Contact Us
Host Intrusion Prevention Service
Host Intrusion Prevention takes your security defenses beyond perimeter security by protecting critical servers from internal attacks and from external attacks where hackers use encryption as an attack technique.
SecureWorks' Host Intrusion Prevention (HIPS) Service provides an application firewall to ensure that the application is doing only what it is supposed to be doing. When encrypted traffic is received and decrypted by the operating system on the host machine, the HIPS agent intercepts instructions prior to reaching the application to prevent malicious activity.
According to the FFIEC IT Examination Handbook, this method of host-based intrusion detection and prevention "is particularly appropriate for Internet banking servers and other servers that communicate over an encrypted channel." Additionally, host-based intrusion detection systems are recommended by the National Institution of Standards and Technology for all mission critical systems.
Host Intrusion Prevention
Service Overview
SecureWorks' Host Intrusion Prevention Services (HIPS) leverages the Cisco CSA agent to protect servers from attacks on applications, data, and operating systems. Features of this service include:
- Behavior-based attack blocking
- Protection against attacks that bypass perimeter security
- Policy management & design
- 24x7 monitoring and comprehensive reporting
SecureWorks has wrapped the Cisco® Security Agent (CSA) with our award-winning 24x7 managed services to deliver Host Intrusion Prevention (HIPS) Services. Host Intrusion Prevention is complex and difficult to configure, and it can cripple the applications on the host server when implemented incorrectly. SecureWorks provides HIPS as a service so that our skilled security analysts can define policies, configure rules, monitor your environment and tune the system to protect your critical assets. Threats are prevented in real-time and then evaluated by a security analyst as needed for escalation or policy tuning.
Service Features
- Customized security policy design and tuning
- An expert security team monitoring your HIPS in real-time 24x7
- Immediate response to prevent hacker attacks directed at your protected servers
- Real time, behavior-based attack blocking
- Elimination of known and unknown attacks (zero day)
- Immediate updates as new attacks are identified
- In-depth logging and reporting on attempted intrusions
- Customized escalation procedures
- Superior protection against buffer overflow, port scans and SYN floods
- Enhanced protection from encrypted traffic, infected floppies, laptops, consultants and providers who can access your network over an encrypted channel
- Secure access to the web-based SecureWorks Portal
