Arxceo's Ally IP1000 network security applianceArxceo says its patent-pending technology, called Tagged Universal Resource Information Transmission ("Tag-UR-IT"), prevents network reconnaissance, spoofed traffic, session hijacking, DNS cache poisoning, data leaks, and protocol abuse -- even dynamically blacklisting computers when appropriate. This is accomplished without implementing a traditional network stack or using an IP address. The IP1000 is thus "invisible" to the network, and therefore can't be directly attacked, the company says.
According to Arxceo, the Ally IP1000 complements existing security products from vendors such as Cisco, Juniper Networks, Check Point, Nokia and others. Most security devices available today operate by matching incoming network traffic against a database of known attacks, often referred to as "signatures," Arxceo says. New attacks, or even variations on old attacks, can sneak past signature-based detection devices. The company says the IP1000 is able to detect malicious behavior without the need for continuous updates. It also avoids false positives due to occasional spikes in valid business traffic.
Arxceo says it chose Microsoft's Windows XP Embedded operating system to provide "familiarity and ease-of-use in administration to its customers, as well as the superior development environment for its engineers." The resulting "Plug and Protect" (PnPro) design provides the quickest deployment, easiest configuration, and simplest management of any intrusion prevention appliance in the market, according to Arxceo.
