Press Releases

Top Layer's TopResponse Research Team Advises Customers of Zero-Day Protection for Critical DNS Cache Poisoning Vulnerability

Westboro, MA, July 30, 2008 -

Top Layer IPS 5500 Proactively Protects Customers against Latest Enterprise Threat

Top Layer Security, a leading global provider of Network Intrusion Prevention Systems (IPS), today announced that its IPS 5500 provides customers with proactive protection against attacks targeting the widely publicized, critical DNS Cache Poisoning Vulnerability (MS08-037, CVE-2008-1447), which could allow a remote attacker to insert malicious host entries into the vulnerable DNS server's cache, essentially hijacking an entire organization's outbound Internet traffic.

Top Layer's IPS 5500 provides protection for enterprise DNS servers that have not yet been patched to correct this pervasive vulnerability. This vulnerability is the result of a design flaw in the DNS protocol caching mechanism that allows spoofed replies from authoritative nameservers to insert malicious host entries into the vulnerable DNS server's cache. Top Layer's IPS 5500 has provided protection against exploits of this vulnerability since 2004.

Top Layer customers are encouraged to visit the following webpage for additional information on how to protect their DNS infrastructure against the DNS Cache Poisoning Vulnerability:

http://www.toplayer.com/support

"In recent months, hackers have turned their focus towards websites to find new ways to compromise computers. The recently disclosed DNS vulnerability is drawing a great deal of attention because it has the potential to compromise not just individual computers, but the operation of significant portions of the Internet itself. We are proud to offer our customers zero-day protection for their networks and the sensitive data within them," said Mike Paquette, vice president and chief strategy officer, Top Layer Security. "The IPS 5500 is unlike many other IPS solutions, relying on extensive use of protocol validation modules rather than conventional IDS signatures for its protection. The IPS 5500 has been able to defeat attacks against this DNS vulnerability since it was introduced in 2004."

TopResponse is an Automated Protection Update Service that provides Top Layer IPS 5500 customers with advanced security services to maximize the security, availability, and performance of their network. In this case, because the IPS 5500 provided zero-day protection against exploits of this DNS vulnerability without any signature updates, the TopResponse service notified customers that they were already protected. In general, TopResponse provides automated threat updates, technical support, security advisory and software subscription services, along with access to Top Layer's Security Knowledge Base and special delivery programs.

About the Top Layer IPS 5500
The IPS 5500 family of products is built in the USA and offers the strongest levels of network protection, performance, and reliability on the market today. By combining content-based IPS/IDS, stateful firewall, and attack mitigation algorithms, the IPS 5500 is the only solution that provides Three Dimensional Protection (3DP) against malicious content, undesired access and botnet-based attacks. Top Layer's architecture enables the IPS 5500 to protect enterprises and service providers from sophisticated attacks in real-time while enabling the highest throughput of legitimate traffic.

The IPS 5500 E-series has received top accolades from the world's most prestigious labs and influential publications. In addition, Top Layer has received significant recognition from the NSS Group, Computer Reseller News, Information Security Magazine, IT Week, Service Provider Weekly, the Tolly Group and was awarded "Best Buy" status by SC Magazine in their 2007 review of IDS/IPS solutions as well as Best IPS Product of 2007.

About Top Layer Security
Top Layer Security is dedicated to its role as a leading global provider of Network Intrusion Prevention Systems (IPS), developing and bringing to market network security infrastructure solutions that help commercial and government organizations protect their critical on-line assets from the losses and risks associated with cyber threats. Top Layer Security is headquartered in Massachusetts, USA with sales and services support worldwide.

###

All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies.

Contact:

Donna Rogers Top Layer Networks, Inc. Phone: 508-870-1300 x127 Email: drogers@TopLayer.com	Matt Flanagan Fama PR Phone: 617-758-4141 Email: matt@famapr.com