Trend appliance sniffs out bot nets

Trend Micro's new ICSS service could help firms and ISPs spot trojan-infected PCs

Content security specialist Trend Micro today announced a new product designed to enable enterprises and ISPs to find and remediate bot-infected PCs.

The InterCloud Security Service (ICSS) uses the firm's Behavioural Analysis Security Engine (BASE) to detect bot-like behaviour, such as PCs sending large numbers of DNS requests in a short space of time, according to Trend's chief technology officer, Dave Rand.

ICSS is a managed service that requires an appliance to be installed on the customer's network as a replacement for their existing DNS server. This then allows Trend to offer customers the ability to quarantine and clean infected PCs, or take them off the network, Rand added.

"Bot networks are used to send spam, perform DOS attacks and now they are being programmed to steal information from people's computers," explained Rand. "The combination of bots and malware is getting worse, but we in the security industry have not given the ISPs [and others] the tools to do this job properly. "