Websense Advanced Classification Engine
Delivering the best security for modern threats
Recent findings from Websense Security Labs™:
- 77% of websites with malicious code are legitimate sites that have been compromised.
- 14% of top search terms lead to malware.
- 86% of all unwanted emails in circulation during this period contained links.
- 57% of data-stealing attacks are conducted over the Web.
In the new age of the Web, security threats have evolved to be more advanced and persistent, leaving traditional security vendors struggling to keep up with the flood of new threats emerging every day. Rich Internet applications and the Web 2.0 platform have been combined with old-world-style attacks designed to evade legacy security controls and exploit coverage gaps. These attacks are socially engineered to blend in and target the lifeblood of every organization — its data. To address this new age of security threats, Websense has built the Websense® Advanced Classification Engine (ACE), part of the Websense TRITON™ Solution.
ACE is an advanced composite content classification engine embedded in Websense solutions. It surpasses legacy, point-based security technologies in both accuracy and coverage by correlating multiple analytic services to identify security threats that might otherwise circumvent any single mechanism. Antivirus, for example, only provides coverage for binaries, leaving gaps for script-based attacks and Web exploits; reputation services are ineffective against modern threats that often now infiltrate legitimate, trustworthy sites; and URL filtering provides little coverage for dynamic properties in the social Web. When combined, however, these technologies eliminate gaps in coverage, provide layered protection, and deliver unparalleled accuracy.
Security Technologies Embedded in ACE
Real-time security classification
Only Websense can identify and protect against script-based attacks, Web exploits, and blended threats on the Web and in email — going beyond legacy signature-based detection and reputation services to apply industry-leading Web analytics within email with advanced malware security for advanced persistent threats (APTs) and zero-day attacks.
Real-time content classification
Only Websense can classify never-before-seen content on the fly across all of its solutions for protection on the social Web, email, and other communication protocols, including content behind registration and within SSL sessions, as it’s accessed.
Websense PreciseID™ technology data identification
Only Websense can identify and prevent confidential data loss within a Web and email gateway with a 99.99 percent degree of accuracy, leveraging a full range of data identification techniques, including fingerprinting and natural language processing, to address regulatory requirements over Web, email, and other communication channels.
Antispam
Only Websense combines global spam fingerprint technology with advanced Web analytics that examine embedded URLs within email to achieve 99.999 percent detection accuracy for spam, phishing, and blended threats.
Reputation services
Only Websense combines reputation services from Web, email, social networking, and other sources for highly accurate, compound reputation scoring integrated with advanced detection mechanisms to provide unparalleled classification accuracy within Web and email communications.
URL filtering
Only Websense delivers the market’s leading set of URL and spam databases across Websense solutions and is supported by a global network of technologies that analyze over a billion pieces of content every day, with real-time security updates delivered to customers via an adaptive feedback loop to provide maximum protection and security performance.
Antivirus ++
Only Websense leverages multiple antivirus signature sources across its solutions, including heuristics and generic attack signatures, to provide a layered defense for legacy, file-based threats as well as for more advanced binaries that support URLs, spam routines, confidential data export, and more to detect and prevent alternate payloads.