Content Disarm & Reconstruction
Content Disarm & Reconstruction (CDR) is a computer security technology for removing malicious code from files. Unlike malware analysis, CDR technology does not determine or detect malware's functionality but removes all file components that are not approved within the system's definitions and policies.[1]
It is used to prevent cyber security threats from entering a corporate network perimeter. Channels that CDR can be used to protect include email and website traffic. Advanced solutions can also provide similar protection on computer endpoints, or cloud email and file sharing services.
Applications
CDR works by processing all incoming files of an enterprise network, deconstructing them, and removing the elements that do not match the file type's standards or set policies.[2] A CDR technology then rebuilds the files into clean versions that can be sent on to end users as intended.
Because CDR removes all potentially malicious code, it can be effective against zero-day vulnerabilities that rely on being an unknown threat that other security technologies would need to patch against to maintain protection.
CDR can be used to prevent cyber threats from a variety of sources:
- Web Browsers
- Endpoints
- File Servers
- FTP
- Cloud email or webmail programs
- SMB/CIFS
Commercial availability
CDR or similar file sanitization technology is commercially available from a number of companies:
- Sasa Software (Gate Scanner), an Israeli startup company established in 2013.[3] The 2017 Frost & Sullivan Asia Pacific ICT Security vendor of the year.[4]
- Glasswall Solutions, a UK based Cyber Security technology organisation.[5]
- ODI, an Israeli startup company established in 2009. ODI provides unique cyber security solutions to variety of companies and enterprises of all sizes. The innovation of ODI has a proactive and preventive nature that copes with known, unknown and future attacks that current tools can't handle.[6]
- OPSWAT, a company headquartered in San Francisco with Global presence.[7]
- ReSec, an Israeli startup company founded to deliver CDR products.[8]
- SOFTCAMP, a company based on Information Security Solution.[9]
- Votiro, an Israeli startup company established in 2010.[10]
- Check Point an Israeli company established in 2010.[11]
- JIRANSECURITY, a highly-specialized Security SW company established in 2014.[12]
See also
References
- ↑ Santarcangelo, Michael (April 25, 2016). "Why better security prevention that doesn’t rely on detection is possible". CSO Online. Retrieved August 16, 2016.
- ↑ "Why Today's Phishing Attacks are Harder to Detect and How Proofpoint Can Help" (PDF). Proofpoint. Retrieved August 16, 2016.
- ↑ "Sasa Software Homepage".
- ↑ Sullivan, Frost &. "Frost & Sullivan Asia Pacific ICT Awards". www.ict-awards.com. Retrieved 2017-08-10.
- ↑ Lawrence Pingree (August 16, 2016). "Information Security Technologies & Markets". MindMeister. Retrieved August 16, 2016.
- ↑ "ODI CDR Solutions".
- ↑ "Data Sanitization (Content Disarm & Reconstruction)". OPSWAT. Retrieved October 26, 2016
- ↑ "ReSec home page".
- ↑ "Softcamp home page".
- ↑ "Votiro home page".
- ↑ "Votiro home page".
- ↑ "JiranSecurity DocuZ SDK home page".