SOURCE: IronPort Systems

January 31, 2007 08:00 ET

IronPort Introduces CASE 2.0 (Context Adaptive Scanning Engine) to Combat "Rapid Start" Spam Attacks

Innovative Anti-Spam Technique Works on Real-Time Spam Streams to Rapidly Develop and Distribute Updates

PALM DESERT, CA and SAN BRUNO, CA -- (MARKET WIRE) -- January 31, 2007 -- IronPort® Systems, Inc., a leading provider of anti-spam, anti-virus and anti-spyware appliances for business, today announced a major update to the company's unique Context Adaptive Scanning Engine™ (CASE) -- enhancing its ability to provide fast and accurate protection against "rapid start" spam attacks. IronPort's CASE 2.0 significantly bolsters IronPort Anti-Spam™, the industry's most accurate anti-spam filter.

In the past 12 months, spammers have enjoyed great success by switching from text-based spam to image-based spam. Image spam is more difficult to analyze, thus it takes longer for traditional filters to respond to it (if they respond at all). Building on their success, spammers are now using massive networks of compromised machines to launch "rapid start" spam attacks. These zombie networks can complete an attack of any scale in a matter of hours, well before legacy anti-spam filters can issue updates.

Designed from the ground up to analyze real-time streams of data, IronPort's CASE 2.0 accurately blocks "rapid start" attacks before spam clutters end-user mailboxes. By combining the power of a large data network, rapid clustering techniques and automated rule generation capabilities, IronPort's CASE 2.0 continuously publishes updates ensuring highly accurate protection.

How IronPort's CASE 2.0 Outbreak Response Technology Works

IronPort's CASE 2.0 performs a real-time analysis of incoming spam, rapidly clustering even seemingly disparate messages as part of a single attack. Simultaneously, automated rule-generation algorithms create rules, based on hundreds of thousands of message attributes. New rules are continuously evaluated against a massive store of spam and legitimate mail samples. Rules that meet confidence thresholds for accuracy are immediately prioritized and published, providing an accurate defense far ahead of legacy systems.

"We're very excited about IronPort's CASE 2.0," says Craig Sprosts, Senior Product Manager at IronPort. "With spammers synchronizing attacks across hundreds of thousands of zombies, even minutes of latency between rule updates make the difference between an acceptable and an unacceptable experience for the end-user."

IronPort's SenderBase -- Data Drives Accuracy

Fast and accurate identification of new spam attacks -- especially targeted, low volume ones -- requires a view into a large volume of data. SenderBase®, the world's largest email and Web traffic monitoring network, collects data from over 100,000 participating networks around the globe (ten times more than any competing network). Access to a vast stream of sample spam messages lets IronPort's CASE 2.0 accurately create clusters for single attacks, including smaller attacks with highly diverse spam. IronPort's CASE 2.0 also uses SenderBase to evaluate new rules against hundreds of thousands of legitimate messages, ensuring extremely high accuracy.

"Today's more focused attacks try to fly under the radar," says Tom Gillis, IronPort's SVP of Worldwide Marketing. "Spammers are not only launching smaller attacks, but using sophisticated techniques to create more diversity within each attack. Using SenderBase, IronPort's CASE 2.0 can quickly identify and respond to attacks that would defeat competing solutions."

About IronPort Systems

IronPort Systems Inc., headquartered in San Bruno, California, is a leading provider of anti-spam, anti-virus and anti-spyware appliances for organizations ranging from small businesses to the Global 2000. IronPort appliances utilize SenderBase®, the world's largest email and Web threat detection network and database. IronPort products are innovative and easy-to-use -- providing breakthrough performance and playing a mission-critical role in a company's network infrastructure. To learn more about IronPort Systems products and services, please visit:

Copyright © 2007 IronPort Systems, Inc. All rights reserved. IronPort, the IronPort logo and SenderBase are registered trademarks of IronPort Systems, Inc. All other trademarks are the property of IronPort Systems, Inc. or their respective owners. While every effort is made to ensure the information given is accurate, IronPort does not accept liability for any errors or mistakes which may arise. Specifications and other information in this document may be subject to change without notice.

Contact Information

  • Press / Analysts
    If you are a reporter or analyst and want more information on IronPort
    Systems please contact:

    Corporate Communications:

    Liz Landis
    IronPort Systems
    Email Contact

    David Oro
    The Oro Group
    Email Contact

    Product/Technology PR:

    Suzanne Matick
    IronPort Systems
    Email Contact