Engate Technology today announced a version of its antispam software that the company says includes the industry’s first preemptive
protection against phishing attacks.
MailSentinel 3.5, available now, features PhishFilet, Engate’s profiling technology that blocks phishing attacks at the network
level, according to company officials. Engate says catching phishing attacks at the network level results in 99% effectiveness and very few false positives.
New! Watch this Network World Webcast - Security Information Management Solutions: Beyond Threat Management
Engate CEO Wil Cochran says he can’t go into too much detail about how the new technology knows a phish when it sees one,
because the company has eight patents pending, but he says the feature was developed from the company’s existing technology
that catches spam at the network level.
MailSentinel 3.5 monitors inbound connection requests from e-mail senders, examining TCP headers and envelope information,
he explains. By working at this level, the software can determine whether the message is coming from the domain it claims
to be from; if the two don’t match, the software knows that the sender is pretending to be a different organization, or spoofing,
Cochran says.
While spoofing is an integral part of phishing, it’s also used by spam and other e-mail threats; how PhishFilet can distinguish
a spam message from a phishing attack is Engate’s secret, he says. Connection requests from senders determined to be phishers
are immediately dropped.
|