Home > Software > WTD Base Software > 05- Security Software
if the requested title not found under the base software, click the In-Scope Software

01- Host security software Desktop anti-virus and content-scanning software solutions usually operate on files, either stored on a device or in-transit. They detect the presence of malicious software through various techniques, such as attackignatures and heuristics. Note: Only client computer software is included here. Server anti-virus and security applications are included in the Security Software category. Firewall software solutions are designed to prevent unauthorized access to or from a private network by permitting or denying computer applications based upon a set of rules and other criteria. Firewalls typically function as filters, gateways and/or proxies. Application whitelisting software solutions permit only authorized applications to run on a system. There are also security software solutions that enable and manage security authentication and that are used to assign, maintain and revoke access to information and computer resources to an authenticated user or computer resource. Identity management software solutions identify individuals in a system and control access to resources in that system by placing restrictions on the established identities. These applications allow users to sign on once and gain access to multiple applications for which they are authorized. Security incident monitoring is included. Endpoint security software solutions support security at the desktop network boundary by distributing security applications to end-user devices (endpoints) on a network in a centrally managed fashion. Endpoint software determines the security posture of IT systems by passively scanning each device for service and OS-related vulnerabilities. Mobility security software solutions provide automatic security controls for mobile users that allow enterprises to deploy wireless tools that maintain security rules. In addition, these applications provide reporting tools to ensure that users are maximizing and controlling wireless costs.

Publisher Software
AccessData
Forensic Tool Kit (FTK) Standalone, Forensic Tool Kit (FTK) Standalone
Mobile Phone Examiner Plus (MPE+), Mobile Phone Examiner Plus (MPE+)
Summation, Summation
Cerberus, Cerberus
AD Triage AD Triage
Carbon Black
CB Protection, CB Protection
CB Collective Defense Cloud, CB Collective Defense Cloud
CB Response (Bit9) CB Response (Bit9)
McAfee
Endpoint Protection Advanced Suite, Endpoint Protection Advanced Suite
Application Control, Application Control
Complete Endpoint Threat Protection, Complete Endpoint Threat Protection
Threat Intelligence Exchange (TIE) Threat Intelligence Exchange (TIE)
OpenText
EnCase Forensic, EnCase Forensic
Tableau, Tableau
Encase Enpoint Investigator, Encase Enpoint Investigator
EnCase Mobile Investigator, EnCase Mobile Investigator
Encase e-discovery, Encase e-discovery
Encase Portable, Encase Portable
Analytics NAS (Examiner/SAFE) Analytics NAS (Examiner/SAFE)
Passware
Passware Kit Standard, Passware Kit Standard
Passware Kit Standard Plus, Passware Kit Standard Plus
Passware Kit Business, Passware Kit Business
Passware Kit Agents Passware Kit Agents
Stormshield
Endpoint Security Endpoint Security
Symantec
Endpoint Protection, Endpoint Protection
Mail Security for MS Exchange Antivirus Mail Security for MS Exchange Antivirus
WinMagic
SecureDoc Enterprise SecureDoc Enterprise
X-Ways
Forensics, Forensics
Imager, Imager
Investigator Investigator

02- Identification, authentication and authorization software Software used to ensure that only authenticated, authorized users can access information, applications and networks. Security software used to track and enforce access to software and information resources. Client-only software to be included.

Publisher Software
Gemalto
SafeNet Authentication Client (SAC), SafeNet Authentication Client (SAC)
SafeNet Authentication Service (SAS) SafeNet Authentication Service (SAS)
Microsoft
Microsoft Identity Manager Microsoft Identity Manager
RSA
Authentication Manager, Authentication Manager
SecureID Hard Tokens, SecureID Hard Tokens
SecureID Soft Tokens SecureID Soft Tokens

03- Encryption software Encryption and cryptographic utilities software encrypts and decrypts data, usually in the form of files on (or sectors of) hard drives and removable media, email messages or network transmissions.

Publisher Software
Symantec
Endpoint Encryption, Endpoint Encryption
Desktop Email Encryption Desktop Email Encryption
McAfee
Endpoint Encryption Endpoint Encryption

04- Public Key Infrastructure (PKI) software Public Key Infrastructure software solutions create, manage, distribute, use, store, and revoke digital certificates. In cryptography, a PKI is an arrangement that binds public keys with respective user identities by means of a certificate authority. Client-only software to be included.

Publisher Software
Symantec
Public Key Infrastructure (PKI) Public Key Infrastructure (PKI)

05- Data loss prevention software Designated data loss prevention software solutions detect and prevent unauthorized attempts to copy or send sensitive data, intentionally or unintentionally, without authorization, mainly by personnel who are authorized to access the sensitive information. In order to classify certain information as sensitive, these solutions use mechanisms, such as exact data matching, structured data fingerprinting, statistical methods, rule and regular expression matching, published lexicons, conceptual definitions and keywords. Such systems run on end-user workstations or servers in the organization. Like network-based systems, endpoint-based can address internal as well as external communications and can, therefore, be used to control information flow between groups or types of users. They can also control email and Instant Messaging communications before they are stored in the corporate archive, such that a blocked communication (i.e., one that was never sent and, therefore, not subject to retention rules) will not be identified in a subsequent legal discovery situation. Endpoint systems have the advantage that they can monitor and control access to physical devices (such as mobile devices with data storage capabilities) and, in some cases, can access information before it has been encrypted. Some endpoint-based systems can also provide application controls to block attempted transmissions of confidential information and provide immediate feedback to the user. They have the disadvantage that they need to be installed on every workstation in the network, cannot be used on mobile devices (e.g. cell phones and PDAs) or where they cannot be practically installed (for example on a workstation in an Internet caf�).

Publisher Software
McAfee
Data Loss Prevention (DLP) Endpoint, Data Loss Prevention (DLP) Endpoint
Total Protection for Data (TDA) Suite Total Protection for Data (TDA) Suite
Symantec
Data Loss Prevention (DLP), Data Loss Prevention (DLP)
Protection Suite Enterprise Protection Suite Enterprise