ENDPOINT DATA MINING Designed and patented data mining capability to turn every endpoint into a network sensor for US Military.

Transcription

1

2 NSA SPOCK PROGRAM Graduate of the National Security Agency Security Proof of Concept Keystone program in ENDPOINT DATA MINING Designed and patented data mining capability to turn every endpoint into a network sensor for US Military. APPMOAT + INTEL SGX AppMoat Enterprise officially launches at RSAC ENTERPRISE WHITELISTING Designed and patented enterprise class whitelisting technology under a CRADA for US Military. AUTOMATED APPLICATION REPAIR Designed and patented on-the-fly third party application repair technology for US Military. U.S. Patent No. 7,624,439 for Authenticating Resource Requests in a Computer System U.S. Patent No. 7,149,800 for Auditing Computer Systems Components in a Network U.S. Patent No. 7,685,174 for Automatic Regeneration of Computer Files

3 Protects Between Patches/Updates Software that is not specifically trusted runs without access to user or network data. Addresses ransomware and zero-day threats. Minimal Performance Impact AppMoat does not actively scan for threats or rely on behavior patterns. Broad Hardware Support Supports Windows 7 or higher. Intel SGX enabled hardware recommended. Intel SGX Integrated Signing key for local device is generated and stored in a secure enclave. Immediately Access New Software AppMoat runs new or modified software on-the-fly within a temporary container using alternate credentials. Supports Legacy Software Most software packages will run as intended with AppMoat protection. Infinite Scalability Processing for AppMoat is minimal and performed at each endpoint. Endpoints synchronize with a network service to provide centralized management. Transparent to End User User prompts are based upon access rights. Only admins are shown AppMoat notifications.

4 USER PROFILE AND SYSTEM DATA AppMoat runs non-trusted code with temporary credentials that cannot access real user profile data, documents, or system files. MAPPED NETWORK DRIVES AppMoat runs non-trusted code with temporary credentials that cannot access shared network resources such as mapped drives. USB FILE SYSTEMS AppMoat runs non-trusted code with temporary credentials that cannot access USB file systems. CONTACTS / PASSWORD KEYCHAINS AppMoat runs non-trusted code with temporary credentials that cannot access contacts, stored passwords, or other private data.

5 The Automated Enterprise Safety Net AppMoat can fully protect an enterprise endpoint without blocking software from running instantly on devices. AppMoat is the only tool short of process virtualization that can prevent a rogue program from stealing/inheriting the credentials of the authenticated user. Real-Time Limited Access Clean Reboot SafeLook accounts are generated on-the-fly. SafeLook accounts have limited access. SafeLook accounts reset at reboot. Sanitization App Settings App Data Executable content is scrubbed when the process exits. Application settings are preserved. Saved content is moved to the desktop after sanitization.

6

7 For more information about Seventh Knight and AppMoat, please visit Appmoat.com. Features and benefits depend on system configuration and may require specific hardware, software, or service activation. On-the-fly sandboxing requires NTFS Filesystem; Intel SGX capability requires compatible hardware. AppMoat is registered trademark of Seventh Knight Incorporated. All rights reserved. Intel, the Intel logo, SGX, and others are trademarks of Intel Corporation in the United States and/or other countries. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarks are the property of their respective owners.