Wave Issue 0503 1/21/05 Article 9-01

***Globally Renowned Hackers Certify Secure Computing's
Sidewinder G2 Defeats Full Spectrum of Malicious Attack Methods

SAN JOSE, Calif.
Jan. 18, 2005

Secure Computing Corporation is advertising that the company's
Sidewinder G2 Security Appliance is "the world's strongest
firewall," -- so the company put its claims to the test by
engaging a group of professional hackers to bombard the
Sidewinder G2 Security Appliance with some of the worst cyber-
abuse imaginable. Secure called in Black Hat Consulting -- best
known for their key role in the annual DEFCON and Black Hat
computer security conferences, one of the largest security
testing events in the world. Black Hat Consulting ran a full
spectrum of attack methods at the Sidewinder G2. They concluded
that the Sidewinder G2 Security Appliance are the most stable and
reliable gateway security appliance they have tested. The
Sidewinder G2 appliance blocked, filtered or ignored the
attacker's packets that were transmitted to the internal or
external interfaces.

Black Hat Consulting tested Sidewinder G2's resiliency against
attacks targeted at all relevant layers of the OSI model (Open
System Interconnection). The Sidewinder successfully defended
against attacks methodologies across OSI layers 2 though 7, while
simpler firewalls can only defend against attacks at lower
networking levels up to layer 3. The attacks Black Hat launched
against the Sidewinder included:

-- Worms such as CodeRed and SQL Slammer

-- Denial of Service attacks

-- Spoofing attacks

-- Statistical anomaly attacks

-- Information acquisition attacks

-- Gratuitous injection attacks

-- Session hijacking attacks

-- Directory traversal attacks

-- Brute force attacks

-- Firewall rule-set bypass attacks

-- Attacks utilizing binary data in HTTP packets

-- UNICODE cross site scripting attacks

-- Bounce attacks

Secure Computing's Application Defenses strategy is at the heart
of the multi-layered defense-in-depth design of the Sidewinder G2
Security Appliance. The ability to face and defeat both known and
unknown attacks is the strength of the Sidewinder G2 Application
Defenses capabilities.

The report is available at

www.securecomputing.com/goto/blackhat