Press Releases
Dasient Unveils New Research on the Impact of Structural Vulnerabilities on Enterprise Websites
July 26, 2010Study Finds that 75 Percent of Enterprises Use Third-Party JavaScript Widgets on their Websites, 42 Percent Display External Ads and up to 91 Percent Run Third-Party Applications – Most of Which are Outdated - Greatly Increasing Their Exposure to Malware Infections
Black Hat USA 2010 Conference – Las Vegas, NV and Palo Alto, CA – July 26, 2010 – Dasient Inc., the leading provider of anti-malware solutions for websites and ad networks, today released a new research report, "Structural Vulnerabilities on Websites: Why Enterprise Websites Are Vulnerable to Malware Attacks," which found that, across all verticals, 75 percent of enterprises use some form of third-party JavaScript widgets, 42 percent of websites display external advertisements and up to 91 percent run third-party web applications, much of which is outdated and vulnerable. Findings from this new report will also be discussed during CTO and Co-Founder Neil Daswani's Black Hat presentation on Wednesday, July 28th on "mod_antimalware: a novel apache module for containing web-based malware infections."
To conduct this research, Dasient ran automated, passive malware risk assessments against the websites of Fortune 500 companies, Quantcast Top 1000 sites and other highly trafficked websites to determine which vertical markets (publisher/media, financial, ecommerce, traditional retail, high-tech manufacturers, travel/entertainment/leisure, consumer packaged goods, business services, manufacturing, and healthcare) were most at risk of having their websites infected with web-based malware due to structural vulnerabilities. According to Dasient's report, structural vulnerabilities fall into three categories: third-party widgets such as polls, analytics or other sharing capabilities; external advertisements that could be serving malicious ads (malvertising); and third-party applications. These third-party resources are necessary for enterprises to provide functionality to users, but they can be exploited to distribute malware.
"In today's online world, it is highly unlikely that enterprises will rely completely on using all their own software on their websites – they depend on third parties to supply widgets, applications and ads to offer functionality and interactivity for many parts of their websites," said Daswani. "Even while maintaining high security standards for the parts of the website that they directly manage, many enterprises have much less control over the security practices of these third-party providers, offering attackers easy, backdoor access to legitimate websites. If any of these third parties become compromised or infected, the entire website can be turned into a vehicle for the distribution of web-based malware, significantly damaging the enterprises' business."
Some of the key findings of Dasient's research include:
- There is an increased reliance on third-party JavaScript across all verticals. 75 percent of websites use some form of third-party JavaScript widgets. The highest category of vertical using widgets was travel, entertainment and leisure at 99 percent. Publishers came in second at 95 percent; high-tech was a close third at 94 percent; and financial institutions at 89 percent.
- More than 4 out of 10 of all websites rely on third-party advertising and publishers are twice as likely to use third-party ads. Across all verticals, Dasient found that 42 percent of websites used some third-party advertising on their sites and 82 percent of publishers already use third-party ads. In the retail and high-tech sectors, over 50 percent of sites used third-party ads. Surprisingly, 41 percent of financial institutions also use third-party ad-related resources on parts of their websites where financial advice is being exchanged among online communities.
- Many websites today are running outdated, vulnerable third-party applications. Across all verticals, Dasient found that up to 91 percent of businesses had outdated software applications (such as a content management, blogging or shopping cart systems) powering their websites. Three verticals were tied, at 97 percent, for having the highest percentage of websites with outdated software applications: consumer packaged goods, publishers and high-tech websites. Interestingly, some of the verticals that had a lower percentage of sites with external JavaScript or ads actually ranked higher for having outdated applications.
Added Daswani, "Websites today are being turned into malware distribution vehicles and when a site includes code from other places, it naturally increases the risk and attack surface, resulting in the creation of these significant structural vulnerabilities. The best way to mitigate the risks from structural vulnerabilities is to monitor websites for malware infections and automatically contain them."
As part of the report, Dasient offers the following best practices for enterprises to protect their websites against the threat of structural vulnerabilities:
- Vet your third-party partners. Dasient recommends that enterprises vet third-party partners to be sure they have good security practices in place. Determine if your third-party partner has control over their own secure software development lifecycle (SDLC).
- Proactively monitor your website and contain malware infections. Monitoring will help organizations find out about an infection before search engines and customers learn about it and before the site could get blacklisted, which would result in significant revenue and brand loss and reputation damage. Dasient's mod_antimalware offering can strip out infections in websites in real-time or block infected pages from being served to users altogether.
- Prevention alone is not the solution and is not effective for structural vulnerabilities. Dasient recommends detection and remediation Web Anti-Malware (WAM) services that provide end-to-end protection by monitoring websites for and automatically containing Web-based malware infections.
Dasient is also releasing a new white paper at Black Hat this week on mod_antimalware that discusses the importance of using a containment technology to mitigate infections from structural vulnerabilities. To download a copy of Dasient’s mod_antimalware paper, please visit: http://info.dasient.com/mod-anti-malware.html.
About Dasient
Dasient is an Internet security company that protects businesses from web-based malware attacks. It is the first to develop a complete Web Anti-Malware service that can monitor, automatically identify, and quarantine malware on websites before it can infect visitors and cause a loss of traffic, reputation, and revenue. Dasient was founded by former Google engineers Neil Daswani and Shariq Rizvi and former McKinsey strategy consultant Ameet Ranadive. They are backed by a group of investors who include Floodgate, Benhamou Global Ventures, and Radar Partners. More information about Dasient can be found at www.dasient.com and www.twitter.com/dasient.
About Dasient WAM
The Dasient WAM services are built on a set of behavioral analysis technologies that continually crawl customer sites and the web, identifying new web-based malware infections. The monitoring and diagnostic components are provided to customers as a web service, and the quarantining technologies are made available as web server modules that can be installed by customers or web hosting providers.
Media Contact
Michelle Schafer
Merritt Group for Dasient
Cell: 703.403.6377
schafer@merrittgrp.com
Dasient Names Paul Stich as Chief Executive Officer
July 12, 2010Former BT Counterpane CEO and McAfee VP Brings Over 25 Years of Technology Expertise and Leadership to Innovative Security Startup
Palo Alto, CA – July 12, 2010 -- Dasient Inc., the leading provider of anti-malware solutions for websites and ad networks, today announced that Paul Stich has joined the company as its Chief Executive Officer (CEO). As the company's newly appointed leader, Stich plans to work closely with co-founders Dr. Neil Daswani, Ameet Ranadive and Shariq Rizvi to significantly grow Dasient's customer base, extend the company's reach into new markets, and accelerate research and product development.
"We are delighted to be able to attract a CEO of Paul's caliber and industry experience to lead Dasient through its next stages of growth and help fulfill its potential - particularly at a time when the market opportunity for Dasient's products and services is so ripe," said Dasient investor Eric Benhamou.
Founded in late 2008, Dasient is the first and only company to provide a complete Web Anti-Malware service that can automatically identify and contain malware on websites, helping businesses avoid losses of traffic, reputation, and revenue. Recently, in May 2010, Dasient expanded its product line to offer the industry's first Anti-Malvertising Solution designed to help publishers and advertising networks quickly monitor and remediate malicious advertising attacks whenever they occur.
"Dasient is truly an innovative company that is addressing one of the fastest growing security threats today - web-based malware," said Stich. "The current leadership team has made significant progress over the past two years to develop best-in-class security solutions that are unrivaled in the market. I am very excited to take the company to the next level by expanding Dasient's global footprint and leveraging my experience and insight to support the future development of its managed security services offerings."
Stich brings over 25 years of technology industry experience and leadership to Dasient. During the past decade, Stich has served as the CEO at leading venture capital and private equity backed firms. Most recently, Stich was Vice President of Global Telecommunication Solutions at McAfee. He also served as the president and CEO of Counterpane Internet Security, the leading managed security services firm, which was acquired by British Telecom in 2006. During his tenure, Stich's team expanded the service offerings, developed a new go-to-market strategy and grew revenues nearly 1000 percent. After the acquisition, he managed the successful integration of Counterpane into BT Global Services.
Before Counterpane, Stich was the co-founder, president and CEO of Groundswell, a premier internet consulting firm. During his tenure there, Stich raised $50 million in funding and grew revenue from $1.5 million in 1999 to $17 million in 2000. He grew the company from 3 to 230 people in 14 months and opened offices across the U.S.
Prior to starting Groundswell, Stich was the vice president of global services at IBM, responsible for the telecommunications, media, entertainment, and utility industries for North and South America. Earlier in his career, Stich spent over a decade at KPMG where he was a Partner in charge of building the firm's National Telecommunications practice.
"Paul brings unmatched security industry experience from both McAfee and BT Counterpane to Dasient that complements our already successful managed security services business," said Dasient Chief Technology Officer (CTO), Dr. Neil Daswani. "Our industry-leading Web Anti-Malware and Anti-Malvertising Solution are two such services we have brought to market thus far, and we look forward to working with Paul to continue addressing the unmet security needs of the marketplace."
Stich earned his MBA from the University of Notre Dame Graduate School of Business and his Bachelor of Science degree from Saint Mary's College of California.
About Dasient
Dasient is an Internet security company that protects businesses from web-based malware attacks. It is the first to develop a complete Web Anti-Malware service that can monitor, automatically identify, and quarantine malware on websites before it can infect visitors and cause a loss of traffic, reputation, and revenue. Dasient was founded by former Google engineers Neil Daswani and Shariq Rizvi and former McKinsey strategy consultant Ameet Ranadive. They are backed by a group of investors who include Floodgate, Benhamou Global Ventures, and Radar Partners. More information about Dasient can be found at www.dasient.com and www.twitter.com/dasient.
Media Contact
Michelle Schafer
Merritt Group for Dasient
Cell: 703.403.6377
schafer@merrittgrp.com
Dasient Unveils First-Ever Automated Solution to Tackle Growing Threat of Malvertising
May 18, 2010New Diagnostic Tool Helps Publishers and Ad Networks Quickly Identify & Shut Down Malicious Ads
Palo Alto, CA – May 18, 2010 -- Dasient Inc., the leading provider of anti-malware solutions for websites, today announced a new Anti-Malvertising Solution (AMS) designed to help publishers and advertising networks quickly monitor and remediate malicious advertising attacks whenever they occur. Dasient's solution automatically discovers and diagnoses malicious ads quickly and easily, limiting the exposure and severity of a malvertising attack.
Malicious advertising, also referred to as "malvertising," is a relatively new attack vector for cyber criminals that is quickly on the rise. With malvertising, fake malicious ads are delivered (often via advertising networks) to well-known websites as a way to reach millions of users at once on websites they normally trust. Unlike typical spam or virus attacks, which rely on victims to click on a link in an email or accidentally download an infected program, malvertising attacks are presented on popular websites and can download malicious code directly onto a user's computer when the victim views the compromised ad. By infiltrating an entire ad network, the criminal gains access to a broad number of syndicated websites that can spread malicious code even further.
Millions of users have been infected by malvertising threats recently, as evidenced by the high-profile attacks on The New York Times, Gizmodo, TechCrunch, WhitePages.com and other sites. Based on data generated from Dasient's telemetry system, there are approximately 1.3 million malicious ads viewed per day. Scareware, or fake security software, is yet another means for criminals to distribute malware through pop-up ads. Dasient estimates that 41 percent of malvertisements are from fake anti-virus pop-ups and 59 percent are from drive-by downloads of the malicious ads. Dasient's research also uncovered that the probability of a user getting infected from a malvertisement is twice as likely on a weekend and the average lifetime of a malvertisement is 7.3 days.
"Website owners are relying upon their ad partners and ad networks to keep their sites clean and safe for their visitors. When malware is served up to site visitors, trust is lost," said Dr. Neil Daswani, one of Dasient's three co-founders. "With malvertising attacks, not only are users at risk, but publishers, ad networks and website owners also feel the pain – their websites can be potentially blacklisted, and they suffer brand loss and reputation damage, resulting in lost customers and increased technical support costs."
Traditionally, many publishers and ad networks only respond to a bad ad when a user complains about the problem, and one complaint could mean thousands have been infected already by a malvertisement. To deal with the threat, publishers and ad networks have had to manually investigate reports of bad ads, which takes time and resources. Because attacks are sporadic, it makes the source of the bad ad very hard to pin down. To-date, publishers and ad networks have not had an automated solution to address the malvertising problem.
Dasient scans millions of ads and web pages daily to identify the latest malvertising attacks and has built an Infection Library of over 150,000 malvertising attacks and malware. Leveraging this robust database, Dasient’s new Anti-Malvertising Solution:
- Monitors ads from third-party ad networks and automatically identifies malicious advertisements coming into a website or network.
- Immediately notifies the ad network partner or publisher that a malicious ad came through.
- Identifies the exact source ad with an ad ID that needs to be shut down.
- Traces all redirects the ad followed.
- Captures a screenshot of the ad; and
- Provides forensic information about the virus that was served for further investigation.
"Every publisher uses an ad network – it's an easy way for malvertisements to get onto publisher sites. The problem is confounded by the fact that ad networks sub-syndicate their ad inventory, which in turn sub-syndicate, leaving ad networks exposed," said Ameet Ranadive, Dasient co-founder. "To date, there has been no automated solution available to deal with this growing problem which is why so many of the threats have gone ignored. Even if they get lucky and find a malicious ad on their own, they still have lost time, money and potentially customers while the ad is out there spreading infection. Our new Anti-Malvertising Solution is truly ground-breaking for ad networks and publishers – they finally have a solution that can immediately identify the source of the malvertising threat to help shut it down."
Dasient's new Anti-Malvertising Solution is available immediately and works seamlessly with a user's existing security and IT infrastructure - there's no complex hardware to install or major software integration. Pricing is based on the number of ad tags and frequency of monitoring. Enterprise pricing starts in the low thousands. Dasient also offers a hybrid solution which includes Dasient's Web Anti-Malware (WAM) service combined with its new Anti-Malvertising Solution.
For more information, please visit: info.dasient.com/anti-malvertising.
About Dasient
Dasient is an Internet security company that protects businesses from web-based malware attacks. It is the first to develop a complete web anti-malware service that can monitor, automatically identify, and quarantine malware on websites before it can infect visitors and cause a loss of traffic, reputation, and revenue. Dasient was founded by former Google engineers Neil Daswani and Shariq Rizvi and former McKinsey strategy consultant Ameet Ranadive. They are backed by a group of seed investors who also invested in VeriSign, Citrix, Twitter, Digg, Tumbleweed, Finjan, and more. More information about Dasient can be found at www.dasient.com and www.twitter.com/dasient.
About Dasient WAM
The Dasient WAM services are built on a set of behavioral analysis technologies that continually crawl customer sites and the web, identifying new web-based malware infections. The monitoring and diagnostic components are provided to customers as a web service, and the quarantining technologies are made available as web server modules that can be installed by customers or web hosting providers.
Press Contact
Michael Kirkland
Cutline Communications
mkirkland@cutline.com
415.793.5571
Dasient Introduces First Malware Protection Seal for Websites
February 24, 2010New badge enables websites to increase customer visits, conversions, and revenue.
Palo Alto, CA February 24, 2010 -- Dasient Inc., the leading provider of anti-malware solutions for websites, today announced that it is introducing the Dasient SafeSite security seal for websites to communicate that they are continuously testing clear of any malware by the most reliable, precise, and real-time monitoring service available -- Dasient WAM (Web Anti-Malware). The Dasient SafeSite seal is the world's first recognized security seal specifcally for malware protection, and it will provide critical differentiation for web businesses that are committed to offering a safer user experience for their site visitors.
With the dramatic increase in malware-based web attacks, website owners and consumers are increasingly seeking ways to protect themselves. "Security is becoming a bigger and bigger concern on the web," said Dr. Neil Daswani, one of Dasient's three co-founders. "Unfortunately, hackers are becoming more sophisticated and infecting more websites with malware which in turn infect consumers with viruses. Dasient SafeSite was conceived with the notion that websites that are being monitored against malware will provide a safer online experience for visitors."
Dasient customers using the monitoring component of Dasient's WAM service will now be able to display the SafeSite seal and start receiving reports with statistics on how much of their traffic is protected by malware monitored pages. Additionally, Dasient SafeSite provides instant visual feedback to visitors, allowing them to see at a glance whether a website is malware monitored.
As attacks are constantly on the rise, legitimate websites face the problem of being infected with malware. A recent study by Dasient shows that every 1.3 seconds a new web page is infected with malware and that malware attacks have grown by 600% since 2008. Consumers are becoming more and more concerned about getting infected, and websites are increasingly losing revenue due to a lack of customer confidence. Research shows that 75% of consumers do not want to provide their credit card information online (Pew Research, 2008) and 93% of consumers are concerned about viruses being installed on their computer (RSA 2010).
"We're excited to bring Dasient SafeSite as an added offering to more businesses on the web, to help them protect their sites from the serious threat of web-based malware and communicate that protection to their site visitors. The Dasient SafeSite Seal enables sites to increase customer visits, conversions and revenue," Dr. Daswani said.
Dasient SafeSite is being made available to all existing and future Dasient customers.
About Dasient
Dasient is an Internet security company that protects businesses from web-based malware attacks. It is the first to develop a complete web anti-malware service that can monitor, automatically identify, and quarantine malware on websites before it can infect visitors and cause a loss of traffic, reputation, and revenue. Dasient was founded by former Google engineers Neil Daswani and Shariq Rizvi and former McKinsey strategy consultant Ameet Ranadive. They are backed by a group of seed investors who also invested in VeriSign, Citrix, Twitter, Digg, Tumbleweed, Finjan, and more. More information about Dasient can be found at www.dasient.com and www.twitter.com/dasient.
About Dasient WAM
The Dasient WAM services are built on a set of behavioral analysis technologies that continually crawl customer sites and the web, identifying new web-based malware infections. The monitoring and diagnostic components are provided to customers as a web service, and the quarantining technologies are made available as web server modules that can be installed by customers or web hosting providers.
Press Contact
Michael Kirkland
Cutline Communications
mkirkland@cutline.com
415.793.5571
Dasient Web Anti-Malware Services Move Out of Beta
December 1, 2009Anti-malware monitoring and diagnostic services for websites are now generally available, featuring richer reporting tools and enhanced scanning technology.
PALO ALTO, Calif., December 1, 2009 – Leading web anti-malware provider Dasient today announced that the monitoring and diagnostic components of its Web Anti-Malware (WAM) service have graduated out of beta. The Dasient WAM services have successfully helped tens of thousands of site owners address their web-based malware issues to date, and are now generally available at www.dasient.com.
"Prior to using Dasient, we had repeated issues with malware infections on our website," said Heiko Mitzkus, president of Enlighten Living, a retailer specializing in home lighting and ceiling fans. "And by the time we realized we were infected, search engines and browsers had already blacklisted us, causing an 80% drop in traffic and sales. Dasient WAM is a great preventative tool to have, giving us advance warning that our site is hosting malicious content before we're flagged by a blacklist."
With the graduation of these services into general availability, a number of new features have been introduced. These include richer reporting tools that will provide customers with data on the number of URLs scanned each week, lists of all URLs scanned and attacks being checked for, and the latest web-based malware attacks Dasient has detected. They also include new account management features that will enable customers using Dasient WAM to protect multiple domains to manage all those domains using a single login.
Other new updates include significant upgrades to the overall speed and reliability of the Dasient WAM scanning technology, as well as the ability to scan customer sites for links to dangerous downloads that might be placed in user-generated content or in syndicated ads on those sites.
"In the last six months, we've continued to build out the scalability, reliability, and speed of our Dasient WAM malware detection platform and have proved its readiness with tens of thousands of beta customers," said Dr. Neil Daswani, one of Dasient's three co-founders. "We're excited to now be able to bring Dasient WAM to even more businesses on the web, to help them protect their sites from the serious threat of web-based malware."
Services like Dasient WAM are becoming increasingly important to companies of all types and sizes, as attackers are focusing more than ever on compromising legitimate websites and using them to distribute malware. In the second half of this year alone, Dasient has identified more than 98,000 unique web-based malware infections, which in turn have impacted hundreds of thousands of sites and millions of pages. The speed, scale, and complexity of these attacks makes it extremely difficult for site owners to identify and fix the resulting infections, and as a result, more and more legitimate sites are feeling the effects of web-based malware infection, which can include loss of traffic, decline in revenue, and damage to brand equity.
About Dasient
Dasient is an Internet security company that protects businesses from web-based malware attacks. It is the first to develop a complete web anti-malware service that can monitor, automatically identify, and quarantine malware on websites before it can infect visitors and cause a loss of traffic, reputation, and revenue. Dasient was founded by former Google engineers Neil Daswani and Shariq Rizvi and former McKinsey strategy consultant Ameet Ranadive. They are backed by a group of seed investors who also invested in VeriSign, Citrix, Twitter, Digg, Tumbleweed, Finjan, and more. More information about Dasient can be found at www.dasient.com and www.twitter.com/dasient.
About Dasient WAM
The Dasient WAM services are built on a set of behavioral analysis technologies that continually crawl customer sites and the web, identifying new web-based malware infections. The monitoring and diagnostic components are provided to customers as a web service, and the quarantining technologies are made available as web server modules that can be installed by customers or web hosting providers.
Press Contact
Michael Kirkland
Cutline Communications
mkirkland@cutline.com
415.793.5571
Dasient Releases Free Open-Source Web Anti-Malware Technology
August 11, 2009Test version of Dasient WAM remediation technology enables site owners and web hosts to keep their sites from infecting users in the event of a malware infection.
Dasient also launches partner center and announces new distribution partnerships with web hosting providers.
WASHINGTON DC - August 11, 2009 - Today at HostingCon 2009, Dasient launched Mod Anti-Malware Lite, an open source version of its Web Anti-Malware (WAM) remediation technology. Mod Anti-Malware Lite is an Apache server module that will help site owners, web hosts, and developers protect themselves against the effects of web-based attacks that can compromise their sites and spread malware to their users. Mod Anti-Malware Lite will be made available today at www.dasient.com/partners and www.sourceforge.net.
"Every day, thousands of legitimate websites are infected with malicious code, and the speed, scale, and complexity of these attacks makes it difficult for website owners to identify and address the resulting infections," said Dr. Neil Daswani, one of Dasient's three co-founders. "Now more than ever it's important for site owners to deploy defenses that can operate at the scale and speed required to deal with this problem."
The most immediate result of web malware infection is blacklisting by search engines like Google and Yahoo; browsers like Internet Explorer, Firefox, and Chrome; and desktop anti-virus providers like Norton and McAfee. Using Dasient's Web-Anti Malware service can help sites stay off these blacklists, all of which can have a significant impact on site traffic, reputation, and revenue. Dasient WAM is the only web anti-malware service on the market that can monitor, automatically identify, and quarantine malware on websites before it can infect visitors and cause a loss of traffic, reputation, and revenue.
Dasient is making Mod Anti-Malware Lite available as open source so that web hosts, site owners, and developers can test the Dasient WAM technology on their sites and explore different uses of the technology. When used in conjunction with the Dasient WAM monitoring and diagnostic service, the module will prevent any page that's been infected with malware from being served to users. Anyone who downloads and installs Mod Anti-Malware Lite will be granted a limited free trial of the Dasient WAM monitoring and diagnostic service, to be used in conjunction with the module.
Compared with the technology offered in Mod Anti-Malware Lite, the remediation technology in the premium service takes things a step further, removing any dangerous code but still serving the rest of the page to users, so site owners both protect their users from infection and stay open for business.
Dasient Launches Partner Center and Announces New Web-Host Partners
Also today, Dasient is launching a new partner center at www.dasient.com/partners. The partner center is designed to be a resource for web hosting providers, enabling them to quickly and easily sign their customer domains up for free blacklist monitoring, download Mod Anti-Malware Lite, and more.
Dasient is also happy to announce new distribution partnerships with five web hosting providers: Consolidated, Vexxhost, Ultrahosting, and Nerds on Site in North America and Diadem Technologies in India. These partners will be integrating Dasient WAM into their product platforms in the coming months, selling the product to their customers and sharing revenue with Dasient.
About Dasient
Dasient is an Internet security company that protects businesses from web-based malware attacks. It is the first to develop a complete Web Anti-Malware service that can monitor, automatically identify, and quarantine malware on websites before it can infect visitors and cause a loss of traffic, reputation, and revenue. Dasient was founded by former Google engineers Neil Daswani and Shariq Rizvi and former McKinsey strategy consultant Ameet Ranadive. They are backed by a group of seed investors who also invested in VeriSign, Citrix, Twitter, Digg, Tumbleweed, Finjan, and more. More information about Dasient can be found at www.dasient.com.
About Dasient WAM
The Dasient WAM monitoring and diagnostic services are built on a set of behavioral analysis technologies that continually crawl customer sites and the web, identifying new web-based malware infections. The monitoring and diagnostic tools are provided to customers as a web service, and the quarantining technologies are made available as web server modules that can be installed by customers or web hosting providers.
Press Contact
Michael Kirkland
Cutline Communications
mkirkland@cutline.com
415.793.5571
Dasient Introduces First Web Anti-Malware Service
June 16, 2009Addresses Growing Need for Protection From New Web-Based Attacks
PALO ALTO, June 16, 2009 – Dasient today introduced the industry's first service to protect companies against a fast-growing class of web-based attacks that compromise legitimate websites and then use them to spread malware to the sites' visitors. Dasient's new Web Anti-Malware (WAM) service continually monitors websites, diagnoses any infections, and helps businesses address the infections, before the sites suffer significant losses in traffic, revenue, and reputation.
"In the last two years, we've seen a fundamental shift in the way malware is spread," said Dasient co-founder Dr. Neil Daswani. "Hackers are using highly automated and mutable attacks to turn websites into delivery vehicles for malicious software. This is a web problem at its core, and it requires a solution that can function at web speed and web scale. That's exactly what we had in mind when we designed the Dasient WAM service."
Sharp Increase in Malware-Infected Webpages
Each day, thousands of legitimate websites are infected with malicious code, often without their knowledge. The speed, scale, and complexity of these attacks makes it extremely difficult for website owners to identify and fix the resulting infections, and in some cases to even know they've occurred.
The most immediate result of web malware infection is blacklisting by search engines like Google and Yahoo; browsers like Internet Explorer, Firefox, and Chrome; and desktop anti-virus providers like Norton and McAfee. When blacklisted, a website's visitors are redirected to a warning that the site they're about to visit might be dangerous. In many cases, being blacklisted causes a sharp drop in traffic to the site, depriving the site owner of advertising or e-commerce revenue, damaging the site's brand, and spurring additional support costs.
Dasient Identifies and Contains Malware That Can Infect Site Visitors
Today Dasient is announcing the following updates to its patent-pending Web Anti-Malware service, which has been in alpha testing with thousands of websites since early this year:
Free Blacklist Monitoring: Regularly monitors blacklists from search engines, browsers, and desktop anti-virus companies and provides customers with instant alerts if they've been flagged by those providers. The WAM Blacklist Monitoring service is now in public beta, and is available for free to direct customers and web hosting providers.
Premium Monitoring and Diagnosis: Continuously monitors customer websites for malicious code that can be distributed by web applications, user-generated content, third-party widgets, advertisements, and other vulnerable site elements. When an infection is identified, customers are notified and provided with detailed diagnostic information, including all malicious source code and infected URLs. The WAM Premium Monitoring service is now in public beta, and is available on a subscription basis to direct customers and web hosting providers.
Quarantining: Used in conjunction with the Premium Monitoring service, Dasient's quarantining technology automatically contains infections as soon as they're diagnosed, serving the webpages in question but not the malicious code. Quarantining prevents the site from spreading malware broadly to its visitors and keeps it from being flagged by blacklist providers. The WAM Quarantining service is now in private beta, and direct customers and web hosting providers can sign up to join the beta on the Dasient site.
The Dasient WAM monitoring and diagnostic services are built on a set of behavioral analysis technologies that continually crawl customer sites and the web, identifying new web-based malware infections. The monitoring and diagnostic tools are provided to customers as a web service, and the quarantining technology is made available as a web server module that can be installed by customers or web hosting providers.
More information about the Dasient WAM service and pricing can be found at www.dasient.com.
About Dasient
Dasient is an Internet security company that protects businesses from web-based malware attacks. It is the first to develop a complete Web Anti-Malware service that can monitor, automatically identify, and quarantine malware on websites before it can infect visitors and cause a loss of traffic, reputation, and revenue. Dasient was founded by former Google engineers Neil Daswani and Shariq Rizvi and former McKinsey strategy consultant Ameet Ranadive. They are backed by a group of seed investors who also invested in VeriSign, Citrix, Twitter, Digg, Tumbleweed, Finjan, and more. More information about Dasient can be found at www.dasient.com.