Breach Prevention Systems (BPS)
D ATA S H E E T
Breach Prevention Systems (BPS) Technology Overview and Test Metrics Overview ENTER PRIS E BR E ACH DE TECTION WITH BLOCK ING. By constantly analyzing suspicious code and identifying communications with malicious hosts, breach detection systems (BDS) can provide enhanced detection of advanced malware, zero-day attacks, and targeted attacks that could bypass traditional defenses. A new technology is available that provides prevention before a breach
Total market revenue for BDS was
occurs, and NSS Labs is referring to
$1.5B+ in 2016, and NSS estimates
these products as breach prevention
this number will grow by approximately
systems (BPS). A BPS uses data that it gathers or that it is fed by a variety of sources, including endpoint agents, to determine whether an activity is malicious. If it
PRODU CT COM PA RISON Products are evaluated on features and functionality and given guidance ratings of Recommended, Neutral, or Caution based on the following categories:
Security Effectiveness
32% in CY2017. The shift to BPS could accelerate that growth, however, as the capability to prevent attacks opens a much larger addressable market. NSS believes that the bulk of the BDS market will transition into a BPS market,
is found to be malicious, the BPS will
though some use cases will remain for
produce a conviction event enabling
discrete BDS.
Performance
a preventative action.
Features and Functionality PRODU CTS A R E E VA LUATED ACROS S K E Y A R E AS. BPS products are assessed on the following features and functionality:
• Centralized management of multiple devices • Breach prevention capabilities using one or more of the following methods: ○○ Malware identification (signatures, heuristics, or both) ○○ Network traffic analysis (flow monitoring, content analysis, or both) ○○ Sandboxing that allows for modeling of internal systems ○○ Emulation • Response mechanism (alerting, session termination, etc.) • Robust logging of conviction events • Reporting
Stability and Reliability
Total Cost of Ownership
Vendors do not pay to be included in NSS’ group tests. Products are selected based on market leadership and enterprise requests.
www.nsslabs.com
D ATA S H E E T
Research Library NSS Labs offers an extensive library of product and research reports for the major areas of cybersecurity. Our objective approach, unbiased testing, and independent analyst reviews have been recognized by Global 2000 companies as key components in their security decision processes.
RESEARCH REPORTS
PRODUCT REPORTS
Test Methodology Detailed description of the test sections in a group test (free download) Security Value Map™ (SVM) Security effectiveness mapped against total cost of ownership (TCO) to provide relative value of security products (free download*) Test Reports In-depth results for each product in a group test Comparative Reports Vendors compared on key metrics, including security effectiveness, performance, total cost of ownership (TCO), Security Value Map™
Market Trends Report Insight into a specific technology segment within the global security market, focusing on enterprise use cases, best practices, historical trends, market dynamics, predictions of market growth, and key vendor descriptions Product Selection Series Guidance on selecting a security product within a specific technology category, includes strategic overview, technology definition, feature analysis, and in-depth feature comparisons Analyst Brief Thought leadership, including discussion of new security trends and other areas of interest Primary Survey Report NSS survey-driven insight into a technology and its use cases Best Practices Guide to effective implementation of a security technology
* SVM Toolkit available for purchase to create customized alternative mapping of deployment models and scenarios. ** These reports may vary for each technology tested.
For more information, send an email to [email protected], or visit www.nsslabs.com.
+1 (844) NSS-LABS www.nsslabs.com
[email protected] @nsslabs
© 2017 NSS Labs, Inc. All rights reserved.
Breach Prevention Systems (BPS) Technology Overview and Test Metrics Overview ENTER PRIS E BR E ACH DE TECTION WITH BLOCK ING. By constantly analyzing suspicious code and identifying communications with malicious hosts, breach detection systems (BDS) can provide enhanced detection of advanced malware, zero-day attacks, and targeted attacks that could bypass traditional defenses. A new technology is available that provides prevention before a breach
Total market revenue for BDS was
occurs, and NSS Labs is referring to
$1.5B+ in 2016, and NSS estimates
these products as breach prevention
this number will grow by approximately
systems (BPS). A BPS uses data that it gathers or that it is fed by a variety of sources, including endpoint agents, to determine whether an activity is malicious. If it
PRODU CT COM PA RISON Products are evaluated on features and functionality and given guidance ratings of Recommended, Neutral, or Caution based on the following categories:
Security Effectiveness
32% in CY2017. The shift to BPS could accelerate that growth, however, as the capability to prevent attacks opens a much larger addressable market. NSS believes that the bulk of the BDS market will transition into a BPS market,
is found to be malicious, the BPS will
though some use cases will remain for
produce a conviction event enabling
discrete BDS.
Performance
a preventative action.
Features and Functionality PRODU CTS A R E E VA LUATED ACROS S K E Y A R E AS. BPS products are assessed on the following features and functionality:
• Centralized management of multiple devices • Breach prevention capabilities using one or more of the following methods: ○○ Malware identification (signatures, heuristics, or both) ○○ Network traffic analysis (flow monitoring, content analysis, or both) ○○ Sandboxing that allows for modeling of internal systems ○○ Emulation • Response mechanism (alerting, session termination, etc.) • Robust logging of conviction events • Reporting
Stability and Reliability
Total Cost of Ownership
Vendors do not pay to be included in NSS’ group tests. Products are selected based on market leadership and enterprise requests.
www.nsslabs.com
D ATA S H E E T
Research Library NSS Labs offers an extensive library of product and research reports for the major areas of cybersecurity. Our objective approach, unbiased testing, and independent analyst reviews have been recognized by Global 2000 companies as key components in their security decision processes.
RESEARCH REPORTS
PRODUCT REPORTS
Test Methodology Detailed description of the test sections in a group test (free download) Security Value Map™ (SVM) Security effectiveness mapped against total cost of ownership (TCO) to provide relative value of security products (free download*) Test Reports In-depth results for each product in a group test Comparative Reports Vendors compared on key metrics, including security effectiveness, performance, total cost of ownership (TCO), Security Value Map™
Market Trends Report Insight into a specific technology segment within the global security market, focusing on enterprise use cases, best practices, historical trends, market dynamics, predictions of market growth, and key vendor descriptions Product Selection Series Guidance on selecting a security product within a specific technology category, includes strategic overview, technology definition, feature analysis, and in-depth feature comparisons Analyst Brief Thought leadership, including discussion of new security trends and other areas of interest Primary Survey Report NSS survey-driven insight into a technology and its use cases Best Practices Guide to effective implementation of a security technology
* SVM Toolkit available for purchase to create customized alternative mapping of deployment models and scenarios. ** These reports may vary for each technology tested.
For more information, send an email to [email protected], or visit www.nsslabs.com.
+1 (844) NSS-LABS www.nsslabs.com
[email protected] @nsslabs
© 2017 NSS Labs, Inc. All rights reserved.
