Skip Links

Network World

  • Social Web 
  • Email 
  • Close
Printer friendly Feedback

Sana Security: A start-up to watch

These young vendors offer fresh approaches for addressing today's enterprise network challenges, from setting up secure wireless LANs to virtualizing data center resources.
By Ellen Messmer , Network World , 04/21/2003
Sana illo

Sana Security

Company name: The founder sees parallels between the human immune system and computers, believing you can "sanitize" server programs against new threats, such as attempts to exploit vulnerabilities.

Origin: Founded in October 2000 by Steven Hofmeyr, a computer scientist and authority on computer security, immunology and adaptive computation.

Funding: A $10 million second round closed in June 2002, bringing total funding to $12 million.

Investors: El Dorado Ventures, Esther Dyson Ventures, The Entrepreneur's Fund and Sevin Rosen Funds.

CEO: John Zicker, a veteran software entrepreneur.

Product: Primary Response.

Stopping known worm or hacker attacks is something many security products, including antivirus software and firewalls, can do these days. But recognizing and blocking a new and unknown attack? That's a bigger challenge, and start-up Sana Security is out to prove that you can guard your servers against the perils of the dark unknown.

Sana Security, of San Mateo, Calif., which spent last year in stealth mode under the name Company 51, made its debut in February with server-based software called Primary Response. The software learns the "normal behaviors" of server programs and operating systems in a few days, then is prepared to recognize attacks and either block them or alert administrators, says Steven Hofmeyr, founder and chief scientist.

For now, Primary Response runs on Sun Solaris and Microsoft Windows servers and is priced beginning at $6,500. The company plans IBM AIX and Linux versions.

Early adopters of the intrusion-prevention software buttress Hofmeyr's claim. "It detects changes and anomalies and gives you an alarm," says Tammy Lowe, CIO at Smith & Hawken, a retailer in Novato, Calif., that is rolling out Primary Response enterprisewide. "We've had people try and attack us from other countries, and it has detected and blocked [the attacks]."

Hofmeyr, a computer scientist who pursued his ideas while working a year at the Massachusetts Institute of Technology's Artificial Intelligence Lab, explains: "The body has the ability to take on new pathogens it hasn't seen before and respond to them." Computers can be given the same sort of advantage by constructing an "immune system" for them that detects abnormal activity, he says.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.