In 2010, Stonesoft discovered that there are millions and millions of ways to bypass even the most advanced network security solution.
How? By using Advanced Evasion Techniques or AETs.
AETs are any techniques that allow an intruder to evade or bypass security detection during a network-based attack.
What makes them advanced?
The evasion can be changed or modified during the exploit.
A combination of evasions can be executed on multiple protocol layers simultaneously.
The evasion can be designed from zero to bypass specific security measures.
Security vendors are ignoring or downplaying the AET threat, while trying to redesign their products to meet the new reality.
They are creating a false sense of security that may threaten your business.
Key players in the security community like Gartner, NSS Labs and ISCA Labs recognize that AETs a real and serious security threat.
Security vendors also face an uphill struggle as they have to redesign their existing solutions to combat AETs effectively.
When the three-point seatbelt was introduced over forty years ago, most carmakers ignored this live-saving innovation.
In 2010, a similar story was played out in the network security business. Stonesoft stood up and introduced the first effective defense against AETs.
Stonesoft is the undisputed leader in AETs research and protection.
Our edge is
24/7 automated evasion testing environment and dedicated research tools
Extensive collaboration with academic researchers and security test labs
Years ahead of competition in anti-evasion technology development
Infosec 2012: Organisations need new approach to defending networks
Infosecurity Europe 2012: AET– Is this the next-generation attack?
Infosec 2012: Next-generation cyber-attacks demand a new and advanced response from business
Infosecurity Europe: EA says corporate networks are 'undefendable'
The security issues surrounding Advanced Evasion Techniques
Government Business - John Walker.pdf
SC Magazine – Disguising hacker attacks
SC Magazine – Techniques for disguising hacker attacks
SC Magazine - Advanced evasion techniques - protection and preventive measures
http://infosecisland.com/blogview/17291-Researchers-Uncover-163-New-Advanced-Evasion-Techniques.html
http://www.washingtontimes.com/news/2011/nov/17/versace-cybersecurity-advances-to-military-grade/
http://www.stonesoft.com/export/download/PR_Material/The_Thematic_Investor_Nov2011-pages_5-8.pdf
http://gcn.com/articles/2011/10/12/aets-delivered-via-http-traffic.aspx?s=gcndaily_131011
Stonesoft Intrusion Prevention System (IPS) inspects all actual content transmitted in data streams and detects evasion techniques even when they are applied on multiple protocol levels.
This combination of full stack inspection and data normalization on all protocol layers makes Stonesoft IPS the most effective solution available against Advanced Evasion Threats (AETs)
Stonesoft IPS adapts to physical, virtual or hybrid network environments and is backed by the industry’s best in-house AETs testing tools created by Stonesoft’s R&D.
Stonesoft offers dynamic and evasion-resistant network security solutions for maximum protection against cyber threats.
Our solutions have earned top marks for next-generation security readiness and offer exceptional real-time situational awareness.
We can also adapt our next-generation IPS solutions to match your infrastructure requirements and build a unified management platform to oversee your complete security environment.
