请输入您要查询的百科知识:

 

词条 Content Disarm & Reconstruction
释义

  1. Applications

  2. Commercial availability

  3. See also

  4. References

Content Disarm & Reconstruction (CDR) is a computer security technology for removing potentially malicious code from files. Unlike malware analysis, CDR technology does not determine or detect malware's functionality but removes all file components that are not approved within the system's definitions and policies.[1]

It is used to prevent cyber security threats from entering a corporate network perimeter. Channels that CDR can be used to protect include email and website traffic. Advanced solutions can also provide similar protection on computer endpoints, or cloud email and file sharing services.

Applications

CDR works by processing all incoming files of an enterprise network, deconstructing them, and removing the elements that do not match the file type's standards or set policies.[2] CDR technology then rebuilds the files into clean versions that can be sent on to end users as intended.[3]

Because CDR removes all potentially malicious code, it can be effective against zero-day vulnerabilities that rely on being an unknown threat that other security technologies would need to patch against to maintain protection.

CDR can be used to prevent cyber threats from variety of sources:

  • Email
  • Data Diodes
  • Web Browsers
  • Endpoints
  • File Servers
  • FTP
  • Cloud email or webmail programs
  • SMB/CIFS
  • Removable media scanning (CDR Kiosk)

Commercial availability

CDR or similar file sanitization technology is commercially available from a number of companies (sorted A-Z):

  • Check Point (Threat Extraction), Israel, a global company established in 1993[4].
  • Deep Secure (Content Threat Removal - CTR), a UK based Cyber Security provider[5].
  • Fortinet, USA, founded in 2000 and headquartered in Sunnyvale, California, with offices around the globe[6].
  • Glasswall Solutions (File Regeneration), a UK based Cyber Security technology organisation established in 2006[7].
  • Jiransecurity, South Korea, a highly-specialized Security SW company established in 2014[8].
  • Net at Work, Germany, through their Secure Email Gateway NoSpamProxy[9].
  • Peraton (Purifile) Peraton has significant experience providing highly differentiated secure communications, space, and technology solutions to the United States government [10].
  • ReSec Technologies, Israel, Established in 2012[11].
  • ODI-X, Israel, Developer of advanced, patented, TrueCDR™ technology[12].
  • OPSWAT, USA, a global cyber-security company founded in 2002 with offices in North America, Europe, and Asia[13].
  • Resec, ReSec is a company that develops innovative cyber security products, company founded in 2012 [14]
  • SASA Software (Gate Scanner CDR), established in 2013 headquartered in Israel with offices in the US and Singapore[15].
  • Softcamp, a South Korean information security company established in 1999 headquartered in South Korea with offices in Japan[16].
  • Votiro (Disarmer), an Israeli startup company established in 2010[17].
  • YazamTech, The most mature CDR Technology, Israeli based, established in 2008[18].

See also

  • Advanced persistent threat
  • Computer security
  • Cyber threats
  • Deep Content Inspection
  • Internet security
  • Content Threat Removal

References

1. ^{{cite web | url=http://www.csoonline.com/article/3061220/leadership-management/why-better-security-prevention-that-doesn-t-rely-on-detection-is-possible.html | title=Why better security prevention that doesn’t rely on detection is possible | work=CSO Online | date=April 25, 2016 | accessdate=August 16, 2016 | author=Santarcangelo, Michael}}
2. ^{{cite web | url=https://www.gartner.com/imagesrv/media-products/pdf/proofpoint/proofpoint-1-32WKFK7.pdf | title=Why Today's Phishing Attacks are Harder to Detect and How Proofpoint Can Help | work=Proofpoint | accessdate=August 16, 2016}}
3. ^{{cite web |last1=Yeroslav |first1=Yakov |title=File-Based Malware: Considering A Different And Specific Security Approach |url=https://www.informationsecuritybuzz.com/articles/file-based-malware-considering-a-different-and-specific-security-approach/ |accessdate=9 October 2018}}
4. ^{{Cite web|url=https://www.checkpoint.com/products/threat-extraction/|title=Threat Extraction Ensures Malware Free Documents|website=Check Point Software|language=en-US|access-date=2018-12-30}}
5. ^{{Cite web|url=https://www.deep-secure.com/|title=Deep Secure {{!}} Content Threat Removal|website=Deep Secure|language=en|access-date=2018-12-30}}
6. ^{{Cite web|url=https://help.fortinet.com/fos60hlp/60/Content/FortiOS/fortigate-whats-new/security-content-disarm.htm|title=FortiGuard content disarm and reconstruction|website=help.fortinet.com|language=en-us|access-date=2018-12-30}}
7. ^{{Cite web|url=https://www.glasswallsolutions.com/|title=Advanced Threat Protection (ATP) Security Software: Detect, Prevent, Protect.|website=Glasswall Solutions|language=en-GB|access-date=2018-12-30}}
8. ^{{Cite web|url=https://en.jiransecurity.com/|title=Global Jiransecurity|website=Partner Portal Service|access-date=2018-12-30}}
9. ^{{Cite web|url=https://www.nospamproxy.de/en/|title=NoSpamProxy by Net at Work: Proactive, real-time protection against spam, malware and ransomware.|website=NoSpamProxy|language=en-GB|access-date=2019-02-14}}
10. ^{{Cite web|url=https://www.peraton.com/who-we-are/}}
11. ^{{Cite web|url=https://resec.co/|title=ReSec Technologies: Malware prevention that doesn't depend on detection|last=alonpo|website=ReSec|language=en-US|access-date=2018-12-30}}
12. ^{{Cite web|url=https://odi-x.com/|title=ODI - Content Disarm & Reconstruction|last=|first=|date=|website=ODIX Content Disarm and Reconstruction (CDR)|language=en-US|archive-url=|archive-date=|dead-url=|access-date=2018-12-30}}
13. ^{{Cite web|url=https://www.opswat.com/products/metadefender|title=MetaDefender - Advanced Threat Prevention Platform|website=www.opswat.com|language=en-us|access-date=2018-12-30}}
14. ^{{Cite web|url=https://resec.co/}}
15. ^{{Cite web|url=http://www.sasa-software.com/|title=Sasa Software : Content Disarm and Reconstruction (CDR)|website=Sasa Software : Content Disarm and Reconstruction (CDR)|language=en-US|access-date=2018-12-30}}
16. ^{{Cite web|url=http://www.shieldex.biz/|title=CDR Solution|website=SOFTCAMP CDRㅣContent Disarm & Reconstruction|language=en|access-date=2018-12-30}}
17. ^{{Cite web|url=https://www.votiro.com/|title=Votiro Disarmer Takes Cyber Security to the Next-Generation|language=en-US|access-date=2018-12-30}}
18. ^{{Cite web|url=https://yazamtech.com/|title=YazamTech - Securing Your Network from Infected Files|website=YazamTech|language=en-US|access-date=2018-12-30}}

{{DEFAULTSORT:Content Disarm and Reconstruction}}

2 : Computer security|Cloud computing

随便看

 

开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。

 

Copyright © 2023 OENC.NET All Rights Reserved
京ICP备2021023879号 更新时间:2024/11/11 4:21:39