Comprehensive Vulnerability Management UWMadison Lockdown August 56, 2004

1
Comprehensive Vulnerability ManagementUW-Madison
LockdownAugust 5-6, 2004
2
Company Profile

• Founded in 1998
• Privately held, profitable
• Sole focus is security software solutions
• Global presence- offices in North America, Europe
  and Asia Pacific
• Over 7,500 deployments in 80 countries
• 400 channel partners in 40 countries
• 50 of revenue is channel generated
• Worldwide brand recognition
• Pioneering product development in vulnerability
  assessment, prevention and management
• Highly respected, renowned research team

3
Vulnerability Research Powerhouse

• eEye has discovered more high risk
  vulnerabilities than any other research team over
  the last three years
• eEyes research team regularly consults with
  government agencies and congressional committees
• RD discoveries and innovation drives unrivaled
  capabilities of eEye products

Having a great RD team issuing advisories and
being on the front lines of discovering
security issues is assuring and was a primary
decision factor in choosing eEye when migrating
from ISS. Robert Timko Information
Security Director
4
Enterprise Vulnerability Management Strategy
MaximizingReturn on Security Investment
MaximizingReturn on Security Investment
5
Case in Point Sasser
Worm attack 18 days after Microsoft Security
Bulletin Over 500,000 computers infected in first
24 hours
eEye provides Retina audit checks for
vulnerabilities
eEye releases free Retina Sasser Audit Tool
Exploit code appears on Internet

• Microsoft releases MS-04-11, multiple
  vulnerabilities, including LSASS, discovered by
  eEye

Sasser worm emerges, leveraging exploit code
released 2 days prior
April 29
April 13
May 1
6
Award Winning Products

• REM Security Management Platform Centralized
  Management and Reporting
• Retina Network Security ScannerUnsurpassed
  Vulnerability Assessment Remediation
• Retina Remediation Manager
• Automated Patch and Configuration Management
• SecureIIS Web Server ProtectionProactive Web
  Server Security
• Iris Network Traffic AnalyzerVisual Data
  Monitoring Reassembly
• Blink Intrusion Prevention Solution
• Host-Level Threat Mitigation