Foundstone Joins Trusted Computing Group to Develop an Open Industry Standard Specification for Securing Endpoint Host Connections to Networks

Business Wire, June 29, 2004

MISSION VIEJO, Calif. -- Effort to Help Reduce Damage to Networks from Clients by Ensuring Integrity

Foundstone Inc., experts in strategic security, today announced it has joined the Trusted Computing Group (TCG), an open industry standards organization whose specifications help vendors build products that let users protect critical data and information. Representatives from the company are working with other TCG members to develop an open specification to help secure endpoint host connections to networks.

The Trusted Network Connect specification will assist in protecting networks from viruses, worms, denial of service attacks and host software security vulnerabilities, including operating system and application software patches. The specification effort complements TCG's efforts to provide building blocks to help secure critical data and information across a variety of platforms.

"In today's work-from-anywhere environment, remote laptops, PDAs, airport kiosks, and wireless devices are all gaining access to any given network," said Stuart McClure, president and chief technology officer at Foundstone. "It's critical for organizations to ensure these end point connections are secure. Foundstone has dedicated resources to work with TCG on a specification that achieves this objective for the industry as a whole, and for Foundstone customers who rely on us for standards leadership."

The Trusted Network Connect specification will complement client security enabled by Platform Module (TPM), a microchip that stores encryption keys, passwords and digital certificates in platforms. Networks with systems not using TPMs also can be protected at endpoints.

Foundstone's Enterprise Risk Solutions(TM) software helps organizations comprehensively discover, inventory, prioritize, and remediate all assets on a global network. The suite provides exceptionally accurate, high-speed vulnerability assessment of all network assets, intuitive reports and metrics, and a tightly integrated threat correlation module which correlates critical threats with prioritized assets so security and network operations can focus on the assets that matter the most.

About TCG

TCG is an industry standards body formed to develop, define, and promote open standards for trusted computing and security technologies, including hardware building blocks and software interfaces, across multiple platforms, peripherals, and devices. TCG specifications are designed to enable more secure computing environments without compromising functional integrity with the primary goal of helping users to protect their information assets from compromise due to external software attack and physical theft. More information and the organization's specifications are available at the Trusted Computing Group's Web site, www.trustedcomputinggroup.org.

About Foundstone

Foundstone(R) Inc., experts in strategic security, offers a unique combination of software, services, and education to help organizations continuously and measurably protect the most important assets from the most critical threats. Through a strategic approach to security, Foundstone identifies and implements the right balance of technology, people, and process to manage digital risk and leverage security investments more effectively. The company has one of the most dominant security talent pools ever assembled, and has authored twenty books, including the best-seller Hacking Exposed. Foundstone customers include six of the top 11 Fortune companies and many U.S. government agencies. The company is headquartered in Orange County, Calif., and has offices in San Antonio, New York, Washington, D.C., and Singapore. For more information about Foundstone, visit www.foundstone.com, or call 877-91-FOUND within the United States, and 949-297-5600 outside the United States.

Note to Editors: Foundstone is a registered trademark of Foundstone Inc. All other companies, brand names or products are trademarks or registered trademarks of their respective companies.