Lumension takes wraps off new enterprise security product

Endpoint security company Lumension has unveiled the latest version of its Lumension Endpoint Management and Security Suite (LEMSS), which offer enterprises enhanced protection against advanced persistent threats (APTs).

The company is particularly keen to emphasise LEMSS 7.3's ability to protect against reflective memory injections (RMIs) that it claims can be virtually impossible to detect or remove.

MDM is moving very quickly with BYOD initiatives and what people require seems to be changing almost weekly.

Alan Bentley, SVP worldwide at Lumension, told IT Pro: "These types of attack compromise legitimate applications through their memory.

"The difficulty with memory-based threats is, if it is not doing anything through the OS, is not using OS functions or is not writing anything to disk, it will go undetected by traditional antivirus."

Bentley explained that anything sat in the memory, such as an RMI, can be got rid of by rebooting the affected machine, it is often too late by then, as the code from the RMI has been used to compromise the target application with malicious code.

While this is not a method of malware infection that is seen very often, Bentley believes it is something that is going to increase in popularity among the cyber criminal community.

The organisation also intends to introduce new mobile device management (MDM) functionality to LEMSS, although that is not included in the current 7.3 release.

"This whole MDM space is moving very quickly with the bring your own device (BYOD) initiatives and what people require seems to be changing almost weekly. So we decided to start where we knew our customers wanted to go," said Bentley.

"We talked to a number of our customers and asked if we were to bring in on platform MDM, what that would need to look like and have decided to build it up ourselves. Just like the rest of LEMSS, it is about giving visibility to administrators and assigning different policies and protections according to device type, ownership and so on," he concluded.

LEMSS with MDM capability is expected to be available in the latter half of the year.