Application Control and Device Control Products
ParityCenter Software Identification Service - How it works
Bit9 Parity application control and device control has been designed from the ground up to be the easiest and most efficient way to control what software can and can not run on desktops and laptops to help you achieve Windows lockdown and flexible whitelisting. By making it simple to define and enforce application control and device control policies, Parity provides IT staff with an entirely new approach to application control and device control to easily and effectively achieve user-friendly Windows lockdown.
;)
Bit9 ParityCenter is growing aggressively through continual software acquisition, data capture, and analysis.
Aggressive software acquisition
ParityCenter shares its knowledgebase with Bit9 FileAdvisor, compiled via an innovative, proprietary method of crawling the Web, incorporating third-party repositories of malware, through aggressive acquisition of physical media, as well as through partnerships with IBM, Microsoft, Virus Bulletin, and others.
In addition, Bit9 ParityCenter uses the National Institute of Standards and Technology's (NIST) National Software Reference Library (NSRL) Reference Data Set (RDS) - also known as the NIST Special Database 28 - as well as the Department of Justice's Hashkeeper database. Never before have these databases and other sources of information been aggregated in such a massive repository and made available to the general public.
Rich software context
ParityCenter captures a rich set of contextual detail about each individual software file that it indexes. This is presented in an easy-to-navigate database that is sorted by publisher, product, and download site or data source. The information captured for each file includes:
- Filename and known aliases
- MD5, SHA-1, OMAC hash signatures
- File size
- Language
- Operating system compatibility
- Publisher
- Publisher's descriptions
- Application(s) distributed with
- Digital Certificate information
- Installation package signature
- Authoritative information source
- Malware and vulnerability reports
Comprehensive analysis for malicious software
Once ParityCenter captures a piece of software, it is then run through a set of analysis tools to determine its trustworthiness. These analysis tools combine multiple techniques for malicious software detection, all running in the cloud. As a result, malware is identified more accurately than by just relying on one technique alone.
This new and powerful approach to desktop protection includes:
- Multiple industry-leading anti-virus scanners
- Code vulnerability assessment scanners
- Spyware scanners
- Sources of malware and associated metadata
IT staff can leverage this information within the Parity application control and device control solution to help them better decide which software should and should not be allowed to run within their Windows environments. By relying on ParityCenter as the definitive source for assessing the identity and integrity of unknown software, customers can realize dramatic improvements in the reliability, security, and compliance of their desktops.
It's pretty near impossible to know what our users are running on our PCs all the time. Bit9 ParityCenter gives us total control over what are 'approved' applications with minimal administrative overhead.
—Sandy Bodell, VP of Information Technology, Cooley Group
