Zombie computer networks, comprising desktops or servers that have been attacked and compromised by a Virus or Trojan-horse, account for more than 95% of spam worldwide. They have the ability to break through conventional layers of security around the enterprise and end user to carry out massive distributed denial of service (DDoS) attacks as well as send malware, phishing emails and viruses.
With pressure on ISPs to prevent zombie attacks emerging from their networks, PineApp ZombiCop works by filtering zombie traffic at the perimeter and classifies over 50 million IP addresses, weeding out the majority of malicious attacks. It also uses a combination of advanced methods to detect zombie behaviour patterns and threats, including an IP reputation profile engine that assesses risk and identifies likely sources of zombie emails, while providing a scalable and cost efficient infrastructure for ISPs, saving bandwidth usage and providing business continuity. With ZombiCop, unwanted communication is blocked and ISP mail-server blacklists are significantly lowered.
PineApp ZombiCop can be used as a ‘passive inspection sniffer’, alerting the ISP once a zombie is detected; or as an ‘active policy enforcer’, blocking or reducing traffic generated from a detected zombie IP. It can also be used as a ‘smart traffic analyser’, adding content inspection layers and the ability to detect other protocols, such as P2P and VoIP.
