MEDIA ALERT: ZONEALARM FORCEFIELD PROTECTS AGAINST ADOBE FLASH HACK
Browser virtualization uniquely defends against new exploit discovered at CanSecWest
REDWOOD CITY, CALIF. – April 9, 2008 - Check Point® Software Technologies Ltd. (Nasdaq: CHKP), the worldwide leader in securing the Internet, today verified that ZoneAlarm® ForceField™, a powerful browser security solution currently available as a free public beta, inherently protects against a browser-based Adobe Flash exploit discovered by Shane Macaulay, recent winner of the PWN to OWN contest at the CanSecWest security conference.
The purpose of the PWN to OWN contest is to responsibly unearth new vulnerabilities within the Macintosh, Windows and Linux operating systems so that the affected vendor(s) can address them. The exploit was disclosed to Adobe.
Macaulay, working with the ZoneAlarm development team, verified that ZoneAlarm ForceField prevented the exploit’s arbitrary code from affecting the PC’s real file system and registry. Through the use of precision browser virtualization technology, ZoneAlarm ForceField was able to contain the attack inside the “sandbox” and prevent any permanent changes from being made to the operating system.
“Shane’s hack was particularly interesting, because a signature-based security solution would not have protected the user. Users with ForceField on their PC would have been protected out of the gate,” said Laura Yecies, vice president and general manager of Check Point’s ZoneAlarm consumer division. “By virtualizing the browser, attacks are contained in a bubble of security. It’s a critical layer of protection in today’s new Web-based attack environment.”
ZoneAlarm ForceField is the first virtualized, on-demand browser security solution to enable consumers to bank and shop online or surf dangerous areas of the Internet without fear or limitation. Created with the principle that it should never interrupt or degrade a user’s browsing experience, ForceField works in the background to silently block the dangerous, automatic “drive-by” Web downloads that users don’t invite. ForceField simultaneously allows the things that make Web surfing convenient and easy, including first-party cookies and user-approved file downloads.
Built from the ground-up specifically to fight the emerging classes of browser-based Web threats, ForceField has additional security layers that augment its virtualization layer as well as an optional “Privacy Mode” that erases all personal information after a Web browsing session to further protect consumer privacy online. ForceField is currently being offered as a free beta, which can be downloaded at www.zonealarm.com.
About Check Point Software Technologies Ltd.
Check Point Software Technologies Ltd. (www.checkpoint.com) is the leader in securing the Internet. Check Point offers total security solutions featuring a unified gateway, single endpoint agent and single management architecture, customized to fit customers’ dynamic business needs. We are unique in this offering as a result of our leadership and innovation in the enterprise firewall, personal firewall/endpoint, data security and VPN markets,
Check Point’s pure focus is on information security. Through its NGX platform, Check Point delivers a unified security architecture to protect business communications and resources, including corporate networks and applications, remote employees, branch offices and partner extranets. The company also offers market-leading endpoint and data security solutions with Check Point Endpoint Security products, protecting and encrypting sensitive corporate information stored on PCs and other mobile computing devices. Check Point's award-winning ZoneAlarm solutions protect millions of consumer PCs from hackers, spyware and identity theft. Check Point solutions are sold, integrated and serviced by a network of Check Point partners around the world and its customers include 100 percent of Fortune 100 companies and tens of thousands of businesses and organizations of all sizes.
Check Point Software Technologies
Kip E. Meintzer
Check Point Software Technologies
©2003–2008 Check Point Software Technologies Ltd. All rights reserved. Check Point, AlertAdvisor, Application Intelligence, Check Point Endpoint Security, Check Point Express, Check Point Express CI, the Check Point logo, ClusterXL, Confidence Indexing, ConnectControl, Connectra, Connectra Accelerator Card, Cooperative Enforcement, Cooperative Security Alliance, CoreXL, CoSa, DefenseNet, Dynamic Shielding Architecture, Eventia, Eventia Analyzer, Eventia Reporter, Eventia Suite, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1, Hacker ID, Hybrid Detection Engine, IMsecure, INSPECT, INSPECT XL, Integrity, Integrity Clientless Security, Integrity SecureClient, InterSpect, IPS-1, IQ Engine, MailSafe, NG, NGX, Open Security Extension, OPSEC, OSFirewall, Pointsec, Pointsec Mobile, Pointsec PC, Pointsec Protector, Policy Lifecycle Management, Provider-1, PureAdvantage, PURE Security, the puresecurity logo, Safe@Home, Safe@Office, SecureClient, SecureClient Mobile, SecureKnowledge, SecurePlatform, SecurePlatform Pro, SecuRemote, SecureServer, SecureUpdate, SecureXL, SecureXL Turbocard, Security Management Portal, Sentivist, SiteManager-1, SmartCenter, SmartCenter Express, SmartCenter Power, SmartCenter Pro, SmartCenter UTM, SmartConsole, SmartDashboard, SmartDefense, SmartDefense Advisor, Smarter Security, SmartLSM, SmartMap, SmartPortal, SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartViewTracker, SMP, SMP On-Demand, SofaWare, SSL Network Extender, Stateful Clustering, TrueVector, Turbocard, UAM, UserAuthority, User-to-Address Mapping, UTM-1, UTM-1 Edge, UTM-1 Edge Industrial, UTM-1 Total Security, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Express, VPN-1 Express CI, VPN-1 Power, VPN-1 Power Multi-core, VPN-1 Power VSX, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 UTM, VPN-1 UTM Edge, VPN-1 VSX, Web Intelligence, ZoneAlarm, ZoneAlarm Anti-Spyware, ZoneAlarm Antivirus, ZoneAlarm ForceField, ZoneAlarm Internet Security Suite, ZoneAlarm Pro, ZoneAlarm Secure Wireless Router, Zone Labs, and the Zone Labs logo are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. ZoneAlarm is a Check Point Software Technologies, Inc. Company. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S. Patent No. 5,606,668, 5,835,726, 5,987,611, 6,496,935, 6,873,988, 6,850,943, and 7,165,076 and may be protected by other U.S. Patents, foreign patents, or pending applications.