28 July 2008
Sophos advances its proactive botnet spam defenses with Sender Genotype technology Sophos to arm Email Security and Control customers with next-generation reputation filtering
Sophos, the world’s largest privately held security software firm today announced that its Sophos Email Security and Control offerings will now include Sender Genotype, a next-generation reputation filtering technology, designed to eliminate botnet spam at the IP-connection level. Unlike traditional reputation filters, which rely on prior knowledge of the sender, Sender Genotype effectively identifies aberrant behavior from IP addresses, which have not yet established a reputation and immediately blocks them from connecting to Sophos customers’ mail systems.
Based on data collected in 2008, SophosLabs™ estimates that botnets generate nearly 90% of all spam worldwide. This issue is compounded by the fact that spam bots appear online for mere minutes at a time to send targeted messages, often using dynamically assigned IP addresses and low traffic volume to bypass traditional reputation filtering. Sophos Sender Genotype overcomes this inherent weakness by monitoring connection requests and rejecting those showing evidence of botnet connections. Even a new or unknown sender IP (e.g. a newly recruited bot) that has never before sent a message can be blocked using Sophos’s breakthrough technology.
“With Sender Genotype, we have emboldened our preventive spam technology to render botnets – the criminal’s preferred spamming tactics of the day – virtually ineffective against Sophos Email Security and Control,” said Margit McGrath, Director of Product Management, Email Security and Control, at Sophos. ”As a result, customers can realize an increase in system performance while doing away with processing and storing terabytes of unnecessary, potentially harmful data.”
Sender Genotype is a free, seamless upgrade option for existing and prospective customers of Sophos Email Appliances and PureMessage for UNIX.
In addition to the development of Sender Genotype to counter the ever-increasing volumes of spam, Sophos recently delivered Sophos eXtensible Lists (SXL) to its Email Security and Control solutions portfolio. SXL is an online look-up system that dramatically accelerates the distribution of anti-spam intelligence, moving away from traditional scheduled updates to a real-time system that provides quicker response to new and emerging spam campaigns.
- USA number 1 for malware and spam
- Huge surge in email attachment attacks
- Scareware makes users buy bogus products
About Sophos
Sophos enables enterprises all over the world to secure and control their IT infrastructure. Sophos's network access control, endpoint, web and email solutions simplify security to provide integrated defenses against malware, spyware, intrusions, unwanted applications, spam, policy abuse, data leakage and compliance drift. With over 20 years of experience, Sophos protects over 100 million users in nearly 150 countries with its reliably engineered security solutions and services. Recognized for its high level of customer satisfaction and powerful yet easy-to-use solutions, Sophos has received many industry awards, as well as positive reviews and certifications.
Sophos is headquartered in Boston, US and Oxford, UK. More information is available at www.sophos.com

