Sourcefire® Launches Free Security Tool to Protect Microsoft Office Applications

Business Wire, Dec 6, 2006

OfficeCat Tool Enables Users to Identify Potential Network Security Risks Introduced by Vulnerabilities in Microsoft Excel, PowerPoint and Word Files

COLUMBIA, Md. -- Open source innovator and Snort creator, Sourcefire, Inc., a leader in network intrusion prevention, today announced the availability of OfficeCat, a free security tool that enables users to easily identify potentially threatening Microsoft Office([R]) files. Unlike products that detect attempts to exploit known Microsoft vulnerabilities, OfficeCat can determine if a file contains hostile content before it is opened.

"OfficeCat is the latest example of Sourcefire's commitment to the open source community," said Robert Wagner, coordinator of the Chicago Snort Users Group. "By enabling users to easily evaluate files for possible threats, OfficeCat provides us with the ability to protect against the rapidly growing number of exploits against Microsoft Office([R]) applications."

According to the SANS Institute, in 2006 there has been rapid growth in exploits against Microsoft Office([R]) vulnerabilities known to provide hackers with the ability to penetrate an organization's network by using the weaknesses to install and execute code on hosts that support the affected application. Available as freeware at www.officecat.org, OfficeCat examines Microsoft Word([R]), PowerPoint([R]), and Excel([R]) files to determine if possible exploit conditions exist. OfficeCat provides reference information on discovered vulnerabilities so users can remediate risks. By detecting these hostile files before they are opened, OfficeCat enables users to proactively increase the effectiveness of their security efforts.

OfficeCat was developed by the Sourcefire Vulnerability Research Team (VRT) to detect security risks that are often overlooked by other technologies, including anti-virus. The Sourcefire VRT is a group of leading edge intrusion detection and prevention experts working to proactively discover, assess, and respond to the latest trends in hacking activity, intrusion attempts and vulnerabilities. OfficeCat was developed by the VRT through research aimed at creating rules for Snort, the open source intrusion detection and prevention system created by Sourcefire. With more than 3,000,000 downloads and 100,000 registered users, Snort is the world's most widely deployed intrusion prevention technology. To create effective rules, the VRT conducts ongoing research into Microsoft Office([R]) vulnerabilities and will regularly update OfficeCat with the latest vulnerability information.

"As security threats continue to evolve, Sourcefire is dedicated to delivering solutions for both commercial users and the open source community that enable users to protect themselves from attacks against their networks and information," said Matt Watchinski, Director of the Sourcefire VRT. "OfficeCat fills a unique need among users to identify potential avenues of attack that can significantly impact their network security. As one of the leading network security research organizations, our goal is to provide users with the best possible security backed by the latest discoveries."

About Sourcefire

Sourcefire, Inc., a world leader in intrusion prevention, is transforming the way organizations manage and minimize network security risks with its 3D Approach - Discover, Determine, Defend - to securing real networks in real-time. The company's network defense system unifies intrusion and vulnerability management technologies to provide customers with superior network security. Founded in 2001 by the creator of Snort([R]), Sourcefire is headquartered in Columbia, MD and has been consistently recognized for its innovation and industry leadership by customers, media, and industry analysts alike - with more than 18 awards and accolades since January 2005 alone. Recently, the company was positioned in the Leaders Quadrant of Gartner's "Magic Quadrant for Network Intrusion Prevention System Appliances" report and the Sourcefire 3D System was named "Best Security Solution," at the 2006 SC Magazine Awards. At work in leading Fortune 1000 and government agencies, the names Sourcefire and founder Martin Roesch have grown synonymous with innovation and intelligence in network security.

For more information about Sourcefire, please visit http://www.sourcefire.com.

SOURCEFIRE[R], SNORT[R], the Sourcefire logo, the Snort and Pig logo, SECURITY FOR THE REAL WORLD[TM], SOURCEFIRE DEFENSE CENTER[TM], SOURCEFIRE 3D[TM], RNA[TM] and certain other trademarks and logos are trademarks or registered trademarks of Sourcefire, Inc. in the United States and other countries.

Microsoft Word, PowerPoint, Excel and Office are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.