Smart made simple
Simple and elegant in concept, Content Disarm and Reconstruction (CDR), also known as “file sanitization”, is a proven cyber-protection technology that delivers superior results in the prevention of advanced persistent threats (APT’s), ransomware, zero-days, and “traditional” viruses, complimenting other anti-malware technologies such as sandboxes and detection-based AV’s. It efficiently blocks all file-based attacks from known and unknown malware by enforcing a “known good” format on all incoming files rather than seeking to detect the endlessly evolving “known bad”. In a way, CDR is like sterilizing an operating theater prior to surgery rather than applying antibiotics to an already infected patient.
A good CDR solution will have both detection and disarm/reconstruction capabilities. In the CDR process, a file is broken-down to its elementary parts as defined by international/vendor specifications. The individual components are deeply scrutinized and cleansed from any malware, stripped of any embedded active codes, and reassembled in a way that disrupts any remaining hidden malicious code. The end results is a functionally identical, completely new and safe copy of the original file.
This deconstruction and reconstruction capability also serve to apply surgical file redaction for data-loss prevention (DLP) schemes on outgoing data flows.
We are certain that our CDR technology is practically impregnable. Our clients’ independent penetration tests repeatedly show up to 99.99 % detection rates for unknown threats, and that’s the bottom line – but it’s not the whole story.
Adding a new component to an existing system can be a major challenge, and flexibility is key to a successful implementation. With this in mind, we built GateScanner to be modular, highly configurable and easily scalable. You can pick and choose any part of the CDR process you want to implement, and how. You can choose which of your channels to protect, and you can chain up to ten GateScanner engines on-the-fly, to achieve virtually unlimited processing capacity.
Challenged to deliver unique solutions for a wide variety of client network configurations, we developed an External-Tools-Integration engine, enabling the insertion of GateScanner processing into practically any point along the data processing flow – before or after your existing security tools – and optimizing the overall performance of all tools in the process. GateScanner will upgrade your entire security profile.
For us, every client is an opportunity to get creative. Our highly dedicated development team works closely with clients to fulfill their most ambitious goals. We look forward to creating your solution!
CDR deep-scans of deconstructed files with multiple-AV’s, including Next-Gen AI/ML AV, reaching detection levels of up to 2.5 times the rate of detection for the original composite file scan
Sasa Software is privately owned by Kibbutz Sasa, Israel, with the majority of profits channeled back into R&D. We’re in this for the long run