Announced at the McAfee FOCUS 11 conference, McAfee Deep Defender is the industry’s next generation of endpoint security. McAfee Deep Defender is capable of detecting nearly all kernel-mode malware. This unprecedented level of security is possible with McAfee DeepSAFE technology because its protection layer is located beyond the operating system (OS).
McAfee worked closely with Intel with the purpose of delivering hardware assisted security designed to stop and remediate advanced stealth behaviors used by rootkits and APTs. With the increased threat landscape of emerging persistent and targeted attacks, a new approach to security is needed. McAfee and Intel are working together to transform the security industry by combining the power of hardware and software to create more effective ways to prevent attacks and better protect every segment across the compute continuum.
“Digitalera is very excited about the unique vantage point provided by McAfee Deep Defender,” said Michael Dyer, vice president of Digitalera Group. “The technology opens up exciting new avenues for detection and prevention which is critical for our customers.”
McAfee Deep Defender utilises McAfee DeepSAFE technology that sits between the processor and the OS to help protect vital system software residing in physical memory, providing a new view of the drivers and other software as they operate. In addition McAfee Deep Defender provides:
* Real-time memory and CPU monitoring – using McAfee DeepSAFE technology, this low-level visibility allows McAfee Deep Defender to recognise evasive techniques employed by stealthy malware and gives administrators a real-time view of memory processes, enabling configurable block or deny actions.
* True zero-day detection - McAfee Deep Defender does not need to have prior knowledge of the rootkit to detect its existence.
More From This Section
* Protection against known and unknown threats – McAfee Deep Defender will report, block, quarantine, and remove known and unknown stealth techniques attempting to load in memory. For suspected or unknown threats, McAfee Deep Defender sends a fingerprint of the code to the McAfee Global Threat Intelligence network and then carries out the configured action, such as block, remediate, or quarantine.
* Central management with McAfee ePolicy Orchestrator platform – utilising the same ePolicy Orchestrator console already used across existing McAfee endpoint security solutions, customers can now receive dashboards and reports that provide greater visibility into hidden threats.
“The combination of McAfee and Intel brings fresh innovation to secure the future of computing and the Internet,” said Todd Gebhart, co-president of McAfee. “The bad guys are getting smarter about hiding malware, but they can’t hide it when interacting with the hardware, memory or operating system. We can now detect these interactions, and provide an unprecedented level of protection to our customers by blocking an entirely new range of stealthy threats. McAfee Deep Defender represents an entirely new approach to security and shows the power of what McAfee can do as part of the Intel family.”
“Security is a fundamental pillar of computing,” said Renée James, Intel senior vice president and general manager of the Software and Services Group. “We are working to ensure users have an engaging, secure and productive computing experience across all Intel platforms using McAfee technologies. Security is one of the top concerns to organisations of all sizes and industries. It is essential that computing is protected against intrusions from security breaches and malware in more effective ways. Together, McAfee and Intel are rethinking the entire approach to security and McAfee Deep Defender is a proof point of how security is changing to provide a new level of protection.”
