Personal Tech Pipeline | News | Free Search Engine Identifies Unknown Windows Files

White Papers

Sponsor Resources

WebCasts
Free Newsletter GlossaryContact UsAbout Us
Players & CamsPhones & PDAsHome & AutoOnline

March 10, 2006

Free Search Engine Identifies Unknown Windows Files



Courtesy of TechWeb News

Bit9 Inc. on Monday will launch a free search engine to identify unfamiliar software applications and executables found on any computer running the Windows operating system.

Users will be able to download a utility at Bit9's Web site to tap into the firm's 4-terabyte database at http://fileadvisor.bit9.com. The database holds approximately 25 million unique files and 250 million records to source and identify the software. Bit9 expects to triple the data the end of the year.

To keep up to date Bit9 collects and catalogs file data on commercial software and drivers from the Web, the National Institute of Standards and Technology (NIST)the National Software Reference Library (NSRL), IBM Corp., and other resources.

Unknown applications or executables are identified in the database by a "cryptographic hash, a mathematical algorithm that runs across the content of the file," said Bit9 Inc. vice president and co-founder John Hanratty, who also co-founded Synernetics, acquired by 3Com, and Agile Networks, scooped up by 3Com. "Any virus worth its chops will come in and rename itself as a legitimate name, for example, a file system."

FileAdvisor provides details on the file originator and the commercial software package it's contained in. Hanratty said the utility uses the cryptographic hash because it's common for malicious code to change its name so it appears harmless to the users.

Bit9 also will introduce the ParityCenter service to integrate with Bit9 Parity. The software provides network visibility to closely monitor unknown files as they are downloaded onto machines in an enterprise before they affect computers.

The problem is that "bad" always changes, said Hanratty. ParityCenter identifies that an executable file is of an unknown type, and keeps it from propagating.

While it's important to monitor unwanted software, IT professionals also "want the ability to control unauthorized and unlicensed software," he said. "They're spending as much money in virus and worm protection, as they are to clean up unauthorized utilities."

E-mail This Story
Print This Story
Reprint This Story




Get the latest Personal Tech news, product info, and trends every week.


Related Content

  Right-click and choose Copy to extract RSS Feed URL  Personal Tech Pipeline's Main RSS Feed
  Right-click and choose Copy to extract RSS Feed URL  Personal Tech Pipeline's Blog RSS Feed

<A HREF="http://as.cmpnet.com/event.ng/Type=click&amp;FlightID=52272&amp;AdID=87465&amp;TargetID=1491&amp;Segments=1411,1892,3108,3448,4526,4760&amp;Targets=1491,2625,2878,3743&amp;Values=34,46,51,63,77,85,93,100,140,222,227,399,442,645,646,1184,1405,1431,1685,1766,1785,1798,1901,1925,1945,2217,2299,2329,2678,2787,2956,3229,3347,3385&amp;RawValues=&amp;Redirect=http://www.xenos.com/infoleap" target="_top"><IMG SRC="http://i.cmpnet.com/ads/graphics/as5/dz/xenos/s4_336x280.gif" WIDTH=336 HEIGHT=280 BORDER=0></A>

Keeping Up To Date On Enterprise Server Tech?
Review our compilation of columns on server security, database software, and Linux issues.
How to Achieve High Performance Through IT
Learn to achieve high performance by aligning IT to
strategic objectives and solutions to unlock that value.
Using Current Performance to Shape
Future Results

Hear new strategies for improving business
performance and results.

Editor's Picks

Well, Microsoft has "unfolded" its "Origami" ultra-mobile PC platform Thursday. It turned out to be a full-featured PC smaller than a tablet but bigger than a PDA. Are you impressed?
Yes! I want one!
Sort of. We'll see.
No! It's too big for a pocket and too small for real computing. What's the point?


In search of personal tech products? See our new Product Finder, where you'll find personal computing devices, communications solutions, security products, and more.



PERSONAL TECH PIPELINE MARKETPLACE (sponsored links)
TESSCO, Your Total Source� in a wireless world.
TESSCO has everything today�s wireless professionals need to do business. Our TESSCO Solutions Guide features over 34,000 products from 350�world-class brands in one big book. Request your free copy today.

SENA Device Servers and Terminal Servers
Sena is a manufacturer of terminal servers, serial device servers, and wireless device servers, for device networking solution in the areas of IT/Telco, retail/POS, industrial automation, building automation, and medical automation.

Mobile and Wireless Accessories from LaptopParts
LaptopParts.com offers a large variety of mobile computing parts, replacements, and more.

Fast, Firewall Piercing Support Tools from LogMeIn
Whether you need temporary or permanent access to remote PCs, LogMeIn has your solution: LogMeIn IT Reach for automatic maintenance of remote and mobile systems, and LogMeIn Rescue for instant, web-based remote access without pre-installing software.

Laptop Battery
Go Electronic has a great selection of professional and consumer electronics at low prices. Including a vast selection of laptop batteries for everyday and hard to find computer models.


Buy a Link Now


Protecting HTTP traffic: An integral part of your security strategy
Application-Smart Networking for Fast, Reliable, Secure Application Deliver
CSC Worldwide IT consulting, systems integration, outsourcing
New Diskeeper 10 - Increase the performance of all your systems automatically! Try it free!
Top ten search terms from the TechWeb TechEncyclopedia