Press Release

CORBA Firewall prevents Denial-of-Service Attacks - PrismTech Releases New Version of Xtradyne I-DBC

Berlin, Germany - 8 January 2007 - PrismTech, a leading provider of distributed software infrastructure, today announced the general availability of version 2.9 of its Xtradyne® IIOP Domain Boundary Controller (I-DBC) security gateway product. The I-DBC is an out-of-the-box solution for the secure traversal of existing firewall installations with the IIOP protocol, the underlying application protocol in CORBA and EJB access. The new version allows to limit the number of connections per user domain and of the processing of connection requests from this domain, thus effectively preventing denial-of-service attacks.

The I-DBC is an appliance-type solution that allows enterprises to operate CORBA and EJB based applications securely across domain boundaries. It enables IIOP firewall traversal without any compromise on perimeter security and additionally provides a complete CORBA security/AAA solution, without impairing either performance or scalability of existing applications.

"With this release, we enable our customers, especially in the telecomms industry, to effectively protect their CORBA based services against denial-of-service attacks from outside the network" says Marcus Wittig, telecomms domain expert at PrismTech. "This guarantees the service availability usually required in the tecomms. industry, not just in case of DoS attacks but also in the frequent case of CORBA-level request overloads caused by incorrect software." Wittig adds "Now, with version 2.9 the I-DBC also runs on SUN Solaris 10 on Intel x86 and UltraSparc systems."

As a pure software solution, the I-DBC offers full deployment flexibility. The software is provided Solaris for platforms, and on Linux. Key features of the I-DBC include:

• Fully productized CORBA and EJB security without any programming,
• CORBA 3.0 support including bi-directional IIOP/GIOP,
• Powerful Policy Server for enterprise-level security management of arbitrarily many, even different, security gateways, e.g., also for XML Web Services
• Unified security management, and simple administration with powerful, remote graphical administration console,
• Differentiated administrator roles,
• Versioning of security policies & rollback functions for the security policies,
• Expressive policy models fine-grained, role-based access control (RBAC),
• Rich set of authentication mechanisms for users, servers, and intermediaries,
• Expressive message filters to enforce content-based access control and thus thwart application-level attacks, such as SQL injection,
• Transport security using SSL/TLS,
• Support for SSL accelerator cards,
• OCSP support for certificate revocation checks,
• Enterprise integration with LDAP support,
• Auditing, monitoring, and secure logging with SNMP, syslog, etc.
• Scalability and High-availability through cluster support,
• Extremely high performance and throughput

The Xtradyne I-DBC 2.9 is generally available from January 8, 2007. A free evaluation copy can be ordered at Xtradyne's Web site. Please visit www.xtradyne.com or contact sales@xtradyne.com for more details.

About PrismTech

Founded in 1992, with offices in the USA and Europe, PrismTech is a privately held software products company. PrismTech serves international Fortune 500 customers in various industries such as telecommunications, data communications, defense, aerospace, finance and automotive. PrismTech is an acknowledged leader in distributed and wireless software infrastructure, with solutions ranging from wide-scale integration to embedded real-time systems, supporting applications from operations support systems (OSS) through to software defined radio (SDR). With its Xtradyne product line, PrismTech provides security gateways for secure enterprise application integration. For additional information about PrismTech, visit the web site at www.prismtech.com.

PrismTech Limited
Gregg Shenton
Product Marketing Executive
Tel: +44 (0) 191-4979900
E-Mail: press@prismtech.com