|
|
|
| |
Innovators and enterprises have been developing, repurposing and proposing solutions for phishing since the threat began proliferating rapidly in 2003. Since then, media representatives, analysts, enterprises and consumers
have asked us to provide a solutions directory on the antiphishing.org website listing the
types of anti-phishing solutions available today on the market. Here, in response, the APWG proffers its
APWG Solutions Directory, categorized for your browsing convenience.
|
|
| | |
| Prevent cousin domains |
MarkMonitor
http://www.markmonitor.com
Tel: +1 800 745 9229
MarkMonitor is the global leader in delivering comprehensive online corporate identity protection services, with a focus on making the Internet safe for business. MarkMonitor's integrated Brand and Fraud Protection platform provides full life-cycle management, including early warning, real-time detection, and investigation and response, to a wide and growing list of identity-based online security problems faced by corporations today. These solutions are enabled by a comprehensive brand and fraud intelligence network that monitors for inappropriate or fraudulent use of a corporate name or identity anywhere in the Internet, including web sites, search engines, major email systems, domain name systems, registries, message boards, blogs and chat rooms.
VeriSign
http://www.verisign.com
Tel: +1 650 426 5112 or +1 866 893 6565
VeriSign, Inc. is the world's leading SSL Certificate Authority, securing nearly 500,000 Web servers. Its customers include 93 percent of the Fortune 500, the top U.S. banks, and 47 of the 50 largest e-commerce sites. The rigorous VeriSign authentication and security practices over the last ten years have helped establish the VeriSign Secured Seal as the #1 mark of trust on the Internet.
VeriSign Security Serivices
GlobalSign
http://www.globalsign.net
Tel US: 1-866-511-5035 or Tel EU: +32-16-28-71-23 or Tel UK: +44 1622-766766
Established in 1996 GlobalSign is one of the longest established SSL Providers and Certification Authorities, securing thousands of web sites, individuals, devices and identities. GlobalSign has been WebTrust compliant for over 4 years � the longest running in Europe and its well defined and executed authentication policies and procedures ensure GlobalSign products and services are amongst the most highly trusted available in the market.
BrandProtect
www.brandprotect.com
Tel: 866-721-3725 and 905-271-3725
As the leader in internet reputation management, BrandProtect empowers organizations to gain control over how they are represented online by uncovering and mitigating the issues that put their reputation at risk and erode customer trust. BrandProtect’s Response Services help detect, uncover and mitigate brand and trademark infringement issues, phishing attacks, web traffic diversions, website integrity issues and defamatory discussions.
BrandProtect was the first company of its kind to be offered full membership by the Forum for Incident Response and Security Teams (FIRST). It also has relationships with more than 3,500 Internet Service Providers globally, accounting for more than 90 percent of the traffic flowing across the internet.
|
Cyveillance, Inc.
http://www.cyveillance.com
Tel: 888 243 0097 or 703 351 1000
Cyveillance Anti-Phishing is a comprehensive, turnkey solution that enables organizations to prevent, detect, and recover from phishing and fraud-related malware attacks. Using its proprietary Internet monitoring technology, proven processes and procedures, and industry-leading security operations team, Cyveillance identifies targeted fraud activity such as suspicious domain registrations, phishing lures, spoof sites, malware distribution points and the post-attack gathering and exchange of compromised credentials. Cyveillance Anti-Phishing is uniquely capable of searching, processing and delivering technologically advanced phishing attacks in virtually any language. All Cyveillance services and OEM feeds are backed by the industry�s most aggressive Service Level Agreements.
Internet Identity
http://www.internetidentity.com
Tel: 888 239 6932
Over thirty percent of fraud attacks rely on "cousin" variations of the target brand name (such as brand-account.com.) increasing the potential victim's misguided confidence in a scam. This threat vector can be controlled with an aggressive domain control program. Internet Identity's unique Domain Security Audit researches potentially threatening domains that contain your brand names, collecting current registration and usage data, and rating the threat level of domains you do not control. We provide expert recommendations and services to 1) improve your control of names you own, 2) re-gain control of registered domain that you do not own, 3) monitor new registrations that threaten your brands, and 4) register available domains to strengthen your defense against fraud attacks.
FraudWatch International
http://www.fraudwatchinternational.com
Tel: US +1-415-200-0621 or AU: +61-3-9887-6777
FraudWatch International is a specialist Anti-Phishing company, providing a
comprehensive Anti-Phishing service; protecting organizations around the
world against: Phishing, Pharming, Vishing and Trojan attacks. FraudWatch
maintains two 24x7 Security Operations Centers in North America and
Australia, with analysts working exclusively on Anti-Phishing. FraudWatch
clients receive outstanding customer service with FraudWatch's 24x7
monitoring & detection, real-time alerting of verified threats, incident
tracking & forensics portal with real-time one click reporting, threat
mitigation countermeasures and fast site blocking and take down services.
FraudWatch minimizes the impact of phishing attacks with a swift and
decisive incident response, thereby deterring future attacks by making our
clients a hard target.
The GoDaddy Group, Inc.
http://www.godaddy.com
Tel: 480 505 8800
GoDaddy's BrandCatcher brand monitoring product uncovers the
use of brand and trademarks on the Internet and provides alerts on
related domain name registrations.
|
|
| Detect and analyze attacks |
MarkMonitor
http://www.markmonitor.com
Tel: +1 800 745 9229
MarkMonitor is the global leader in delivering comprehensive online corporate identity protection services, with a focus on making the Internet safe for business. MarkMonitor's integrated Brand and Fraud Protection platform provides full life-cycle management, including early warning, real-time detection, and investigation and response, to a wide and growing list of identity-based online security problems faced by corporations today. These solutions are enabled by a comprehensive brand and fraud intelligence network that monitors for inappropriate or fraudulent use of a corporate name or identity anywhere in the Internet, including web sites, search engines, major email systems, domain name systems, registries, message boards, blogs and chat rooms.
VeriSign
http://www.verisign.com
Tel: +1 650 426 5130
Built on intelligence, experience, and a robust global infrastructure, VeriSign� Managed Security Services includes 24x7 monitoring, real-time intelligence, lifecycle threat analysis, and quick response. Our unique combination of people, process, intelligence, and technology enables you to proactively manage risk, monitor compliance, and mitigate emerging security threats.
Services include Managed Firewall and VPN Service, Managed Intrusion Prevention, Managed Intrusion Detection, Managed Vulnerability Protection Service, Managed Vulnerability Alerting, Managed Incident Response and Forensics, Phishing Response, and iDefense Security Intelligence Service.
VeriSign Managed Security Services
Easy Solutions Inc
www.easysol.net
Tel: +1-866-524-4782 or +57 1- 2362455
Easy Solutions is simplifying the way businesses deal with and effectively deploy � security for online transactions. We provide solutions for identifying and preventing online transaction fraud while helping institutions comply with existing US domestic and international two factor authentication requirements. Using our advanced transaction fraud prevention solutions, we help protect online businesses and enterprise applications from phishing attacks, online credential theft and Internet fraud threats.
BrandProtect
www.brandprotect.com
Tel: 866-721-3725 and 905-271-3725
As the leader in internet reputation management, BrandProtect empowers organizations to gain control over how they are represented online by uncovering and mitigating the issues that put their reputation at risk and erode customer trust. BrandProtect’s Response Services help detect, uncover and mitigate brand and trademark infringement issues, phishing attacks, web traffic diversions, website integrity issues and defamatory discussions.
BrandProtect was the first company of its kind to be offered full membership by the Forum for Incident Response and Security Teams (FIRST). It also has relationships with more than 3,500 Internet Service Providers globally, accounting for more than 90 percent of the traffic flowing across the internet.
Cyveillance, Inc.
http://www.cyveillance.com
Tel: 888 243 0097 or 703 351 1000
Cyveillance Anti-Phishing is a comprehensive, turnkey solution that enables organizations to prevent, detect, and recover from phishing and fraud-related malware attacks. Using its proprietary Internet monitoring technology, proven processes and procedures, and industry-leading security operations team, Cyveillance identifies targeted fraud activity such as suspicious domain registrations, phishing lures, spoof sites, malware distribution points and the post-attack gathering and exchange of compromised credentials. Cyveillance Anti-Phishing is uniquely capable of searching, processing and delivering technologically advanced phishing attacks in virtually any language. All Cyveillance services and OEM feeds are backed by the industry�s most aggressive Service Level Agreements.
|
FraudWatch International
http://www.fraudwatchinternational.com
Tel: US +1-415-200-0621 or AU: +61-3-9887-6777
FraudWatch International is a specialist Anti-Phishing company, providing a
comprehensive Anti-Phishing service; protecting organizations around the
world against: Phishing, Pharming, Vishing and Trojan attacks. FraudWatch
maintains two 24x7 Security Operations Centers in North America and
Australia, with analysts working exclusively on Anti-Phishing. FraudWatch
clients receive outstanding customer service with FraudWatch's 24x7
monitoring & detection, real-time alerting of verified threats, incident
tracking & forensics portal with real-time one click reporting, threat
mitigation countermeasures and fast site blocking and take down services.
FraudWatch minimizes the impact of phishing attacks with a swift and
decisive incident response, thereby deterring future attacks by making our
clients a hard target.
Websense, Inc.
http://www.websense.com
Tel: 858 320 8000
Websense Enterprise® Security Premium Group™ blocks access to known phishing web sites. Using a series of proprietary processes, including data mining (such as signatures for spoofing utilizing browser vulnerabilities) and customer and partnership feedback. Websense identifies phishing sites and adds them automatically to the "Phishing and other frauds" category within the Websense Master Database for web filtering and web security. Discovered sites are also a key component of the Websense® Real-Time Security Updates™ that protect organizations in immediately from advanced phishing and malicious code threats.
Websense® Client Policy Manager™ blocks access to phishing based keyloggers, BOT's, and Trojan Horses. Real-time Security Updates to the application classification databases combined with the ability to block unknown attacks through lockdown and network lockdown, protect customers from phishing based malcode.
Panda Software
http://www.pandasoftware.com
Tel: +34 91 806 37 00
Panda Software, a world leader in virus and intrusion prevention, presents its new family of solutions. The new range of IT
security products boasts a series of outstanding technological innovations and caters for all clients, from the largest
corporations to home users. More information at: http://www.pandasoftware.com/products and http://www.pandasoftware.com/downloads/
McAfee, Inc.
http://www.mcafee.com
Tel: 1 (888) VIRUSNO
The McAfee VirusScan 8.0i product helps prevent end-user's machines from
being recruited and exploited as part of a Bot-Net by both detecting
Trojan and backdoor malicious code, protecting against buffer overrun
attacks and network attacks. Finally, all McAfee Antivirus products,
from the desktop to the server to the gateway include the the
world-class McAfee scan engine to detect and defend against key loggers
and script exploits that are often used in Phishing attacks.
McAfee Entercept and McAfee Foundstone protects protect ISPs from being
compromised and subsequently used to host Phishing sites by identifying
weaknesses and protecting against buffer overrun type attacks.
http://www.rsa.com
TEL: North America: 1- 877 RSA 4900 and Europe: + 00 800 2299 4613
RSA® FraudAction is a proven service offering complete fraud
protection against phishing, pharming and Trojan attacks - including
24x7 monitoring and detection, real-time alerts and reporting, forensics
and countermeasures, and site blocking and shutdown. At the core of the
FraudAction service is RSA's exclusive Anti-Fraud Command Center, a team
of elite researchers that remain on the forefront of fraud trends and
the latest online threats and have shut down nearly 300,000 online
attacks.
Symantec Online Fraud Management Solution
The Symantec Online Fraud Management Solution provides enterprises a
multi-pronged solution for mitigating online fraud. It protects
financial institutions and their customers by blocking fraudulent emails
from reaching consumers and alerting the company that its customers are
under attack. At the same time, the Symantec Online Fraud Management
Solution provides customer education, customer desktop security
assessment, and customer protection technologies that protect the
consumer as well as the enterprise network. In addition, it provides
services to share Symantec's online fraud expertise and ensure rapid
implementation.
| |
| Takedown |
Cyveillance, Inc.
http://www.cyveillance.com
Tel: 888 243 0097 or 703 351 1000
Cyveillance Anti-Phishing is a comprehensive, turnkey solution that enables organizations to prevent, detect, and recover from phishing and fraud-related malware attacks. Using its proprietary Internet monitoring technology, proven processes and procedures, and industry-leading security operations team, Cyveillance identifies targeted fraud activity such as suspicious domain registrations, phishing lures, spoof sites, malware distribution points and the post-attack gathering and exchange of compromised credentials. Cyveillance Anti-Phishing is uniquely capable of searching, processing and delivering technologically advanced phishing attacks in virtually any language. All Cyveillance services and OEM feeds are backed by the industry�s most aggressive Service Level Agreements.
MarkMonitor
http://www.markmonitor.com
Tel: +1 800 745 9229
MarkMonitor is the global leader in delivering comprehensive online corporate identity protection services, with a focus on making the Internet safe for business. MarkMonitor's integrated Brand and Fraud Protection platform provides full life-cycle management, including early warning, real-time detection, and investigation and response, to a wide and growing list of identity-based online security problems faced by corporations today. These solutions are enabled by a comprehensive brand and fraud intelligence network that monitors for inappropriate or fraudulent use of a corporate name or identity anywhere in the Internet, including web sites, search engines, major email systems, domain name systems, registries, message boards, blogs and chat rooms.
Telefónica
http://www.telefonica.es/
Telef�nica is one of the world leaders integrated operator in the
telecommunication sector, providing communication, information and
entertainment solutions, with presence in Europe, Africa and Latin America.
It operates in 25 countries and serves around 300 million customers
worldwide.
As a part of the IT portfolio, Telef�nica offers solutions that remotely
protect organizations against Phishing, Pharming and Trojan attacks,
operating out of our Security Operations Centre housed on a highly-secure
facility and providing 24x7 monitoring and detection, real-time alerts,
countermeasures, and site blocking & shutdown. Our global operator
footprint gives us a privileged network vision that allows us to monitor
behavior, detect anomalies and take action against fraud incidents.
FraudWatch International
http://www.fraudwatchinternational.com
Tel: US +1-415-200-0621 or AU: +61-3-9887-6777
FraudWatch International is a specialist Anti-Phishing company, providing a
comprehensive Anti-Phishing service; protecting organizations around the
world against: Phishing, Pharming, Vishing and Trojan attacks. FraudWatch
maintains two 24x7 Security Operations Centers in North America and
Australia, with analysts working exclusively on Anti-Phishing. FraudWatch
clients receive outstanding customer service with FraudWatch's 24x7
monitoring & detection, real-time alerting of verified threats, incident
tracking & forensics portal with real-time one click reporting, threat
mitigation countermeasures and fast site blocking and take down services.
FraudWatch minimizes the impact of phishing attacks with a swift and
decisive incident response, thereby deterring future attacks by making our
clients a hard target.
Easy Solutions Inc
www.easysol.net
Tel: +1-866-524-4782 or +57 1- 2362455
Easy Solutions is simplifying the way businesses deal with and effectively deploy � security for online transactions. We provide solutions for identifying and preventing online transaction fraud while helping institutions comply with existing US domestic and international two factor authentication requirements. Using our advanced transaction fraud prevention solutions, we help protect online businesses and enterprise applications from phishing attacks, online credential theft and Internet fraud threats.
|
Netcraft
netcraft_phishing_site_feed
Netcraft's service helps banks and other financial organizations combat phishing techniques, so that once a phishing site has been detected, Netcraft responds with a set of actions which will limit access to the site and should ultimately cause the fraudulent content to be eliminated.
BrandProtect
www.brandprotect.com
Tel: 866-721-3725 and 905-271-3725
As the leader in internet reputation management, BrandProtect empowers organizations to gain control over how they are represented online by uncovering and mitigating the issues that put their reputation at risk and erode customer trust. BrandProtect’s Response Services help detect, uncover and mitigate brand and trademark infringement issues, phishing attacks, web traffic diversions, website integrity issues and defamatory discussions.
BrandProtect was the first company of its kind to be offered full membership by the Forum for Incident Response and Security Teams (FIRST). It also has relationships with more than 3,500 Internet Service Providers globally, accounting for more than 90 percent of the traffic flowing across the internet.
VeriSign
http://www.verisign.com
Tel: +1 650 426 5130
VeriSign� Anti-Phishing Solution provides the most comprehensive security programs to minimize impacts from phishing attempts. It combines prevention, detection, and fast response via a customized program that meets each organization's security needs. VeriSign offers the benefits of security research intelligence, unique threat data available only to VeriSign and its customers, and around-the-clock support from online fraud experts. VeriSign uses its extensive monitoring and scanning capabilities to search for brand infringement, traffic-diversion tactics, and unwanted brand association with objectionable content. Brand monitoring lets companies know where their logos and content are used, or products distributed, without authorization. Our Phishing Response Service leverages extensive experience in Internet fraud services as well as a global network of contacts in the legal, government, and ISP communities to identify sources of phishing attacks and quickly shut down Web sites and accounts.
With a worldwide customer base and more than 4000 network-security devices under management, VeriSign views Internet activity with width and depth to comprehensively protect customers from emerging threats.
VeriSign Anti-Phishing Solutions
http://www.rsa.com
TEL: North America: 1- 877 RSA 4900 and Europe: + 00 800 2299 4613
RSA® FraudAction is a proven service offering complete fraud
protection against phishing, pharming and Trojan attacks - including
24x7 monitoring and detection, real-time alerts and reporting, forensics
and countermeasures, and site blocking and shutdown. At the core of the
FraudAction service is RSA's exclusive Anti-Fraud Command Center, a team
of elite researchers that remain on the forefront of fraud trends and
the latest online threats and have shut down nearly 300,000 online
attacks.
Internet Identity
http://www.internetidentity.com
Tel: 888 239 6932
Internet Identity provides 24/7 phishing web site deactivation services for several leading financial institutions and Internet service companies today, shuttering phishing sites within hours. We work as a stand-alone solution or as an additional expert resource for our clients' internal teams. Clients receive regular status updates and full post-incident reporting. Swift response to the first phishing attack is the most effective deterrent to future attacks.
| |
| Fraud analysis |
Easy Solutions Inc
www.easysol.net
Tel: +1-866-524-4782 or +57 1- 2362455
Easy Solutions is simplifying the way businesses deal with and effectively deploy � security for online transactions. We provide solutions for identifying and preventing online transaction fraud while helping institutions comply with existing US domestic and international two factor authentication requirements. Using our advanced transaction fraud prevention solutions, we help protect online businesses and enterprise applications from phishing attacks, online credential theft and Internet fraud threats.
BrandProtect
www.brandprotect.com
Tel: 866-721-3725 and 905-271-3725
As the leader in internet reputation management, BrandProtect empowers organizations to gain control over how they are represented online by uncovering and mitigating the issues that put their reputation at risk and erode customer trust. BrandProtect’s Response Services help detect, uncover and mitigate brand and trademark infringement issues, phishing attacks, web traffic diversions, website integrity issues and defamatory discussions.
BrandProtect was the first company of its kind to be offered full membership by the Forum for Incident Response and Security Teams (FIRST). It also has relationships with more than 3,500 Internet Service Providers globally, accounting for more than 90 percent of the traffic flowing across the internet.
FraudWatch International
http://www.fraudwatchinternational.com
Tel: US +1-415-200-0621 or AU: +61-3-9887-6777
FraudWatch International is a specialist Anti-Phishing company, providing a
comprehensive Anti-Phishing service; protecting organizations around the
world against: Phishing, Pharming, Vishing and Trojan attacks. FraudWatch
maintains two 24x7 Security Operations Centers in North America and
Australia, with analysts working exclusively on Anti-Phishing. FraudWatch
clients receive outstanding customer service with FraudWatch's 24x7
monitoring & detection, real-time alerting of verified threats, incident
tracking & forensics portal with real-time one click reporting, threat
mitigation countermeasures and fast site blocking and take down services.
FraudWatch minimizes the impact of phishing attacks with a swift and
decisive incident response, thereby deterring future attacks by making our
clients a hard target.
|
http://www.rsa.com
TEL: North America: 1- 877 RSA 4900 and Europe: + 00 800 2299 4613
RSA® FraudAction is a proven service offering complete fraud
protection against phishing, pharming and Trojan attacks - including
24x7 monitoring and detection, real-time alerts and reporting, forensics
and countermeasures, and site blocking and shutdown. At the core of the
FraudAction service is RSA's exclusive Anti-Fraud Command Center, a team
of elite researchers that remain on the forefront of fraud trends and
the latest online threats and have shut down nearly 300,000 online
attacks.
Cyveillance, Inc.
http://www.cyveillance.com
Tel: 888 243 0097 or 703 351 1000
Cyveillance Anti-Phishing is a comprehensive, turnkey solution that enables organizations to prevent, detect, and recover from phishing and fraud-related malware attacks. Using its proprietary Internet monitoring technology, proven processes and procedures, and industry-leading security operations team, Cyveillance identifies targeted fraud activity such as suspicious domain registrations, phishing lures, spoof sites, malware distribution points and the post-attack gathering and exchange of compromised credentials. Cyveillance Anti-Phishing is uniquely capable of searching, processing and delivering technologically advanced phishing attacks in virtually any language. All Cyveillance services and OEM feeds are backed by the industry�s most aggressive Service Level Agreements.
MarkMonitor
http://www.markmonitor.com
Tel: +1 800 745 9229
MarkMonitor is the global leader in delivering comprehensive online corporate identity protection services, with a focus on making the Internet safe for business. MarkMonitor's integrated Brand and Fraud Protection platform provides full life-cycle management, including early warning, real-time detection, and investigation and response, to a wide and growing list of identity-based online security problems faced by corporations today. These solutions are enabled by a comprehensive brand and fraud intelligence network that monitors for inappropriate or fraudulent use of a corporate name or identity anywhere in the Internet, including web sites, search engines, major email systems, domain name systems, registries, message boards, blogs and chat rooms.
| |
| Forensic services |
BrandProtect
www.brandprotect.com
Tel: 866-721-3725 and 905-271-3725
As the leader in internet reputation management, BrandProtect empowers organizations to gain control over how they are represented online by uncovering and mitigating the issues that put their reputation at risk and erode customer trust. BrandProtect’s Response Services help detect, uncover and mitigate brand and trademark infringement issues, phishing attacks, web traffic diversions, website integrity issues and defamatory discussions.
BrandProtect was the first company of its kind to be offered full membership by the Forum for Incident Response and Security Teams (FIRST). It also has relationships with more than 3,500 Internet Service Providers globally, accounting for more than 90 percent of the traffic flowing across the internet.
MarkMonitor
http://www.markmonitor.com
Tel: +1 800 745 9229
MarkMonitor is the global leader in delivering comprehensive online corporate identity protection services, with a focus on making the Internet safe for business. MarkMonitor's integrated Brand and Fraud Protection platform provides full life-cycle management, including early warning, real-time detection, and investigation and response, to a wide and growing list of identity-based online security problems faced by corporations today. These solutions are enabled by a comprehensive brand and fraud intelligence network that monitors for inappropriate or fraudulent use of a corporate name or identity anywhere in the Internet, including web sites, search engines, major email systems, domain name systems, registries, message boards, blogs and chat rooms.
|
Websense, Inc.
http://www.websense.com
Tel: 858 320 8000
Websense® Web Security Suites™ include a service called Brandwatcher™ which alerts Websense customers if their organization's web site or brand has been targeted in a phishing or malicious keylogging code attack. This service provides the organization with security intelligence including the attack details and other security-related information.
http://www.rsa.com
TEL: North America: 1- 877 RSA 4900 and Europe: + 00 800 2299 4613
RSA® FraudAction is a proven service offering complete fraud
protection against phishing, pharming and Trojan attacks - including
24x7 monitoring and detection, real-time alerts and reporting, forensics
and countermeasures, and site blocking and shutdown. At the core of the
FraudAction service is RSA's exclusive Anti-Fraud Command Center, a team
of elite researchers that remain on the forefront of fraud trends and
the latest online threats and have shut down nearly 300,000 online
attacks.
| |
| Application gateways |
Solutions Directory Category in Development
| |
| Consumer toolbars |
Netcraft
http://toolbar.netcraft.com
Netcraft Toolbars
The Netcraft Toolbar community is effectively a giant neighbourhood watch scheme, empowering the most alert and most expert members to defend everyone within the community against phishing frauds. Once the first recipients of a phishing mail have reported the target URL, it is blocked for community members as they subsequently access the URL. Widely disseminated attacks simply mean that the phishing attack will be reported and blocked sooner.
|
SecureBrain Corporation
http://www.securebrain.co.jp (Includes English-language pages.)
Tel: +81 3 3234 3001
PhishWall is the revolutionary Anti-Phishing solution that uses a new patent-pending
(PATPEND:2004-195208) "user-based" web server authentication technology
based on a public key encryption algorithm. Through the PhishWall
solution, corporations can offer a more secured Internet-based
e-commerce environment to their customers and protect them against
phishing attacks. SecureBrain PhishWall uses an established
cryptographic message exchange scheme to give consumer an easy graphical
way to assure he is on the proper Website for his banking, shopping and
payments, applications.
| |
| Email authentication |
GlobalSign
http://www.globalsign.net
Tel US: 1-866-511-5035 or Tel EU: +32-16-28-71-23 or Tel UK: +44 1622-766766
GlobalSign authentication solutions can help organizations protect and assure customers of online identities through the use of SSL and code signing. Its RA solutions allow organizations to manage policies and controls associated with identities of employees, suppliers and customers by using standards based client certificates for remote authentication (including SSL VPNs) and email security. Such GlobalSign solutions are used worldwide by major enterprises, educational establishments and Government bodies.
MarkMonitor
http://www.markmonitor.com
Tel: +1 800 745 9229
MarkMonitor is the global leader in delivering comprehensive online corporate identity protection services, with a focus on making the Internet safe for business. MarkMonitor's integrated Brand and Fraud Protection platform provides full life-cycle management, including early warning, real-time detection, and investigation and response, to a wide and growing list of identity-based online security problems faced by corporations today. These solutions are enabled by a comprehensive brand and fraud intelligence network that monitors for inappropriate or fraudulent use of a corporate name or identity anywhere in the Internet, including web sites, search engines, major email systems, domain name systems, registries, message boards, blogs and chat rooms.
|
The GoDaddy Group, Inc.
http://www.godaddy.com
Tel: 480 505 8800
GoDaddy's email solution supports SPF records.
Symantec Mail Security 8200 Series Appliances
enterprisesecurity.symantec
Symantec Mail Security 8200 Series is designed to provide
a secure e-mail gateway, helping to ensure an available
e-mail infrastructure. Customers are offered the highlest
level of spam and virus protection through the integration
of Symantec Brightmail AntiSpam and Symantec AntiVirus
technologies. Symantec Mail Security 8200 Series also
integrates volume management, attack prevention, content
filtering, encryption, anti-forgery and archiving functionality
into a single solution.
VeriSign
http://www.verisign.com
Tel: +1 650 426 5130
VeriSign® Trusted Messaging provides end-to-end security for high-value email by enabling employees to easily encrypt and digitally sign messages. Using VeriSign Trusted Messaging to secure sensitive information, an enterprise can expand its reach, deepen collaboration, streamline business processes, reduce paper-related and operational costs, and maximize the return on its existing email technology-without investing in additional software or hardware. By utilizing VeriSign® Trusted Messaging, enterprises can ensure the highest level of confidentiality and trust.
verisign.com . . . /trusted-messaging
| |
| Email filtering |
Iconix
http://www.iconix.com
TEL: 650-961-0120
ICONIX, Inc. is the leading innovator in trusted email identification solutions. Providing a value added identification service on top of Sender ID and DomainKeys/DKIM, including authentication support in webmail clients, the company�s visual eMail ID solution uses an icon to enable consumers to instantly identify which messages in their inbox are real, thereby enabling senders to restore trust in email communications with their customers.
MarkMonitor
http://www.markmonitor.com
Tel: +1 800 745 9229
MarkMonitor is the global leader in delivering comprehensive online corporate identity protection services, with a focus on making the Internet safe for business. MarkMonitor's integrated Brand and Fraud Protection platform provides full life-cycle management, including early warning, real-time detection, and investigation and response, to a wide and growing list of identity-based online security problems faced by corporations today. These solutions are enabled by a comprehensive brand and fraud intelligence network that monitors for inappropriate or fraudulent use of a corporate name or identity anywhere in the Internet, including web sites, search engines, major email systems, domain name systems, registries, message boards, blogs and chat rooms.
VeriSign
http://www.verisign.com
Tel: +1 650 426 5130
VeriSign® Messaging Security and Compliance Services offers a suite of solutions that secure enterprises from spam and virus attacks while providing the tools to help meet regulatory and legislative requirements to achieve messaging security and compliance. With a fully distributed network and high availability, VeriSign Messaging Security and Compliance Services delivers these capabilities today-without requiring any investment in hardware, software or storage systems.
verisign.com/.../messaging-security-and-compliance
Netcraft
netcraft_phishing_site_feed_available
Netcraft launched an anti-phishing system at the start of 2005: people install a toolbar and effectively become part of a giant neighbourhood watch system whereby the most experienced members of the community can report phishing sites and effectively block them for the rest of the community. Netcraft is now making available the list of phishing sites reported by the Toolbar community and validated by Netcraft as a continuously updated feed suitable for ISPs, hosting companies, enterprises, and other companies that operate mail servers and web proxies, or network monitoring systems.
McAfee, Inc.
http://www.mcafee.com
1-(888) VIRUSNO
McAfee SpamKiller® includes specific rules that help to identify
phishing attacks by looking for certain phishing specific
characteristics that can be present in e-mail. Once triggered, these
rules are automatically assigned an overall spam rating by SpamKiller,
which results, in most cases, with the messages being blocked. Together
with the Anti-Phishing Working Group (APWG), McAfee has compiled a
thorough database of phishing attacks and uses the knowledge from these
attacks to create effective filtering rules.
|
The GoDaddy Group, Inc.
http://www.godaddy.com
Tel: 480 505 8800
GoDaddy's email solution filters emails for spam and
phishing emails.
http://www.rsa.com
TEL: North America: 1- 877 RSA 4900 and Europe: + 00 800 2299 4613
RSA® FraudAction is a proven service offering complete fraud
protection against phishing, pharming and Trojan attacks - including
24x7 monitoring and detection, real-time alerts and reporting, forensics
and countermeasures, and site blocking and shutdown. At the core of the
FraudAction service is RSA's exclusive Anti-Fraud Command Center, a team
of elite researchers that remain on the forefront of fraud trends and
the latest online threats and have shut down nearly 300,000 online
attacks.
Norton Internet Security 2005/
Norton Internet Security 2005 is the easiest and most complete online
security and privacy suite for home users and small offices. Right out
of the box, Norton Internet Security 2005 provides comprehensive
protection against today's most prevalent Internet threats, including
viruses, worms, and Trojan horses as well as hackers, privacy threats,
spam email, and inappropriate Internet content.
Norton AntiSpam 2005
Norton AntiSpam 2005 is a powerful yet easy-to-use solution that
automatically and accurately detects and filters out unwanted e-mail at
the desktop. Enhanced filtering capabilities protect users from e-mail
spoofing and phishing scams as well as from sexually explicit content.
Symantec Brightmail AntiSpam 6.0
Symantec Brightmail AntiSpam 6.0 is designed to further protect
enterprises from the latest spamming techniques by providing new
non-English language filters and powerful administration enhancements.
Symantec Brightmail AntiSpam 6.0 includes a centralized Web-based
control center, consolidated logging and reporting, and global policies
that can be created on a per-user or per-group basis.
Symantec Mail Security 8200 Series Appliances
Symantec Mail Security 8200 Series is designed to provide a secure
e-mail gateway, helping to ensure an available e-mail infrastructure.
Customers are offered the highlest level of spam and virus protection
through the integration of Symantec Brightmail AntiSpam and Symantec
AntiVirus technologies. Symantec Mail Security 8200 Series also
integrates volume management, attack prevention, content filtering,
encryption, anti-forgery and archiving functionality into a single
solution.
Symantec Premium AntiSpam
Symantec Premium AntiSpam is an add-on subscription service, powered by
Brightmail technology and response, that provides best-of-breed spam
prevention for Symantec Mail Security and Symantec AntiVirus Enterprise
Edition customers.
| |
| Web filtering |
MarkMonitor
http://www.markmonitor.com
Tel: +1 800 745 9229
MarkMonitor is the global leader in delivering comprehensive online corporate identity protection services, with a focus on making the Internet safe for business. MarkMonitor's integrated Brand and Fraud Protection platform provides full life-cycle management, including early warning, real-time detection, and investigation and response, to a wide and growing list of identity-based online security problems faced by corporations today. These solutions are enabled by a comprehensive brand and fraud intelligence network that monitors for inappropriate or fraudulent use of a corporate name or identity anywhere in the Internet, including web sites, search engines, major email systems, domain name systems, registries, message boards, blogs and chat rooms.
Netcraft
netcraft_phishing_site_feed_available
Netcraft launched an anti-phishing system at the start of 2005: people install a toolbar and effectively become part of a giant neighbourhood watch system whereby the most experienced members of the community can report phishing sites and effectively block them for the rest of the community. Netcraft is now making available the list of phishing sites reported by the Toolbar community and validated by Netcraft as a continuously updated feed suitable for ISPs, hosting companies, enterprises, and other companies that operate mail servers and web proxies, or network monitoring systems.
Websense, Inc.
http://www.websense.com
Tel: 858 320 8000
Websense Enterprise® Security Premium Group™ blocks access to known phishing web sites. Using a series of proprietary processes, including data mining (such as signatures for spoofing utilizing browser vulnerabilities) and customer and partnership feedback. Websense identifies phishing sites and adds them automatically to the "Phishing and other frauds" category within the Websense Master Database for web filtering and web security. Discovered sites are also a key component of the Websense® Real-Time Security Updates™ that protect organizations in immediately from advanced phishing and malicious code threats.
|
Cyveillance, Inc.
http://www.cyveillance.com
Tel: 888 243 0097 or 703 351 1000
Cyveillance Anti-Phishing is a comprehensive, turnkey solution that enables organizations to prevent, detect, and recover from phishing and fraud-related malware attacks. Using its proprietary Internet monitoring technology, proven processes and procedures, and industry-leading security operations team, Cyveillance identifies targeted fraud activity such as suspicious domain registrations, phishing lures, spoof sites, malware distribution points and the post-attack gathering and exchange of compromised credentials. Cyveillance Anti-Phishing is uniquely capable of searching, processing and delivering technologically advanced phishing attacks in virtually any language. All Cyveillance services and OEM feeds are backed by the industry�s most aggressive Service Level Agreements.
http://www.rsa.com
TEL: North America: 1- 877 RSA 4900 and Europe: + 00 800 2299 4613
RSA® FraudAction is a proven service offering complete fraud
protection against phishing, pharming and Trojan attacks - including
24x7 monitoring and detection, real-time alerts and reporting, forensics
and countermeasures, and site blocking and shutdown. At the core of the
FraudAction service is RSA's exclusive Anti-Fraud Command Center, a team
of elite researchers that remain on the forefront of fraud trends and
the latest online threats and have shut down nearly 300,000 online
attacks.
| |
| Hardware based 2-factor authentication |
VeriSign
http://www.verisign.com
Tel: +1 650 426 5130
VeriSign® Unified Authentication is the most comprehensive strong authentication solution, offering a wide choice of credentials, devices, and deployment options for securing global enterprises. VeriSign Unified Authentication provides a single, integrated platform for provisioning and managing any type of two-factor authentication credential. By adhering to open standards and leveraging your existing infrastructure, Unified Authentication greatly reduces the cost and complexity of deploying a strong authentication solution. VeriSign Intelligent Infrastructure lends scalability to the Unified Authentication technology, giving you flexibility to expand your business and greater control of your network security environment.
VeriSign Unified Authentication
VASCO Data Security
http://www.vasco.com
Tel: +1 508 366 3400 (US) and +32 2 456 9810 (Belgium)
DIGIPASS handheld tokens generate Dynamic Passwords, which are
time-based and/or event-based, and are used by 350 Banks and many
Corporations in the world. Dynamic Passwords can be: One Time Password, Challenge/Response, Host
Authentication and Signature Password. Integration Libraries for any Operating System available, already
integrated in many commercial security solutions.
|
http://www.rsa.com
TEL: North America: 1- 877 RSA 4900 and Europe: + 00 800 2299 4613
RSA® FraudAction is a proven service offering complete fraud
protection against phishing, pharming and Trojan attacks - including
24x7 monitoring and detection, real-time alerts and reporting, forensics
and countermeasures, and site blocking and shutdown. At the core of the
FraudAction service is RSA's exclusive Anti-Fraud Command Center, a team
of elite researchers that remain on the forefront of fraud trends and
the latest online threats and have shut down nearly 300,000 online
attacks.
Easy Solutions Inc
www.easysol.net
Tel: +1-866-524-4782 or +57 1- 2362455
Easy Solutions is simplifying the way businesses deal with and effectively deploy � security for online transactions. We provide solutions for identifying and preventing online transaction fraud while helping institutions comply with existing US domestic and international two factor authentication requirements. Using our advanced transaction fraud prevention solutions, we help protect online businesses and enterprise applications from phishing attacks, online credential theft and Internet fraud threats.
| |
| Software-based Strong Authentication |
http://www.rsa.com
TEL: North America: 1- 877 RSA 4900 and Europe: + 00 800 2299 4613
RSA® FraudAction is a proven service offering complete fraud
protection against phishing, pharming and Trojan attacks - including
24x7 monitoring and detection, real-time alerts and reporting, forensics
and countermeasures, and site blocking and shutdown. At the core of the
FraudAction service is RSA's exclusive Anti-Fraud Command Center, a team
of elite researchers that remain on the forefront of fraud trends and
the latest online threats and have shut down nearly 300,000 online
attacks.
GlobalSign
http://www.globalsign.net
Tel US: 1-866-511-5035 or Tel EU: +32-16-28-71-23 or Tel UK: +44 1622-766766
GlobalSign authentication solutions can help organizations protect and assure customers of online identities through the use of SSL and code signing. Its RA solutions allow organizations to manage policies and controls associated with identities of employees, suppliers and customers by using standards based client certificates for remote authentication (including SSL VPNs) and email security. Such GlobalSign solutions are used worldwide by major enterprises, educational establishments and Government bodies.
|
Easy Solutions Inc
www.easysol.net
Tel: +1-866-524-4782 or +57 1- 2362455
Easy Solutions is simplifying the way businesses deal with and effectively deploy � security for online transactions. We provide solutions for identifying and preventing online transaction fraud while helping institutions comply with existing US domestic and international two factor authentication requirements. Using our advanced transaction fraud prevention solutions, we help protect online businesses and enterprise applications from phishing attacks, online credential theft and Internet fraud threats.
| |
| Mutual authentication |
GlobalSign
http://www.globalsign.net
Tel US: 1-866-511-5035 or Tel EU: +32-16-28-71-23 or Tel UK: +44 1622-766766
GlobalSign authentication solutions can help organizations protect and assure customers of online identities through the use of SSL and code signing. Its RA solutions allow organizations to manage policies and controls associated with identities of employees, suppliers and customers by using standards based client certificates for remote authentication (including SSL VPNs) and email security. Such GlobalSign solutions are used worldwide by major enterprises, educational establishments and Government bodies.
Easy Solutions Inc
www.easysol.net
Tel: +1-866-524-4782 or +57 1- 2362455
Easy Solutions is simplifying the way businesses deal with and effectively deploy � security for online transactions. We provide solutions for identifying and preventing online transaction fraud while helping institutions comply with existing US domestic and international two factor authentication requirements. Using our advanced transaction fraud prevention solutions, we help protect online businesses and enterprise applications from phishing attacks, online credential theft and Internet fraud threats.
|
Cyveillance, Inc.
http://www.cyveillance.com
Tel: 888 243 0097 or 703 351 1000
Cyveillance Anti-Phishing is a comprehensive, turnkey solution that enables organizations to prevent, detect, and recover from phishing and fraud-related malware attacks. Using its proprietary Internet monitoring technology, proven processes and procedures, and industry-leading security operations team, Cyveillance identifies targeted fraud activity such as suspicious domain registrations, phishing lures, spoof sites, malware distribution points and the post-attack gathering and exchange of compromised credentials. Cyveillance Anti-Phishing is uniquely capable of searching, processing and delivering technologically advanced phishing attacks in virtually any language. All Cyveillance services and OEM feeds are backed by the industry�s most aggressive Service Level Agreements.
| |
| Law enforcement enablement |
BrandProtect
www.brandprotect.com
Tel: 866-721-3725 and 905-271-3725
As the leader in internet reputation management, BrandProtect empowers organizations to gain control over how they are represented online by uncovering and mitigating the issues that put their reputation at risk and erode customer trust. BrandProtect’s Response Services help detect, uncover and mitigate brand and trademark infringement issues, phishing attacks, web traffic diversions, website integrity issues and defamatory discussions.
BrandProtect was the first company of its kind to be offered full membership by the Forum for Incident Response and Security Teams (FIRST). It also has relationships with more than 3,500 Internet Service Providers globally, accounting for more than 90 percent of the traffic flowing across the internet.
http://www.rsa.com
TEL: North America: 1- 877 RSA 4900 and Europe: + 00 800 2299 4613
RSA® FraudAction is a proven service offering complete fraud
protection against phishing, pharming and Trojan attacks - including
24x7 monitoring and detection, real-time alerts and reporting, forensics
and countermeasures, and site blocking and shutdown. At the core of the
FraudAction service is RSA's exclusive Anti-Fraud Command Center, a team
of elite researchers that remain on the forefront of fraud trends and
the latest online threats and have shut down nearly 300,000 online
attacks.
|
Cyveillance, Inc.
http://www.cyveillance.com
Tel: 888 243 0097 or 703 351 1000
Cyveillance Anti-Phishing is a comprehensive, turnkey solution that enables organizations to prevent, detect, and recover from phishing and fraud-related malware attacks. Using its proprietary Internet monitoring technology, proven processes and procedures, and industry-leading security operations team, Cyveillance identifies targeted fraud activity such as suspicious domain registrations, phishing lures, spoof sites, malware distribution points and the post-attack gathering and exchange of compromised credentials. Cyveillance Anti-Phishing is uniquely capable of searching, processing and delivering technologically advanced phishing attacks in virtually any language. All Cyveillance services and OEM feeds are backed by the industry�s most aggressive Service Level Agreements.
MarkMonitor
http://www.markmonitor.com
Tel: +1 800 745 9229
MarkMonitor is the global leader in delivering comprehensive online corporate identity protection services, with a focus on making the Internet safe for business. MarkMonitor's integrated Brand and Fraud Protection platform provides full life-cycle management, including early warning, real-time detection, and investigation and response, to a wide and growing list of identity-based online security problems faced by corporations today. These solutions are enabled by a comprehensive brand and fraud intelligence network that monitors for inappropriate or fraudulent use of a corporate name or identity anywhere in the Internet, including web sites, search engines, major email systems, domain name systems, registries, message boards, blogs and chat rooms.
| |
|
