For Immediate Release

Skybox Security Fist to Take Attack Simulation from Lab to Large Complex Enterprise Networks

"Step-by-Step Recipe of An Attack" is Only Way to Identify High-Risk Security Exposures

RSA 2004 (Booth #439) , SAN FRANCISCO , CA - February 25, 2004

Skybox Security, Inc. today announced the first commercial application of an attack simulation technology to help enterprises predict and manage security risks. While attack simulations have shown promise in university and government laboratories, no one has been able transform these algorithms into an enterprise product for large complex networks - until now.

"Dating back to 1998, attack graphs have been produced manually. Since construction by hand is error-prone and impractical for networks larger than a few hundred nodes, researchers have proposed automated techniques. Skybox has finally cracked this problem, automating the vulnerability assessment process, while still leaving the human as the ultimate decision maker to review, accept or reject the recommended remediation. With SkyboxT View, attack simulation is ready to become the proactive layer in enterprise defense in depth architectures," said Dr. Alper Caglayan, Principal Scientist at Milcord LLC, a researcher focused on reasoning under uncertainty, machine learning and software agents and co-author of "Agent Sourcebook."

Attack simulation technology is shaping a new class of Exposure Risk Management (ERM) solutions because it is the only way to predict all possible attack routes and zero in on the real exposures - the primary vulnerabilities that lie directly on a path to critical business applications and are reachable and exploitable. Attack simulations create a "step-by-step recipe of an attack," describing the ways in which a system may be compromised. By using network topology-based attack graphs that are synched with a vulnerability dictionary, security teams can simulate and understand the ways in which they will be attacked, determine the likelihood and impact of these attacks and decide what action to take where the risks are unacceptable. Executed on a daily basis, this continuous process provides an up-to-date view of the organization's security status, the impact of recent and planned changes to the enterprise network, and the impact of new vulnerabilities and threats.

"Skybox Security has made real-world attack simulation technology feasible for the first time by overcoming the scalability problems of previous approaches. The result, Skybox View, was released to customers in November of 2003. The product contains several breakthrough technologies that were adapted to large enterprise networks. We took our product through dozens of pilots in live environments and we are extremely pleased with the results and the feedback we have had. It has been a real success," said Moshe Meiseles, CTO and Vice President R&D, Skybox Security.

About Skybox Security

Skybox Security, Inc. is an enterprise software company that develops and markets next-generation exposure risk management solutions that help enterprises identify and mitigate critical risks in hours versus weeks. Unlike conventional vulnerability management solutions, the company's flagship product, Skybox Ô View, leverages existing firewall, router, network and vulnerability data to apply breakthrough modeling and attack simulation technologies that reveal the one to two percent of reported vulnerabilities that impact critical business applications. With Skybox View, executives and security professionals can dramatically raise security levels by shrinking the window of exposure from weeks to hours, understand critical exposures in the same terms, and apply scarce security resources where they are needed most.

Founded in 2002, the company is headquartered in Palo Alto , California and is backed by Benchmark Capital, Lightspeed Venture Partners, Carmel Ventures, and Mofet Technology Fund. For more information contact (650) 565 8060 or http://www.skyboxsecurity.com.