Internet Security Systems Protects SCADA Networks, Helps To Ensure Stability of National Infrastructure; Company Adds Specialized SCADA Protection to its Intrusion Prevention Technology

Business Wire, August 24, 2005

ATLANTA -- Internet Security Systems (ISS) (NASDAQ: ISSX) today announced it is offering customers increased protection for SCADA systems. SCADA, which stands for supervisory control and data acquisition, is the control system used to run most utilities, including electricity and water, as well as transportation infrastructure.

The disruption of SCADA networks can cause large-scale black-outs, loss of water supply and the halting of major transportation systems, making them an attractive target for hackers and terrorists. In addition to improving the overall security landscape for customers, ISS' SCADA protection will help power companies comply with the recently signed energy bill, which allows the federal government to enforce new cyber security standards at these companies.

"Eighty-five to ninety percent of our nation's critical information systems are owned by the private sector," said Tom Noonan, president and CEO of Internet Security Systems and a founding member of President Bush's National Infrastructure Advisory Council. "It is therefore crucial that utilities organizations and IT vendors work together to close gaps in the security of this infrastructure."

Working in conjunction with SCADA experts like network security consulting firm, Digital Bond, ISS has developed protection algorithms for SCADA protocols in the company's Proventia(R) Intrusion Prevention Appliances. This new protection builds upon existing ISS prevention capabilities for shielding SCADA systems from a wide variety of Internet and operating system threats. ISS will also continue to offer companies comprehensive SCADA security assessment, design and deployment assistance through its Professional Security Services group, as well as 24/7/365 expert monitoring and management through its Managed Security Services group.

"We are pleased that Internet Security Systems is incorporating SCADA intelligence, related to tools we developed under a Department of Homeland Security research contract, into its overall offerings," said Dale Peterson, lead researcher on Digital Bond's SCADA IDS research project. "Due to their inherent vulnerabilities, it is critical that special attention be placed on the security of SCADA protocols."

Most SCADA systems being used today were developed many years ago, before businesses became dependant on computers and the Internet, and were therefore not developed with online security in mind. As SCADA systems are increasingly being connected to the Internet in order to increase operational efficiency and allow for remote access, ISS cautions that security concerns will continue to rise.

"At ISS, we've been consulting with major utilities companies for years in order to assess and help protect against SCADA vulnerabilities," said Ray Gazaway, vice president of Professional Security Services at ISS. "By adding new protection algorithms that are specifically tailored to SCADA protocols to our intrusion prevention products, we are elevating the commitment among the IT security industry to work diligently alongside the government to protect vital components of our national infrastructure against future attacks."

For more details on adequately protecting your organization from SCADA threats, please see the ISS white paper, "Assessment and Remediation of Vulnerabilities in the SCADA and Process Control Systems of Utilities," at: http://documents.iss.net/whitepapers/SCADA.pdf.> About Internet Security Systems, Inc.

Internet Security Systems, Inc. (ISS) is the trusted expert to global enterprises and world governments, providing products and services that protect against Internet threats. An established world leader in security since 1994, ISS delivers proven cost efficiencies and reduces regulatory and business risk across the enterprise. ISS products and services are based on the proactive security intelligence conducted by ISS' X-Force(R) research and development team - the unequivocal world authority in vulnerability and threat research. Headquartered in Atlanta, Internet Security Systems has additional operations throughout the Americas, Asia, Australia, Europe and the Middle East. For more information, visit the Internet Security Systems Web site at www.iss.net or call 800-776-2362.

Internet Security Systems is a trademark, and Proventia and X-Force are registered trademarks, of Internet Security Systems, Inc. All other companies and products mentioned are trademarks and property of their respective owners.