Follow Us

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

Startup unveils anti-malware browser add-on

Can its plan outflank Symantec, McAfee and the rest?

Article comments

A startup founded by four former Microsoft employees has released a beta of a real-time malware-blocking tool that also bars malicious content from reaching PCs.

Seattle-based Haute Secure's eponymous malware/site blocker enters a market crowded with the likes of McAfee's SiteAdvisor, Symantec's AntiBot, Exploit Prevention Labs' LinkScanner and even offerings from Google. Haute Secure, however, is counting on a multilayer strategy to see it past rivals.

The first layer, said Steve Anderson, who heads the company's product strategy, is a kernel-level driver that looks for and stops executables coming out of the browser. By monitoring multiple Windows processes and services - nearly six dozen in total - the tool watches for malicious behaviour, then blocks execution when it sniffs something dangerous. "We're hooking API [application programming interface] calls to the kernel and watching for malicious behavior coming from the browser," said Anderson.

A second layer blocks the links from which malware is delivered, he added. That tactic is probably more familiar to end users, since it's the technique used by Google's blacklisting efforts, which will be the foundation of a new feature in the upcoming Firefox 3.0. "We're blocking at the site and the page level," said Anderson, noting that many domains have multiple malicious URLs.

Haute Secure, which is currently ready only for Internet Explorer users - a Firefox version will roll into beta next month, and one for Apple's Safari is due out sometime after that - stores the malicious site/page blacklist locally to avoid performance problems, and it updates blacklists several times daily.

The software also can accept multiple blacklist feeds, a characteristic Haute Secure is counting on to deliver revenue down the road. "The way the system is designed, we can take numerous feeds from multiple sources," said Anderson. "In August, we'll [integrate] Google's antiphishing antimalware API, for example. The bigger idea is that we want to be the trusted platform between the Internet and users or enterprises."

A bank, for instance, that already collects the addresses of sites spoofing its legitimate online service, could add its feed to Haute Secure to guarantee that customers who use the tool would be protected.

Haute Secure will remain free to download and use while it is in beta testing, a process that will run into September. After that, Anderson said, plans are less clear. "We may charge for using the malware-blocking feature, since we think link scanning will be more and more commoditised." Under that plan, the blacklist-based layer would be provided free. Another revenue possibility, said Anderson, is to sell a malware-scanning service to companies that fear that their legitimate sites may be hacked at some point and start spewing malicious code. "That's an interesting model, too," said Anderson.

Haute Secure's other principals include Iain Mulholland, a former manager of the Microsoft security response centre; Frank Swiderski, a security researcher and developer who once worked at Microsoft, @Stake and the US Department of Defense; and Rob Vucic, a former Microsoft security researcher who was cited by the FBI for his help investigating the long-running and wide-ranging Zotob/Mytob worm attacks of 2005.

The Internet Explorer add-on, which runs on Windows XP and Vista - including the 64-bit version of the latter - can be downloaded from the Haute Secure site.



Share:

More from Techworld

More relevant IT news

Comments



Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Choose – and Choose Wisely – the Right MSP for Your SMB

End users need a technology partner that provides transparency, enables productivity, delivers...

Download Whitepaper

10 Effective Habits of Indispensable IT Departments

It’s no secret that responsibilities are growing while budgets continue to shrink. Download this...

Download Whitepaper

Gartner Magic Quadrant for Enterprise Information Archiving

Enterprise information archiving is contributing to organisational needs for e-discovery and...

Download Whitepaper

Advancing the state of virtualised backups

Dell Software’s vRanger is a veteran of the virtualisation specific backup market. It was the...

Download Whitepaper

Techworld UK - Technology - Business

Innovation, productivity, agility and profit

Watch this on demand webinar which explores IT innovation, managed print services and business agility.

Techworld Mobile Site

Access Techworld's content on the move

Get the latest news, product reviews and downloads on your mobile device with Techworld's mobile site.

Find out more...

From Wow to How : Making mobile and cloud work for you

On demand Biztech Briefing - Learn how to effectively deliver mobile work styles and cloud services together.

Watch now...

Site Map

* *