Solutions White Papers Case Studies Product Demo Media Kit FAQ

White Papers

Once you submit this brief form, you can download any Top Layer white papers without re-entering this information. Our white papers include:

NEW!   Governance, Risk, and Compliance: An IPS Solution is a Key Component.
This white paper, written by Reymann Group, explores the meaning of GRC, how information technology (IT) GRC creates value within an organization, and why Intrusion Prevention Systems are a key part of a successful IT GRC strategy.

NEW!   Guide to Using Network IPS to Protect Against Next-Generation Cyber Threats
Network security threats are on the rise as cyber criminals continue to develop innovative ways to use compromised computers for their own personal gain, creating havoc and jeopardizing security and privacy in the process. Organizations should understand the likely evolution of the threat landscape and develop an appropriate security strategy to address these evolving threats. This paper discusses how Network Intrusion Prevention Systems (IPS) play a critical role in a layered approach to security to protecting against current and future cyber threats.

Benchmarking Strategies for Intrusion Prevention Systems
This white paper was written by the Tolly Group, an independent testing and consultancy firm. It discusses various intrusion prevention systems, deployment modes, sources of attacks, attack coverage capabilities, and more. The paper is educational in nature and is recommended for organizations considering the purchase of an IPS.

Intrusion Prevention System Solutions Enable Sarbanes Oxley Compliance
This white paper written by Reymann Group, compliance consultant firm, showcases thought leadership on how intrusion prevention solutions can enable proactive security responses necessary to protect today's corporate enterprise and its customers from real time threats posed by widespread cyber terrorists, hackers, and rogue insiders.

DDoS Threatens Financial Institutions - Get Prepared!
Written by Reymann Group Inc., co-author of Gramm Leach Bliley Act, this paper provides an overview of the increased threat to financial and other institutions, from Distributed Denial of Service attacks. It reviews what to do when it occurs, the risks, and the legal and regulatory mandates to protect against such attacks.

Accounting for Internet Malice
Current Internet technology has enabled those with malicious intent to impair a company's ability to trade electronically using Distributed Denial Of Service (DDoS) attacks. In late 2003 and 2004, criminal extortion using DDoS attacks made a rapid appearance on the cyber-crime stage, which has forever changed how financial service organizations assess business risk. For the first time ever, the 2004 CSI/FBI Computer Crime and Security Survey reports that the value of actual reported losses attributed to DDoS attacks has exceeded losses from the theft of intellectual property. New network security technology, in the form of network Intrusion Prevention Systems (IPS) can reduce the risks and losses associated with this damaging new form of cyber-crime.

Network Intrusion Prevention Systems - Why "Always On" Stateful Inspection and Deep Packet Analysis are Essential to Deliver Non-Stop Protection
With the explosion in Internet connectivity and the mainstream use of broadband and mobile technologies, there has been a huge increase in the number of computer systems and storage devices connected to the public network. With an ever-increasing reliance on computing infrastructure, we find that our critical IT assets, confidential data and intellectual property are more susceptible to cyber attack than ever before. In response to the changing threat landscape, Network Intrusion Prevention Systems (IPS) were developed to provide advanced protection beyond that offered by firewalls and Intrusion Detection Systems (IDS). Out of this need appeared many new products claiming to be IPS Solutions, however, the vast majority are unable to handle these new threats despite their data sheet claims. This white paper highlights why "always-on" Stateful Inspection and Deep Packet Analysis are necessary capabilities when selecting an IPS solution.

Protecting IT Infrastructures Against Zero-day Network Attacks with Intrusion Prevention System Technology
IT organizations currently struggle to quickly patch systems before significant damage or theft of assets takes place. A new approach is necessary, which includes more proactive protection from these damaging exploits, known as Zero-day exploits. This white paper is intended for Information Security and Information Technology professionals interested in understanding Zero-day Attacks, the various protection schemes available today and how Top Layer Network?s Intrusion Prevention System (IPS) solutions provide the best mechanisms for protection from these types of attacks. In addition the paper will cover how signature-based protection, while an important component of an IPS, is not well suited as a primary mechanism for defending against Zero-day exploits.

Intrusion Prevention Systems (IPS): Next Generation Firewalls
This Intrusion Prevention System report was written by Spire Research. Much is being said about "intrusion prevention," but little is being done to acknowledge the potential impact of a solution on the network architecture. With so much attention being paid to the intrusion detection-like characteristics, the need for firewall capabilities is being ignored. In fact, the firewall is a more appropriate model for considerations around the deployment and use of a network intrusion prevention solution.

This paper discusses the characteristics of both intrusion detection and firewall solutions that comprise the evolving intrusion prevention solutions. It identifies the features that are useful and highlights the architectural requirements for any security device that intends to be inline on the network. The paper also discusses Top Layer's approach to intrusion prevention - a practical approach that evolves firewall capabilities into a deeper content inspection solution.

Beyond IDS : Essentials of Network Intrusion Prevention (IPS)
Companies are now recognizing that it costs much less to prevent attacks than to repair the associated damages related to a cyber attack. This is the idea behind Intrusion Prevention Solutions (IPS). This white paper will review critical weaknesses of network intrusion detection technology (nIDS) that can affect the security of your network, and a new breed of IPS products that can help alleviate these issues. For years, the philosophy behind network Intrusion Detection could be summarized as "Detect as many attacks and intrusions as possible, and report them, so that others may take action." In contrast, network Intrusion Prevention Systems have been designed with a new philosophy: "Take decisive action on those attacks or intrusions which can be accurately detected."         
View white paper in foreign languages.

Vulnerabilities of Network Intrusion Systems: Realizing and Overcoming Risks
This document provides an overview of some of the key problems that arise in network-based Intrusion Detection System (nIDS) deployments. These deployment issues result in missed intrusions, network degradation, and lost business. The document further demonstrates how a network-based load balancer with session-based flow mirroring developed by Top Layer Networks can cost-effectively overcome many of these deployment pitfalls. 

2400 Computer Drive, Westboro, MA 01581 Phone: (508)-870-1300 ©1999-2009 Top Layer Networks. All Rights Reserved.

View testimonials for Intrusion Prevention