Home > Software > WTD Base Software > 05- Security Software

if the requested title not found under the base software, click the In-Scope Software 01- Host security softwareDesktop anti-virus and content-scanning software solutions usually operate on files, either stored on a device or in-transit. They detect the presence of malicious software through various techniques, such as attackignatures and heuristics. Note: Only client computer software is included here. Server anti-virus and security applications are included in the Security Software category. Firewall software solutions are designed to prevent unauthorized access to or from a private network by permitting or denying computer applications based upon a set of rules and other criteria. Firewalls typically function as filters, gateways and/or proxies. Application whitelisting software solutions permit only authorized applications to run on a system. There are also security software solutions that enable and manage security authentication and that are used to assign, maintain and revoke access to information and computer resources to an authenticated user or computer resource. Identity management software solutions identify individuals in a system and control access to resources in that system by placing restrictions on the established identities. These applications allow users to sign on once and gain access to multiple applications for which they are authorized. Security incident monitoring is included. Endpoint security software solutions support security at the desktop network boundary by distributing security applications to end-user devices (endpoints) on a network in a centrally managed fashion. Endpoint software determines the security posture of IT systems by passively scanning each device for service and OS-related vulnerabilities. Mobility security software solutions provide automatic security controls for mobile users that allow enterprises to deploy wireless tools that maintain security rules. In addition, these applications provide reporting tools to ensure that users are maximizing and controlling wireless costs. Publisher Software AccessData Forensic Tool Kit (FTK) Standalone, Forensic Tool Kit (FTK) Standalone Mobile Phone Examiner Plus (MPE+), Mobile Phone Examiner Plus (MPE+) Summation, Summation Cerberus, Cerberus AD TriageAD Triage Carbon Black CB Protection, CB Protection CB Collective Defense Cloud, CB Collective Defense Cloud CB Response (Bit9)CB Response (Bit9) Cellebrite UFED Touch2, UFED Touch2 UFED Cloud Analyzer, UFED Cloud Analyzer UFED Physical Analyser, UFED Physical Analyser 4PC, 4PC UFED Infield, UFED Infield Analytics DesktopAnalytics Desktop Magnet Software Axiom, Axiom Internet Evidence Finder (IEF), Internet Evidence Finder (IEF) Atlas (Triage), Atlas (Triage) Acquire (Mobile Artifact)Acquire (Mobile Artifact) McAfee Endpoint Protection Advanced Suite, Endpoint Protection Advanced Suite Application Control, Application Control Complete Endpoint Threat Protection, Complete Endpoint Threat Protection Threat Intelligence Exchange (TIE)Threat Intelligence Exchange (TIE) MSAB XRY Logical, XRY Logical XRY Physical, XRY Physical XAMN Horizon, XAMN Horizon XRY Pinpoint, XRY Pinpoint MSAB Kiosk (Logical and/or Physical), MSAB Kiosk (Logical and/or Physical) XRY Drone, XRY Drone XRY CloudXRY Cloud OpenText EnCase Forensic, EnCase Forensic Tableau, Tableau Encase Enpoint Investigator, Encase Enpoint Investigator EnCase Mobile Investigator, EnCase Mobile Investigator Encase e-discovery, Encase e-discovery Encase Portable, Encase Portable Analytics NAS (Examiner/SAFE)Analytics NAS (Examiner/SAFE) Passware Passware Kit Standard, Passware Kit Standard Passware Kit Standard Plus, Passware Kit Standard Plus Passware Kit Business, Passware Kit Business Passware Kit AgentsPassware Kit Agents Stormshield Endpoint SecurityEndpoint Security Symantec Endpoint Protection, Endpoint Protection Mail Security for MS Exchange AntivirusMail Security for MS Exchange Antivirus WinMagic SecureDoc EnterpriseSecureDoc Enterprise X-Ways Forensics, Forensics Imager, Imager InvestigatorInvestigator 02- Identification, authentication and authorization softwareSoftware used to ensure that only authenticated, authorized users can access information, applications and networks. Security software used to track and enforce access to software and information resources. Client-only software to be included. Publisher Software Gemalto SafeNet Authentication Client (SAC), SafeNet Authentication Client (SAC) SafeNet Authentication Service (SAS)SafeNet Authentication Service (SAS) Microsoft Microsoft Identity ManagerMicrosoft Identity Manager RSA Authentication Manager, Authentication Manager SecureID Hard Tokens, SecureID Hard Tokens SecureID Soft TokensSecureID Soft Tokens 03- Encryption softwareEncryption and cryptographic utilities software encrypts and decrypts data, usually in the form of files on (or sectors of) hard drives and removable media, email messages or network transmissions. Publisher Software Symantec Endpoint Encryption, Endpoint Encryption Desktop Email EncryptionDesktop Email Encryption McAfee Endpoint EncryptionEndpoint Encryption 04- Public Key Infrastructure (PKI) softwarePublic Key Infrastructure software solutions create, manage, distribute, use, store, and revoke digital certificates. In cryptography, a PKI is an arrangement that binds public keys with respective user identities by means of a certificate authority. Client-only software to be included. Publisher Software Symantec Public Key Infrastructure (PKI)Public Key Infrastructure (PKI) 05- Data loss prevention softwareDesignated data loss prevention software solutions detect and prevent unauthorized attempts to copy or send sensitive data, intentionally or unintentionally, without authorization, mainly by personnel who are authorized to access the sensitive information. In order to classify certain information as sensitive, these solutions use mechanisms, such as exact data matching, structured data fingerprinting, statistical methods, rule and regular expression matching, published lexicons, conceptual definitions and keywords. Such systems run on end-user workstations or servers in the organization. Like network-based systems, endpoint-based can address internal as well as external communications and can, therefore, be used to control information flow between groups or types of users. They can also control email and Instant Messaging communications before they are stored in the corporate archive, such that a blocked communication (i.e., one that was never sent and, therefore, not subject to retention rules) will not be identified in a subsequent legal discovery situation. Endpoint systems have the advantage that they can monitor and control access to physical devices (such as mobile devices with data storage capabilities) and, in some cases, can access information before it has been encrypted. Some endpoint-based systems can also provide application controls to block attempted transmissions of confidential information and provide immediate feedback to the user. They have the disadvantage that they need to be installed on every workstation in the network, cannot be used on mobile devices (e.g. cell phones and PDAs) or where they cannot be practically installed (for example on a workstation in an Internet caf�). Publisher Software McAfee Data Loss Prevention (DLP) Endpoint, Data Loss Prevention (DLP) Endpoint Total Protection for Data (TDA) SuiteTotal Protection for Data (TDA) Suite Symantec Data Loss Prevention (DLP), Data Loss Prevention (DLP) Protection Suite EnterpriseProtection Suite Enterprise