Eradicating malware from enterprise web sites

Qualys announced a new service to help enterprises detect and eradicate malware from their web sites.

Delivered as part of the QualysGuard Cloud Platform and suite of integrated applications for security and compliance, the new Enterprise Edition of the QualysGuard Malware Detection Service allows businesses to proactively scan their web properties for malware infections, receive automated alerts and create in-depth reports for identification and removal of malware from these web sites.

Thousands of web sites, including those of larger, well-established companies, are infected with malware daily, often without their knowledge. The malware can disrupt operations for the web site or its users or gain unauthorized access to information and computer systems. Two years ago, Qualys released QualysGuard Malware Detection Service as a free service helping smaller businesses scan their web sites for malware threats. With the new Enterprise Edition, businesses can now manage a large number of web sites with advanced reporting features that identify areas of infection and improved scheduling capabilities for multi-domain management.

The Enterprise Edition of QualysGuard MDS provides:

• Scalable, accurate scanning. The new service uses static and behavioral analysis to accurately identify malware, with the ability to scan across multiple web sites. The scan also includes anti-virus signature checking and reputation validation.
• Easy-to-use user interface. Intuitive user interface helps users easily set up automated scans and email alerts for multiple web sites across large organizations.
  Centralized Management and Reports. The new service provides clear views of malware status across multiple web sites and detailed drill-down reports that include infection types and recommended remediation steps.
• Advanced remediation and analysis. This includes payload collection, block-level isolation and render and execution timelines for detected malware. This information helps users to further isolate each malware and resolve it quickly.

“With the latest move from ICANN to open up an infinite number of domains based on generic top-level domain names (gTLD), phishing, spoofing and malware attacks against brand-name enterprises will become much easier, and detection and remediation much more difficult,” said Avivah Litan, VP and distinguished analyst at Gartner. “Enterprises must act now to protect their valuable brands by adopting a layered approach to fraud and malware detection and remediation that includes phishing-attack detection, and takedown services.”

“Our free Malware Detection Service that we launched two years ago, which is in use by thousands of organizations worldwide, remains available for free,” reassured Philippe Courtot, chairman and CEO of Qualys.