Real-Time Security Checks and Tampering Alerts

Protect Running Applications from Malware and Tampering Attempts

Enterprise Challenge: Protect Running Applications from Malware
Applications are vulnerable to malware inserted by attackers that seek to tamper with or gain unauthorized access to critical applications or sensitive data.

Category of Threat	Runtime Attack Scenarios
Program Analysis for Unauthorized Access	Using a debugger, an attacker traces the code that calls the password check routine, which is then maliciously modified or circumvented.
Violation of Integrity for Malware Insertion	An attacker finds and replaces a critical function with nops to insert malicious code which is executed at runtime.
Exploitation for IP theft	An attacker copies proprietary algorithms by using a debugger and disassembler, resulting in loss of competitive advantage.

Enterprise Solution: Arxan Application Hardening and Control
GuardIT is Arxan’s software protection solution that inserts innovative modules of object code, called Guards, at the binary layer of running applications to perform real-time security checks and prompt notification of running applications to ensure against tampering.  Specifically, Arxan’s underlying  Guard technology enables:

• Real-time alerts from detecting adverse events.
• Real-time notification that can be seamlessly integrated into management consoles, such as those of our partners, to provide enterprises with immediate awareness of application tampering.
• Integration with ArcSight SIEM platform
• Security administrators to promptly launch appropriate remediation actions based on accurate and dynamic intelligence.

The resultant protection provides an unprecedented level of application control and security to thwart tampering attempts that threaten both application and corporate data security.

Target Enterprises

• Have mission critical applications that require 100% trust; cannot be compromised.
• Are concerned about malware risks and/or insider threats to applications
• Are subject to data and application compliance regulations
• May be deploying other application audit and control solutions and require real-time alerts
• Are in vertical markets such as financial, government, healthcare or technology/ISV