ToBe Security belives that by implementing open source security products, the end consumer will implement a cost effective,secured product.

"Bugs are getting fixed in record time because of open source, so there is now an architecture argument in favor of open source security," said Kraft. More quickly deployed patches mean a shorter period in which a company is vulnerable to attack".- Andrew Bardin Williams 19 Apr 2006 | SearchOpenSource.com

ToBe Security provieds consulting and implementation for:

MailScanner

A free Anti Virus and Anti Spam filter protecting over 1 billion downlaods.

MailScanner is already a highly-respected open source e-mail security system, with more users than AOL and Hotmail combined, and this new release increases its stability and performance. It processes 500 million e-mail messages every day, removing 2 million viruses and identifying 75 million spam messages. MailScanner is used at 20,000 sites around the world protecting top government departments, commercial corporations and educational institutions. It is becoming a standard feature of many ISP's as virus protection and spam filtering are now essential requirements for most users.

MailScanner scans all e-mail for viruses, spam and attacks against security vulnerabilities. It is not tied to any particular virus scanner, but can be used with any combination of 14 different virus scanners, allowing sites to choose the "best of breed" virus scanner. Being open source, site administrators can audit and verify the integrity of the system. Its role is a major part in the security of a network, and so it must act as a trusted service. The only way to achieve the required level of trust is to be open source, an approach the commercial suppliers are not willing to take. MailScanner has been developed in a world-leading Electronics and Computer Science Department at the University of Southampton, and is distributed for *FREE* under the GNU Public Licence.

For more information please visit http://www.mailscanner.info

Nagios

Nagios is a system and network monitoring application. It watches hosts and services that you specify, alerting you when things go bad and when they get better.

Nagios was originally designed to run under Linuz, although it should work under most other unices as well.

Some of the many features of Nagios include:

Monitoring of network services (SMTP, POP3, HTTP, NNTP, PING, etc.).
Monitoring of host resources (processor load, disk usage, etc.).
Simple plugin design that allows users to easily develop their own service checks.
Parallelized service checks.
Ability to define network host hierarchy using "parent" hosts, allowing detection of and distinction between hosts that are down and those that are unreachable.
Contact notifications when service or host problems occur and get resolved (via email, pager, or user-defined method).
Ability to define event handlers to be run during service or host events for proactive problem resolution.
Automatic log file rotation.
Support for implementing redundant monitoring hosts.
Optional web interface for viewing current network status, notification and problem history, log file, etc.

For more information please visit http://www.nagios.org

Snort IDS/IPS

Snort is an open source network intrusion prevention and detection system utilizing a rule-driven language, which combines the benefits of signature, protocol and anomaly based inspection methods. With millions of downloads to date, Snort is the most widely deployed intrusion detection and prevention technology worldwide and has become the de facto standard for the industry.

Snort is capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, amongst other features. The system can also be used for intrusion prevention purposes, by dropping attacks as they are taking place. Snort can be combined with other software such as SnortSnarf, sguil, OSSIM, and the Basic Analysis and Security Engine (BASE) to provide a visual representation of intrusion data. With patches for the snort source from Bleeding Edge Threats, support for packet stream antivirus scanning with ClamAV and network abnormality with SPADE, in the network layer 3 and 4, is possible with historical observation.

For more information please visit http://www.snort.org