The company calls the system intrusion protection, rather than IDS or intrusion prevention (IPS). RealSecure sits outside the data stream but has the ability to kill the sessions of suspected intrusion attempts using TCP/IP instructions, and can also tell firewalls to block attack.
Nokia director of security application product management Steve Scholl said the latest version put these kill routines closer to the kernel, improving responsiveness to a couple of hundred microseconds. The system now checks for protocol anomalies more efficiently, before checking data against attack signatures.
The ISS software is a major rewrite from earlier versions, which was released, originally for Windows, in July 2002. It took since then for the software to be ported to Nokia’s proprietary IPSO operating system and be tested to the company’s satisfaction, Scholl said.
Source: Computerwire
