Incapsula, a cloud-based website security and performance service, has announced Backdoor Protect, a new tool that transparently detects and disables malicious backdoors for instant remediation of compromised websites and ongoing protection from backdoor threats.
A website backdoor is a malicious function that enables hackers to remotely operate the site or server for future exploitation, even after the exploit that enabled access has been patched. Backdoors are used to maintain website and server access to distribute malware and spam, perpetuate distributed denial of service (DDoS) attacks, or to assist in the theft of valuable data such as credit card numbers. Recently, Incapsula reported on the use of a malicious backdoor in ongoing DDoS attacks against United States banks.
Incapsula Backdoor Protect is a nonintrusive service that is able to detect and disable backdoors that are already installed on a website. The backdoor identification is performed by profiling the website’s traffic and comparing it against an extensive database of backdoors, enabling the detection to overcome file obfuscation and signature mutation. This capability is a new addition to Incapsula’s cloud-based Web Application Firewall (WAF) that is activated through a simple DNS change and does not require installation of hardware or software, or making any changes to the website.
Incapsula Backdoor Protect:
- Detects – monitors all website traffic and uses behavior heuristics to identify backdoor operations.
- Quarantines – automatically disables access to the backdoor, rendering it useless.
- Alerts – notifies the website administrator and pinpoints the backdoor for removal.
For more information about Backdoor Protect, visit: www.incapsula.com/backdoor-protect.
