Arxceo signs first OEM agreement; market recognizes value of anomaly-based cyber defense

Published 15 December 2005

You may have received a call from your credit card company asking whether it was really you who purchased thousands of dollars worth of lingerie in Hawaii two weeks ago; why did they call you? Anomalous behavior, that’s why; now a similar same behavior-based defense is brought to corporate IT security

Huntsville, Alabama Arxceo, a developer of anti-reconnaissance and anomaly-based intrusion prevention technology, announced its first OEM licensing agreement with Mountain View, California-based ShotSpotter, a developer of systems and technologies to detect and locate gunfire for law-enforcement, homeland security, and U.S. military operations. This agreement is good news for Arxceo, as it marks the first design application for Arxceo’s patent-pending technology. It also shows the market’s recognition of the importance of anomaly-based, anti-reconnaissance intrusion prevention technology for small embedded devices.

ShotSpotter offers three systems — a small, walkie-talkie sized unit for soldiers and emergency personnel to wear; a larger vehicle-mounted unit; and wireless fixed points for building top locations. Arxceo will integrate its Tag-UR-IT anti-reconnaissance and anomaly behavior intrusion prevention technology into each of these hardware products to harden and secure the devices from network attackers. ShotSpotter’s systems allow field personnel and command control teams to make faster decisions by alerting them to the type and location of weapons being fired.

ShotSpotter will also use Arxceo’s Ally IP1000 (see below) to protect law enforcement customers’ data as it travels back and forth against network reconnaissance, spoofed traffic, session hijacking, DNS cache poisoning, data leaks, and protocol abuse. Arxceo’s Ally IP1000 complements existing firewalls and other security points within an organization’s network. Arxceo’s approach makes it very difficult to target the Ally IP1000 as it does not use a network stack or IP address and is, therefore, invisible on the network. Arxceo’s system works this way: Tag-UR-IT tags packets as they enter or exit an Ally-protected network segment. These tags contain special encoded information the Ally IP1000 uses to analyze and prevent network attacks including zero-day exploits.

-read more in this news release

Arxceo’s Ally security appliances

Ally IP1000 - 1 Gbps

Ally ip100 — 100 Mbps (the small device in foreground)