Last August, one of the largest bank in India had its website compromised, redirecting any visitors to a hackers' server. For those site visitors whose Windows operating systems were un-patched, some 31 different malwares were being pushed onto their PCs.

As a result, the bank's site had to be shut down in order to address the issue. An analysis done by Sunbelt Software revealed that the malware posted on both the hackers' server and the bank website included worm, Trojans and password stealers.

Malware installs themselves onto systems and can contaminate important areas including system files and registries, or worst, steal confidential information, destroy data and shutdown systems.

To install malwares onto a system, a typical hacker will (remotely or locally) penetrate into the system, gain proper privileges (often called or referred as “super user”, “root” or “admin” privileges) and modify system configuration in order to keep control of the system and so install malwares, modify Web pages, steal information…

    RetiShield

RetiShield from Reti Corp. is a software based solution that can address all issues caused by today's information security threats, emphasizing on controlling data access and modification.

RetiShield will help you to easily implement your security policies in order to regulate, audit and control your sensitive resources but also to prevent hacking and malwares installation.

In our example above, even if an attacker had manage to penetrate into the system and gain super user (“admin”) privileges, RetiShield Mandatory Access Control mechanism would not have permitted any unauthorized access to system resources nor malware installation or web server pages modification. Meanwhile, all hacking and access attempts would have been recorded, proving a detailed auditing trail for investigation purpose.

In your risk management process, RetiShield will allow you to ensure the degree of confidence in your security needs to protect your servers, access to their information and achieve proper regulatory compliance.