SecureIIS™ 3.0 Also Protects Against Buffer Overflow, ParserEvasion, Directory Traversal and General Exploitation Attacks

(Irvine, CA) December 15, 2008 — eEye Digital Security (www.eeye.com), an expert in integrated security and threat-management solutions, today announced the general availability of SecureIIS™ v 3.0. Offering proactive Microsoft IIS Web-server protection, the latest version of SecureIIS features SQL injection protection for which users can enable and select defense levels from an action menu.

SecureIIS operates within Microsoft IIS to actively inspect all incoming requests at each stage of data processing. This allows the technology to prevent potentially damaging network traffic from penetrating servers and compromising Web-based applications, whether the traffic is encrypted or unencrypted.

“This capability is critical because vulnerabilities in software applications are responsible for the vast majority of network security breaches and data loss,” said Morey Haber, VP of Business Development for eEye Digital Security. “In particular, Web-server applications like Microsoft IIS are consistently targeted because of the ease of application deployment and potential flaws inherent with coding and configuration mistakes.”

These flaws aid in the creation of some of the most damaging worms that cause compromised Websites and Microsoft IIS directory vulnerabilities. With proper network protection from SecureIIS, users are able to repel common and nefarious attacks.

“When we were hit with an exploit, I was looking at our server logs and realized something was amiss,” said Lisa Davis, IT Specialist for the Iowa Department for the Blind. “I shut our router down until I could figure it out, and what I learned was that SecureIIS saved us from a very serious attack. A number of organizations in our area were infected from the same vulnerability. SecureIIS notified me that something unusual was going on and blocked it in the meantime. That’s the beauty of behavior-based security.”

Key Features of SecureIIS 3.0