider of messaging and Web security technology, Commtouch released their most current quarterly “Internet Threat Trends” report last week. The report forecasts how computers infected by the Conficker worm could cause a meaningful rise in spam levels during the next quarter. Analysts report that around 15 million computers on a global scale have already been infected by multiple versions of the worm to date.

Here are the Q1 highlights at a glance:
• The Conficker worm infected more than 15 million computers since its first appearance last Fall.
• Loan spam jumped to the top of the list of top spam topics, with 28% this quarter.
• Users of social networking sites fell victim to new, more complex phishing attacks.
• Computers/Technology sites and Search engines/Portals are among the top 10 Web site categories infected with malware and/or manipulated by phishing.
• Brazil continues to lead in zombie computer activity, producing nearly 14% of zombies for the quarter.
• Spam levels averaged 72% of all email traffic throughout the quarter and peaked at 96% in early January. It then bottomed out at 65% in February.
• Spammers attacked large groups of an ISP’s users and moved to the next ISP in a targeted spam outbreak.
• An average of 302,000 zombies were activated each day for the purpose of malicious activity.
Download the full in depth report here.

Source: Commtouch

18
Nov
08

Spam source taken off line

Fighting spam just got a little easier

Monday, November 17, 2008 at 1:46 PM
Last week, a web hosting service that was a significant source of spam was taken offline by the combined efforts of Security Fix and several Internet providers. Google would like to congratulate Security Fix for leading this effort and striking another blow in the battle to stamp out spam on the web. The removal of this service helps “clean up” the web for everyone, and dovetails with efforts like Google’s to make web communications safer and more secure in all of the ways that people use it.

We’ll continue to monitor spam traffic, as we always do, but here’s what we’ve seen in the past few days:

On November 11, when the spam source was taken down, we saw a 70% drop in spam from levels seen at the beginning of the month. However, we’ve seen drops like this before. In late July this year there was a similar drop that was reversed within a few days.

Gmail servers, which also noticed a drop in spam on November 11, are now showing an upward trend as new sources of spam, as always, continue to emerge.
The team at Google stays “on guard” as the fight continues!

Posted by Amanda Kleha, Google Security and Compliance Team

http://googleenterprise.blogspot.com/2008/11/fighting-spam-just-got-little-easier.html

Aggregation: ParagonHost http://www.ParagonHost.com

24
Oct
08

What is SaaS?

What is SaaS?

Software-as-a-Service is the provision of a multi-tenant application over the Internet. The SaaS vendor provides a redundant, scaled, distributed architecture and the customer does not pay for the software itself, but rather for using it, with access to the application being via a Web browser.

What areas of infrastructure are organizations choosing SaaS for?

One of the most popular applications to deliver via SaaS has been Web security. SaaS Web security is based on a recurring subscription fee and the cost is directly aligned to the number of users. All of the usual costs associated with maintaining Web security software such as content filters, along with the infrastructure on which it resides, training, security updates etc. are assumed by the SaaS Web Security vendor in exchange for the recurring service fee.

Who are the market leaders in SaaS Web security?

ScanSafe are the market leaders in the provision of SaaS Web security with 40% of the market (IDC). ScanSafe pioneered the SaaS Web security market and have the largest Web dataset in the industry.

I use content filtering – isn’t this enough?

No. This software was originally designed to safeguard web productivity not security. Despite many vendors repositioning themselves the essential flaw remains – “URL filtering suffers a fundamental flaw to be an effective security filter: it does not monitor threats in real-time.”*

In order to protect themselves from zero hour threats and polymorphic malware, organizations need their Web security to provide real-time filtering of all Web content.

Surely SaaS Web security will cause latency for my users?

The ScanSafe network has been designed specifically for Web traffic resulting in zero latency. Performance is independently monitored for uptime and speed of scanning.

How does it work?

Simple and flexible deployment is made possible by ScanSafe proprietary connector technology. It can take you as little as one hour to route your traffic through their scanning infrastructure.

What about mobile users?

ScanSafe Anywhere+ is the world’s first SaaS to allow organizations to protect their mobile employees wherever they are working – at home, at a client office, in an airport lounge or a hotel hotspot.

Is it easy to manage?

ScanCenter, ScanSafe’s Web-based management portal, allows you to administer, monitor and control performance in real-time, no matter where you are. All services are supported 24×7 by a team of dedicated network and support experts.

SaaS is fine for SMB’s but I heard it doesn’t scale well?

SaaS Web security is infinitely scalable, allowing you to add new users instantly at fixed cost. Resiliency is built in, saving you the costs of planned or unplanned downtime.

SaaS is usually too expensive over time isn’t it?

No. With no hardware or software to maintain or update, ScanSafe SaaS Web security allows your valuable IT resource to focus on projects that add to your bottom line. Our customers typically experience a 30-40% reduction in TCO. The service is delivered at a fixed annual cost which allows confident IT budgeting. The latest Web threat is impossible to predict, but your costs needn’t be.

20
Oct
08

Stopping malware in it’s tracks!

Malicious software helps attackers infiltrate network and system defenses, disrupt business operations, and funnel sensitive data out of corporate and personal computers. Unfortunately, there is no single-step fix to preventing and even detecting infections. Stopping malware requires an approach grounded in awareness and control.

Be attuned to the state of your network and systems
Malicious software, such as bots and spyware, often goes unnoticed for far too long. Well-crafted malware can avoid being detected by antivirus software and intrusion detection systems. The first line of defense against such a formidable foe is to become familiar with the normal state of your IT infrastructure, and monitor it to detect anomalies.

Establishing and maintaining IT infrastructure awareness means committing to the following steps:

Centrally manage logs from systems and network devices across the enterprise to detect anomalous events. Even an operational incident, such as a surge in CPU load on a server, could have security implications; the increased load could be attributed to malware on that system. Logs can be aggregated without commercial tools via Syslog, which runs natively on Unix and has been ported to Windows. Without a central monitoring point, your perspective on the infrastructure will be severely obstructed.
Deploy intrusion detection sensors at key points on the network. Host-based sensors on key servers also help. However, maintaining host intrusion detection systems (IDS) tends to be more burdensome than managing network IDS. Even though a traditional IDS may not block infections, it will offer additional visibility into the environment. Snort is widely considered the king of free network IDS tools. For a free multi-platform host IDS, take a look at OSSEC.
Monitor outbound network traffic to detect infected systems that seek instructions or leak data to their masters. You can tune a network IDS sensor to scrutinize outbound traffic, or employ traditional network monitoring tools for this purpose. (I have had a lot of luck with free Argus Open Project software.) The quicker a compromise is detected, the faster it can be contained. To learn more about detecting unauthorized activities in outbound traffic, see the book Extrusion Detection by Richard Bejtlich.
Detect unauthorized changes to the state of your systems. Although some malware resides purely in memory of the infected system, many infections leave footprints on the file system or registry. Some host IDS can detect such changes to the system’s integrity. Free tools dedicated to accomplishing this include AIDE, cfengine, and the open source version of Tripwire.
Trap malware with honeypots
Honepots combine the best aspects of detective and preventative technologies in the fight against malware. Honeypots are systems specifically deployed to be compromised. While the development of commercial honeypots seems to have lost steam, there is a plethora of innovative and freely available honeypot technologies. When carefully deployed, they can strengthen an enterprise’s defensive posture in several ways:

Slow down an intruder’s progress by having him waste time breaking into a system that offers no value to the attacker. For instance, the free LaBrea tool stalls port scans and worm propagation activities by creatively responding to an attacker’s network connections.
Decrease the rate of false positives, which often plagues network IDS. Since a honeypot, by definition, should not participate in production activities, almost any connection to it is an indication of malice. A free tool Honeyd emulates servers, devices, and even networks to increase the span of such monitoring without requiring multiple physical systems.
Capture malware samples for analysis. Since malware is a part of most modern intrusions, capturing it before it finds its way to a production system assists in incident response. One of the free tools that can assist in this task is Nepenthes, which can capture malicious software propagating over the network. With copies of malicious samples at hand, they can be analyzed to understand their capabilities. (Coincidentally, I teach a SANS Institute course about this.)
Understand the intruder’s intentions by observing his interactions with the compromised environment. This can be accomplished by deploying a series of honeypots to fool the intruder, whether a human or a program, about the authenticity of the targeted system. The bootable Honeywall disk, distributed for free by the Honeynet Project, can help enable this, and includes excellent monitoring tools.
Determine whether your users visited malicious websites by employing a client-side honeypot that crawls and examines Web pages. Drive-by downloads, which exploit vulnerabilities through the Web browser, are a common infection technique. Consistently blocking this threat vector may be hard, but you can still detect the incident quickly. If your organization has a mechanism, such as a proxy server, that records visited URLs, you can use the free Caffeine Monkey tool from SecureWorks to automatically examine those sites for Web exploits.
The most challenging aspect of using honeypots is deploying them in a manner that prevents an intruder from using them as a launching pad for attacks. If your organization chooses to experiment with honeypots, be sure to implement the safeguards outlined in each tool’s documentation. For an overview of honeypots and deployment scenarios, see the book Virtual Honeypots by Niels Provos and Thorsten Holz.

Protect the endpoint from malware threats
Alas, despite information security’s best efforts, malicious software may bypass network defenses and reach a system you’re trying to protect. Personal computers are particularly vulnerable, because PCs are often used in unpredictable ways and places. Here are the techniques that can help lock down laptops and desktops:

Employ antimalware tools with behavior-blocking capabilities. Traditional signature-based antivirus techniques are no longer sufficient. Modern security suites from the familiar antivirus vendors can observe local executables for behavior that characterizes malicious software, such as attempting to monitor keystrokes or writing to certain registry locations. This helps detect malware that evades signature detection and block its actions. However, before enabling such tools across the enterprise, be sure to confirm they do not interfere with regular business activities.
Look out for rootkits. Though far from being a novelty, only recently have rootkits found their way into “mainstream” malware. Rootkits’ stealthy capabilities make it particularly difficult to detect an infection. Fortunately, antimalware products are becoming better about detecting rootkit-concealed malware. They do so mostly by identifying inconsistencies in the way different OS components describe the system’s state. Free stand-alone rootkit scanners include GMER, Microsoft RootkitRevealer, and Sophos Anti-Rootkit.
Protect browsing activities to anticipate drive-by downloads and other browser exploitation techniques. Hardening the browser may involve creating a protective sandbox around it with a tool such as Sandboxie (it’s free). It also helps to run the browser with fewer privileges; that’s where Vista’s built-in User Account Control (UAC) and free tools such as DropMyRights can help. Don’t forget to disable unnecessary browser features and components; you can exercise fine-grained control over Internet Explorer with the help of Windows Group Policy.
Keep up with security patches. Information security pros are getting better at keeping up with security updates for Microsoft products, but knowing when and how to patch third-party software, such as Acrobat Reader and Java Runtime, is more challenging. Free tools that detect missing patches for third-party software include F-Secure Health Check and Secunia Software Inspector.
Lock down the workstation. Last, but not least, is the need to harden the core OS on the endpoint. This involves disabling unnecessary OS components; Group Policy is very helpful for this. It can be used to restrict which applications may run via its Software Restriction Policy feature. A free stand-alone tool that can limit which executables may run is Trust-No-Exe from Beyond Logic.
A comprehensive security program is a must
As your organization considers its antimalware strategy, remember that there is no quick fix to this growing threat. Effective approaches incorporate detective and preventative controls that create multiple defensive layers. There are products, both commercial offerings and free tools, to help you along the way. These tools are only as effective as the overall security program that they are a part of.

About the author:
Lenny Zeltser is the New York security consulting leader at Savvis Inc. He is also a senior faculty member at SANS Institute, where he teaches a course on reverse-engineering malware.

13
Oct
08

Most-Reported Threats for September 2008

Rogue Security Apps Strike Again on Fortinet’s Most-Reported Threats for September 2008

Represents More Than 60 Percent of Month’s Malware Activity

SUNNYVALE, Calif. – Oct. 1, 2008 – Fortinet® – the pioneer and leading provider of unified threat management (UTM) solutions – today announced the top 10 most reported high-risk threats for September 2008. For the second consecutive month, rogue security applications have dominated cyberspace – this time with a vengeance – making up 61.5 percent of total activity for September. Most notable is a six-day period between September 9 and 15, when W32/Inject.GZW!tr.bdr – the most prolific variant of the rogue security Trojans – launched an all-out campaign with volumes not before observed by Fortinet researchers. Only the Storm botnet attacks in January/February 2007 came even close to the volume generated by W32/Inject.GZW!tr.bdr this past month.

Not surprisingly, with rogue security malware claiming the top four positions in this month’s Top 10 list, it also propelled the RogueSecurity family into the No. 1 position among malware family activities for the entire month. As they were in last month’s report, AntiVirus XP 2008 (55.5%) and XP Security Center (6%) were the two main applications that fronted the security scams in September.

“When we see unprecedented volume, as in the case of these rogue security applications, it usually indicates that the attacks are working and cybercriminals are trying to act fast to take full advantage of the situation. It also shows the depth of resources available to this criminal organization,” said Derek Manky, security researcher for Fortinet. “In order to not fall into these traps, consumers should ensure that the source of their security application purchases are legitimate. Consumers should look out for unsolicited system messages which typically claim to find hundreds of infections, followed by purchase requests to cleanse.”

Fortinet’s FortiGuard® Global Security Research Team compiled this report based on intelligence gathered from FortiGate® multi-threat security systems in production worldwide. Customers who use Fortinet’s FortiGuard Subscription Services are already protected against the threats outlined in this report.

Other malware trends observed during this period include the following:

Virut.A, a virus that infects executable files, remains strong, coming in seventh spot and bumped out of the top five for the fist time in seven months;
Goldun.AXT, a new Trojan keylogger, generated heavy volume to claim the sixth position;
Crypt.MV, part of the Pushdo family, clinches the final tenth spot.

Following are the Top Ten individual threats and Top Five threat families in September. Top 100 shifts indicate positional changes compared to August’s Top 100 ranking, with “new” representing the malware’s debut in the Top 100.

Top Ten Individual Threats
Rank Threat Name Threat Type % of Detections Top 100 Shift
1 W32/Inject.GZW!tr.bdr Trojan 38.1 new
2 W32/Inject.GZV!tr.bdr Trojan 6.7 new
3 W32/Multidr.JD!tr Trojan 4.3 -2
4 W32/Delf.BFC!tr.dldr Trojan 3.6 new
5 W32/Netsky!similar Mass Mailer 2.2 -2
6 W32/Goldun.AXT!tr.spy Trojan 2.1 new
7 W32/Virut.A Virus 2.0 -2
8 HTML/Iframe_CID!exploit Exploit 2.0 +1
9 W32/Dloader.BQY!tr Trojan 2.0 new
10 W32/Crypt.MV!tr Trojan 1.6 new

Top Five Families
Rank Malware Family Percentage Top 10 Shift
1 RogueSecurity 61.5 new
2 Netsky 3.5 -1
3 Goldun 3.5 new
4 Virut 2.5 -
5 OnlineGames 2.0 -3

To read the full September report, please visit: http://www.fortiguardcenter.com/reports/roundup_sep_2008.html. For ongoing threat research, bookmark the FortiGuard Center (http://www.fortiguardcenter.com/) or add it to your RSS feed by going to http://www.fortinet.com/FortiGuardCenter/rss/index.html. To learn more about FortiGuard Subscription Services, visit http://www.fortinet.com/products/fortiguard.html.

FortiGuard Subscription Services offer broad security solutions including antivirus, intrusion prevention, Web content filtering and anti-spam capabilities. These services help enable protection against threats on both application and network layers. FortiGuard Services are updated by the FortiGuard Global Security Research Team, which enables Fortinet to deliver a combination of multi-layered security intelligence and zero-day protection from new and emerging threats. These updates are delivered to all FortiGate, FortiMail™ and FortiClient™ products.

About Fortinet (www.fortinet.com)
Fortinet is the pioneer and leading provider of ASIC-accelerated unified threat management, or UTM, security systems, which are used by enterprises and service providers to increase their security while reducing total operating costs. Fortinet solutions were built from the ground up to integrate multiple levels of security protection–including firewall, antivirus, intrusion prevention, VPN, spyware prevention and antispam — designed to help customers protect against network and content level threats. Leveraging a custom ASIC and unified interface, Fortinet solutions offer advanced security functionality that scales from remote office to chassis-based solutions with integrated management and reporting. Fortinet solutions have won multiple awards around the world and are the only security products that are certified in six programs by ICSA Labs: Firewall, Antivirus, IPSec VPN, SSL VPN, Network IPS, and Antispam. Fortinet is privately held and based in Sunnyvale, California.

10
Oct
08

Spammers Using Automated Systems To Their Advantage, Again

Spammers Using Automated Systems To Their Advantage, Again

Font size: GW_Staff 06 October, 2008 03:00:00
New York, NY (Gawkwire.com) EnableTS, a global provider of email management platforms to Service Providers, sees a new trend in Spam attacks which has been growing over recent months and has now exploded during the last quarter. Spammers are targeting the ‘falsepositive@’ addresses for anti-spam vendors in a bid to be automatically increase the trust rating of spam. Today, EnableTS spoke out against Vendors who rely on quota based listing systems that work in favour of the spammers.

Anti-spam providers who operate unintelligent automated reporting systems have been hit hard by the spammers that generate the ‘falsepositive@’ spam. By sending 100’000s of spam emails to the’falsepositive@’ email address of the anti-spam vendor, before blasting users of the service with spam, spammers are able to fool the automatic learning system into thinking the email is actually a falsely represented spam email.

Mike Harrison, Analyst at EnableTS commented “EnableTS is proud to be building 3rd Generation Platforms for Providers which have much more built-in intelligence than the traditional hosted platforms”. He lambasted what he called 2nd generation products with these words “there are many 2nd generation Hosted Platforms out there still that are really working for the spammers by using these unintelligent automated quota based systems. I call on vendors to step up to the mark and take these threats seriously”.

EnableTS has seen the volume of mail that spammers are sending to ‘falsepositive@’ increase 25 fold during the last quarter through the EnableTS Platform which is deployed at ISPs and Hosted Mail Providers globally. The threat that an ever increasing volume of spam has on the infrastructure of the Internet as well as to individual users is huge over the coming years. The proliferation of highly effective botnet applications that are delivered by email is something that Hosted Providers are having to take action against.

Over the past twelve months, the email security landscape has changed and the level of the threat increased. The desktop is locked down to a degree, but with security loopholes appearing monthly in browsers, operating systems and Plug-ins leave back doors open. Sys Admins need to stop as much as possible getting through the door – this applies both to Service Providers as well as the Enterprise. With the EnableTS Platform, the intelligence built into the system does not allow this kind of quota based automation and, moreover, will protect the Service Provider by dropping the connection where possible, rather than accepting the mail into the DataCenter for analysis which often is a vulnerable process.

(TSB) The Spam Busters provides free features to combat these issues with their “no hassel” spam free filtering service – Just just 1.95 per email , contact TSB at http://www.ParagonHost.com

08
Nov
07

Layered Security Approach – ScanDefense, ParagonHost.com

Layered Security Approach Helps Small Businesses Protect Information – Overview

As most seasoned mountain climbers know, the key to keeping warm in subzero temperatures is to put multiple layers of insulation between themselves and Mother Nature.

To help protect your company’s data, you should take cues from the climbers. Instead of looking for a magic formula, you should approach data security from the perspective of layers or building blocks. Each safeguard you can place between malicious online threats and your company’s data will provide another layer of security for the lifeblood of your business: information. The layers – or building blocks – that all small businesses should consider are: Physical security
User security
System security
Network security

Following are some key considerations for these building blocks.

Building Block 1: Physical Security

When a notebook turns up missing, a desktop is stolen or a handheld is lost, the information stored on the devices goes right along with it. For many small businesses, the cost of losing that data can be far more devastating than the replacement costs of the devices. Small businesses whose employees spend most of their time out of the office, where wireless devices are more vulnerable to loss or theft, can be especially impacted and should be sure to have a protection plan as it relates to physical security.

Physical security includes cable locks and asset tagging, as well as recovery services (such as ComputraceComplete1 from Absolute Software) that are designed to protect your PCs and the data they contain from theft and unauthorized access. Products like those offered by Computrace also can help you remotely track PC configurations and usage.

Building Block 2: User Security

As a small business owner, you should consider your company’s data in much the same way you consider your personal property: You have things you don’t mind sharing with people you know and other stuff that nobody touches but you.

That’s the way you should set up your systems. And with user authorization protocols and software, you can. The first thing to do is to set up your systems so that only authorized users – your employees and, in some cases, your customers – can access the information you want to share with them. The next step is to make sure your employees can readily access information they need in order to do their work efficiently, but are restricted from accessing sensitive company information.

To meet these steps – user authentication, password and encryption technology offer the best solution: Look for systems that support BIOS-level passwords that require user authentication even before the operating system loads. All DellTM business systems do this.
Consider using Smart Card technology to restrict/allow access to your systems. This is standard equipment on all D-family Dell LatitudeTM notebooks.
Biometric solutions (such as fingerprint identification) offer even greater levels of user authentication.
Encryption software – which scrambles data in such a way that it becomes useless to any unauthorized person who accesses it – helps to keep hackers and other malicious intruders at arms length.

Another important user security precaution is instituting an e-mail and Internet security policy. By getting each employee on the same page about security, you’ll be less likely to experience security problems. Click here for more information on e-mail and Internet security policies.

Building Block3: System Security

More than any other device on your network, the individual PC is the Achilles’ heel in terms of vulnerability because it’s the favored point-of-entry for some of the most common security threats. And the “work-anywhere workforce” enabled by wireless technologies heightens your security challenge. That’s why installing and keeping a current version of security software on all your employees’ computers is a necessary first step to system security. This software helps protect against viruses, worms, spyware, and other threats that are transmitted over the Internet, as well as files imported from USB keys, instant messaging and other means. Click here for a more focused article on spam, viruses and spyware.

Another smart step is to set up your IT structure in a way that enables you to view and manage all of your company’s computers from one central location. This step, which you can achieve by using solutions such as Dell’s OpenManageTM Network Manager, will add confidence that all your PCs have the same level of protection.

Dell also helps small businesses protect their systems from unauthorized access, control and damage with a more secure or “hardened” operating system configuration. This service involves more than 50 factory-activated security settings within the operating system designed to meet security benchmarks established by the Center for Internet Security.

Another important area that small businesses would prefer to avoid – but definitely need to consider – is hard drive failures. Specifically, you need to consider what will happen to your data – and how you want to manage it – in the event of a fatal hard drive crash. To that end, Dell offers a “Keep Your Hard Drive”2 service that helps small businesses stay in control of important data. Under this program, if a hard drive covered by your Dell limited warranty3 fails, you can keep the defective hard drive that’s being replaced by Dell, helping you protect sensitive, classified or proprietary information.

Building Block 4: Network Security

Without a doubt, network technology drives small business productivity and success. But it also increases vulnerability to security threats. Fortunately, a wide range of technologies in the marketplace today are designed specifically to help small businesses keep your networks safe and secure: Firewalls: A firewall is a protective barrier that prevents unwanted access to or from your company network. The firewall scans all traffic passing in and out of your network and blocks unauthorized messages, intruders and viruses.
VPN Protection: A virtual private network (VPN) is a cost effective solution for employees at small businesses to connect securely to their respective business networks from remote locations, and communicate confidentially with each other across shared or public networks like the Internet. Leading technology vendors offer VPN and Intrusion Protection/Packet inspection to help ensure that VPN connections are secure.
Encryption: When buying network technology, small businesses should seek out those vendors who provide hardware support for WPA2, a sophisticated encryption protocol and part of the 802.11 industry standard for networks. WPA2, which comes standard on select Dell Latitude notebooks, is designed to eliminate the weaknesses found in previous encryption protocols.
Cisco Compatible Extensions Program: Because the vast majority of wireless networks come in touch with Cisco Systems technologies, small businesses should consider using wireless equipment manufactured by the Cisco Compatible Extensions Program, which is designed to ensure that wireless solutions deliver tested and certified compatibility with the latest Cisco wireless infrastructure hardware and security technology. Dell is a founding member of the program.

ParagonHost, LLC

http://www.ParagonHost.com

http://www.ScanDefense.com

http://www.MyiContact.com

ScanDefense / TheSpamBusters / MyiContact

(866) 412-HOST

03
Oct
07

ScanDefense.com – ContentProtect Home Suite

ScanDefense.com – ContentProtect Home Suite

Powered by Net Nanny / Content Watch
Protection Services by ScanDefense.com

Features/Benefits of Individual Modules

ContentProtect™ is the most effective and flexible
Internet filter available today! The state-of-the-art
dynamic filtering engine ensures that your family
members won’t be exposed to pornography and other
offensive content.

ContentProtect™ is the only family-oriented filter that
allows you to manage your home Internet use from
anywhere at any time through powerful Remote
Management tools. ContentProtect can be used as
configured right “out of the box” or you can adjust the
filter settings according to your personal preferences
and needs.

Features/Benefits

• #1 Rated Internet Filter – Internetfilterreview.
com; Filterguide.com
• Integration With Popular Search Engines –
ContentProtect leverages “Safe Search” type options
found in popular search engines such as Google,
Yahoo, Dogpile, AltaVista, Lycos, AllTheWeb, and MSN.
This new feature will enable better protection against
pornographic images when doing an image only search.
• Remote Management – Powerful Remote
Management tools exist to help parents to manage and
maintain Internet policies remotely; for example, from
work if Internet access exists.
• Enhanced Reporting – ContentProtect reports
have been enhanced through the use of Flash
technology. Reports are dynamic in nature and provide
parents with a first class presentation of Internet activity
of children. Reports track where, when and how often
children visit certain Web sites by category.
• Time Management – ContentProtect includes a
powerful time management feature that permits parents
to set the time of day when children can access the
Internet as well as a time quota feature that permits
administrators to assign a block of time to a child. Once
that child’s time quota is used up, they can no longer
access the Internet.
• Customized Lists – ContentProtect permits
parents to create customized lists of unacceptable or
acceptable Web sites. For example, parents could set
up a list (white list) of friendly sites that don’t necessarily
get filtered.
• Email Notifications – Parents can be notified
via email when children are blocked, warned or try to
violate or override the defined Internet Policy.
• Instant Messaging – ContentProtect provides
better tools for managing access to popular Instant
Messaging applications. ContentProtect also records IM
sessions so that parents can review the dialog that
takes places between children, friends and potential
predators.
• Internet Game Management – ContentProtect
permits parents to block access to certain Internet
games..
• Peer-to-Peer Management – ContentProtect
permits parents to block access to certain Peer-to-peer
(P2P) sites.

Product Data Sheet

3 great Internet Protection tools —1 great value! Protect your family on the Internet from
inappropriate content. ContentProtect Home Suite gives you a fully integrated suite of Internet

Protection tools including:

ContentProtect™ — The industry’s leading Internet filtering software
ContentCleanup™ — The ability to analyze your hard drive, categorize content and then
remove unwanted files from your PC
Privacy Protection — Protection from fraudulent and online phishing scams

• Customization – ContentProtect is highly customizable permitting each family member to have their own filtering settings, rather than forcing them
into a “one size fits all.”
• Multi-Language Support – ContentProtect now localized and filters Internet content in multiple languages including English, Chinese and Spanish.
ContentCleanup™
This simple-to-use tool helps users analyze, categorize and erase unwanted content from their computers. ContentCleanup starts by running a
comprehensive scan on the user’s computer and categorizes them in files types: History, Cookies, Documents, Temporary Internet files, Images, Audio,
and Video. In addition, ContentCleanup further analyzes each file in depth using ContentProtect’s award-winning and patent-pending dynamic analysis
engine which identifies potentially objectionable files and categorizes them into one of 28 different content categories, ranging from Pornography or
Adult/Mature to Sports and Travel. By doing this, it enables the user to easily identify objectionable files and delete them; freeing up disk space on the
user’s computer and enhancing its performance.

Features/Benefits

• Scan and categorize each file-type based on its content and where it came from.
• View each file in a “thumbnail view” to determine if it is suitable to view before opening the file for further inspection.
• View images in a “blurred” mode so you avoid exposure to objectionable or questionable images.
• ContentCleanup scans, analyzes and categorizes every file on your computer including Images, Video, Audio, Text, and Program files.
• Move objectionable items to an encrypted quarantine folder for later review or deletion.
• View an enhanced summary of each scan through the use of Flash technology. Reports detail by type and category the number of items found, items
quarantined, and items deleted.
• Specify the types of files you want to scan, specify the location, and/or include size restraints.
• Control the removal of files through our Cleanup Wizard.
• Enhances PC performance by freeing up disk space.
Privacy Protection
Powered by CallingID, Privacy Protection warns users of potentially dangerous Web sites by verifying information about the site’s ownership including
its origin, date created, and any other pertinent information concerning the legitimacy of the Web site. If any information is suspicious, a visual warning will
appear to inform the user. Other features of the product include:
Features/Benefits
• Site Verifications – Verifies safe sites before users do business with them
• Verification Tests – Executes 52 verification tests on each page users visit and provides them with simple easy, to understand risk.
• Site Warning – Choose between two different methods of warning users about suspicious sites: foreground message box, or background pop-up window.
• Configurable Warning Level – Choose to warn users of either or both “High Risk” and “Low Risk” suspicious sites.

Support
ContentProtect Home Suite is backed by toll-free technical support and email support.

Automatic Updates
With state-of-the-art technology, ContentWatch updates users with the latest lists, definitions, and technology, as they become available. This process can
happen automatically or manually depending on the user preference enabling the customer to have the most current version of the software available.

Source: http://www.scandefense.com/pdf/cphomesuite_rev.pdf

More info on this product and Sign-up for a FREE Trial: http://www.ScanDefense.com

13
Aug
07

TSB – The Spam Busters Toolbar

Download our FREE toolbar – Email Notifier, Popup Blocker, RSS News Feeds and more!

toolbar powered by
TSB – TheSpamBusters.com



Follow

Get every new post delivered to your Inbox.