Secure Computing TrustedSource
The Next Generation Reputation System for Enterprise Gateway Security

TrustedSource Global Reputation Intelligence:

Secure Computing's TrustedSource global Internet reputation intelligence system is the world’s first and foremost authority on cyber-reputation scores. Similar to how a credit bureau generates a credit score for anyone who is buying a home or a car, TrustedSource analyses email and web traffic to determine who has a good cyber-reputation and who shouldn’t be trusted.

TrustedSource Everywhere:

TrustedSource reputation intelligence forms the backbone of all Secure Computing appliances and is deployed on other products around the world, strengthening its accuracy across the board. TrustedSource can be deployed at the network gateway and/or applications gateways, depending on the type of reputations being analyzed. Since TrustedSource is highly refined and proven to be accurate and reliable, false positives are virtually a non-issue; the traffic that needs to get through reaches its destination. TrustedSource adds an extra layer of proactive protection to all of these solutions.

What You Do = Who You Are:

TrustedSource uses hundreds of different of calculations to determine what is good and bad behavior on the web. TrustedSource examines how often an IP sender sends mail, how many times the same email is sent out, how their sending pattern matches the norm, and literally thousands of other criteria.

Multiple Reputation Correlation:

It’s not enough to calculate the reputation of one component. After all, a credit agency can’t develop an accurate picture of your credit worthiness just by looking at your bank statement. It takes multiple aspects correlated together to form a comprehensive profile of cyber-trustworthiness.

TrustedSource develops reputations scores for:

• IP addresses
• Messages
• Images
• Attachments
• URLs
• Domains

TrustedSource:

• Volume of reputation data - TrustedSource sees more emails sent to enterprises and governments than any other messaging security technology in the world.
• Quality of reputation data - TrustedSource correlates reputations assigned to each identity by intelligently aggregating the global behavioral and sending pattern knowledge available for each sender.
• Accuracy of reputation data - TrustedSource conducts real-time behavior analysis using hundreds of behavior classifiers that examine thousands of characteristics and typically identifies hundreds of thousands of new zombies a day.
• Strength of Multiples - TrustedSource adds IP + Message + URL + Domain + Image reputation scores together to allow for instant identification and prevention of blended threats

Adding these scores together is just one of the ways that TrustedSource is able to protect our customers from blended threats ... attacks that might start with an email but end on a web site.

Volume Matters:

When it comes to statistical data, the amount of relevant information reviewed makes a significant difference. This is another area where no one else can compete with TrustedSource. Focused solely on business, enterprise and public sector data, TrustedSource has access to more Internet messages, information content evaluation, and traffic than any other reputation service in the world. The table below illustrates this.

This is a query done of TrustedSource and another leading competitor in October of 2007 of same of the major domains on the internet. The quantity indicates the number of IP senders associated with that domain according to TrustedSource and its competitor. Obviously the more information available about a domain, the more accurate the reputation will be.

Volume isn’t the End of the Story:

TrustedSource flags changes in the behavior of Internet entities based on a combination of data from messaging volume to affiliations with URLs and malware – data from Secure Computing research labs. For example, TrustedSource has often flagged an Internet entity as a malicious sender (resulting in traffic from that sender being blocked by Secure Computing appliances and other appliances that use TrustedSource) long before sending volumes reached a malicious level. The reputation change was triggered by TrustedSource detecting that the IPs were sending malware or messages that contained URLs that were linked to known malicious schemes. This powerful combination of messaging, web, malware and firewall traffic analysis is unique to Secure Computing and to TrustedSource.

For example, in the screen shown here, TrustedSource flagged this IP sender as malicious (shown by the red bars) long before the sending pattern spiked. Bottom line, other reputation systems may appear the same, but the depth of their analysis can’t begin to match the power of TrustedSource.

Find out more for yourself. Go to www.trustedsource.org for up-to-the-minute information about Internet threats, domain and URL reputation. You can also request a free Domain Health Check on your organization to see first hand your company’s reputation score.