August 2005
What does the bestantispam solution have?
Table of Contents
01. Anti-Spam Market Overview………………………………………………….
02. Introducing SpamSniper Enterprise Edition…………………………………
03. SpamSniper Architecture and Deployment………………………………….
04. SpamSniper Technologies…………………………………………………….
05. Powerful and Flexible Administration………………………………………...
06. SpamSniper Major Customers and Partners………………………………..
07. SpamSniper Press Release…………………………………………………..
08. About Us: Jiransoft at A Glance………………………………………………
09. Conclusion I – IV……………………………………………………………….
01Anti-Spam Market Overview
The Growth Trend of Spam
Why So Many in Enterprises?
• The increasing dependence on email.- Primary form of business communication.
- Spammers now have captive audience.
Source: www.symantec.com
• The increasing dependence on email.- Primary form of business communication.
- Spammers now have captive audience.
• The economics of spam.- Falling costs of processing, bandwidth, email address etc.
- Spammers need only small response rate to make a profit.
• The adaptability of spammers.- The attractive economics of spam business.
- Technical ability of Spammers getting higher.
[Source: Mar. 2004.IDC]
Anti-Spam Market Around the World
Secure Content Management S/W
7,477 6,665 5,814 4,994 4,207 3,427 Total
935 786 645 522 421 338 CF
1,690 1,380 1,087 829 593 397 AS
4,852 4,499 4,082 3,643 3,193 2,692 AV
200820072006200520042003
Unit: USD in million
[Source: Mar. 2004.IDC]
Anti-Spam Market Around the World
Secure Content Management S/W
22.60%12.50%9.90%CF
33.60%22.60%11.60%AS
12.50%64.90%78.50%AV
Growth Rate 2003-20082008 Ratio2003 Ratio
-20%
-10%
0%
10%
20%
30%
40%
1
H/W장비 F/W장비
H/W장비 IPS장비
SCM 백신
SCM 스팸
SCM 컨텐츠 필터링
SA PKI
SA SSO
SA IM/IAM
F/W 네트워크F/W
F/W PC F/W
IDS NIDS
IDS HIDS
[Source: Mar. 2004, IDC.]
Anti-Spam Market Around the World
Expected Annual Growth Rate:
• On 2003 AS grew at 56% comparing 2002, marked 400 million dollars.
• During the next 5 years, expected to highly grow at 33% annually.
• First stage of market, no other company with +10% of market share.
• Giant security companies expected M&A to get technologies.
Figures & Facts:
Anti-Spam Market in Korea
Source: 29 July 2005, Spamhaus
Spam Origination Statistics: The Top 10
92Hong Kong10
93Argentina9
122Brazil8
150Canada7
158Japan6
188Taiwan5
225Russia4
314South Korea3
437China2
2,547United States1
No. of Current Listed Spam IssuesTop10 Worst Spam Countries
South KoreaSouth KoreaOne of the most advanced IT infrastructure around the world.One of the most advanced IT infrastructure around the world.Spammers are taking advantages.Spammers are taking advantages.One of the top spam source.One of the top spam source.
New form of Spam Attack in Korea
0%
20%
40%
60%
80%
100%
Others 8.4 6.9 7.2 6 6 3.1 2
Fraud 1.9 1.7 1.5 1.3 1.7 1.9 2.1
Porno 1.8 1 0.9 1.8 1 0.5 0.4
Copyrights 0.1 0.1 0.1 0 0.1 0.1 0
Virus 0 0 0 0.1 0.2 0.1 0.1
Oct-03 Nov-03 Dec-03 Feb-04 May-04 Sep-04 Nov-04
Fraudulent(Phishing)
Pornorelated-
contents
Anti-Spam Market in Korea
Expected Anti-Spam Market Volume in South Korea:
1515--20 Billion20 Billionin KRWin KRW(2005)(2005)
10 Billionin KRW(2004)
6 Billionin KRW(2003)
3 Billionin KRW(2002)
Why Anti-Spam ?
This increases in both the volume and % of spam and other email threats CAUSE…
SpamSpam
• Drains server resource• Increases operating costs• Decreases productivity
Virus Threats
SMTP Attack Info. Leak
• Increases network traffic• Data loss• System Failure
• Mail server attack• Junk mail• Mail Bomb • Inside Info. Leak
• Personal Info, leak• Possible to send spam/virus
mails to others
Drains Resource
02Introducing SpamSniper Enterprise Edition
What is the best antispam solution?
The lowest possible false positive rate Low to zero administrationFPR of SpamSniper = 0.002 – 0.003%
The best antispam provides:
BESTBEST
The Highest Spam Catch RateSpam Catch Rate of SpamSniper = 98%
SpamSniper provides easy administration.
Mail Traffic Mgmt.
Mail Server Protection
Spam / Virus Mail Filtering
Inside InformationLeak Prevention
• DoS Attack• Mail Bomb• Junk Mail• Illegal Relay
• Full control overoutgoing mails
• The most reliable& accurate filtering available.
• Immediate & accuratedetection/response.
• Monitoring & management of all incoming / outgoingmails
What is SpamSniper ?
Why SpamSniper ?
InsideInsideInformationInformation
Leak Leak PreventionPrevention
Higher CatchHigher Catch--RateRateLower FPRLower FPR
FlexibleFlexibleAdministrationAdministration
AccurateAccurateAntiAnti--VirusVirus
EffectiveEffectiveEmail ThreatEmail ThreatProtectionProtection Instant
Response
PowerfulPowerfulSpam FilteringSpam Filtering
Reliable/StableService
SpamSniper Key Features
Effectiveemail threat protection
Effectiveemail threat protection
• SMTP Session Control.• Real-Time Black List.• AI Blocking.
• SMTP Session Control.• Real-Time Black List.• AI Blocking.
• Black URLs.• Heuristic filtering engine
: Filters mail headers / contents in bodies.• Bayesian filtering engine
PowerfulSpam Filtering
• Award-winning world-class anti-virus integrated.• VPS (Virus Pre-process System).• VCS (Virus Checking & Caching System).
AccurateAnti-Virus
• Filters every type of contents / attachments of outgoing mails.• Returns mail that violates policies & requests permission from
the appropriate authority to send mail.
Inside InformationLeak Prevention
SpamSniper Advantages
Catch More SpamLower FPR
Catch More SpamLower FPR
• Blocking Rate : More than 98%.• False Positive Rate : 0.002 – 0.003%.• Blocking Rate : More than 98%.• False Positive Rate : 0.002 – 0.003%.
• Updates Black URLs on every minute, Hourly Heuristic Filter Update & Daily Bayesian Filter Update.
• Instant response when new spam / virus outbreaks.Instant Response
• Web-based easy administration.• Separate policies by enterprise-wide, domain, group & individual.• Consolidated Reports & Various Statistics.
FlexibleAdministration
• FOD (Fail Over Device) integrated.• Real-Time Alerts & Warnings to Administrators.
Reliable / StableService
03SpamSniper Architecture and deployment
SpamSniper Architecture
SMTPReceived
Decode/Unpack
VPS QueueSMTPSent
3rd-partyA/V engine
HeuristicSpam Filter
BayesianSpam Filter
QuarantineSpam mails
Statistics /System Logs
Anti-spamFilter Update
Log mgmt. Auto BackupAnti-virus
Filter Update
CentralFilter DB
Filter Admin. Tools by Jiransoft.
Account DBStatistics DBSystem Logs
Legit / Spam mails
MIMEChar-set
AccountDatabase
EmailSpam
Virus mail
Admin.Tool
AccountsMailsFilters
SpamSniper Deployment Options
Flexible deployment optionsSpamSniper provides the following on-site deployment options. It depends on your network structure and mail service environment.
Proxy Set-up:
By switching the MX records at the DNS server, SpamSniper routes mails to your mail server.
Bridge Set-up:
SpamSniper processes SMTP traffic first then delivers to your mail server.
* Failover function optional.
In the unlikely event, when the antispam protection momentarily fails,
We make sure the email server can still deliver mail,
DO NOT WORRY ABOUT SYSTEM FAILURE !
Mail Server
Fail Over Device
SpamSniper Fail Over System
EmailSpam
Virus mail
Quality ControlQuality Control
Our ISP PartnersSelf-exposed
Mail Accounts
SpamsniperIndividual Users
Spam
CustomersCustomersIntelligent Pattern live Update
Spam
X
24/7
Decoy Accounts
Spam Honey-Pot
SpamSniper Smart Live Filter Update
SpamsniperEnterprise Customers
THE POWER OF KNOWLEDGE !
Spam
04SpamSniper Technologies
SpamSniper Filtering Process
Blocks mass-mails.Notify mass-mailing.Checks Regulation of mail address.Keyword Search.Valid mail account.Checks RBLs.Control SMTP session.Protects from Open Relay.
Judge level of threatness.3rd-party AV.VPS
(Virus Pre-processSystem).
Bayesian Filtering.HeuristicFiltering.Identifiedspam URLs.
Do Not Accept QuarantineCleaned & Delivered
/ Deleted
SMTP Control AV AS Queuing /ProcessedOutgoings
EmailSpam
Virus mail
Automatic Backup(Mails & DBs).
Inside Info. Leak Prevention(over outbound mails)
SMTP SessionControl
BlocksIllegal Relay
Real-time Black List Protects from
DoS Attack
AIBlocking
RegulationsCheck
SpamSniper SMTP Filtering Technologies
Blocks Illegal RelayBlocks Illegal RelayBlocks Illegal Relay
• Prevents Illegal Relay.• Blocks junk mails by RBL.
Mail Server ProtectionMail Server ProtectionMail Server Protection
• Against Mail Bomb & DoS Attack.• Blocks junk mails automatically.
SMTP Session ControlSMTP Session ControlSMTP Session Control
• Filters massive mails by limiting access / concurrent connection.
Regulations CheckRegulations CheckRegulations Check
AI BlockingAI BlockingAI Blocking
• Rejection by limiting mail capacity & DNS MXvalue availability check.
• Automatic Blocking based on mail information(IP, Subject, Body) that comes in repeatedly.
Transformed /New Virus Mails
AV Action Flow (SOPHOS + VPS)
Sending a notice to sender or recipient of virus mails
Sending a notice to sender or recipient of virus mails
VPS scanningVPS scanningChoosing a method
to handle viruses
Choosing a method to handle viruses
Designating the scope of
the virus check & response methods
Designating the scope of
the virus check & response methods
Email Server
SOPHOS AV EngineSOPHOS AV Engine
Original VPS
Original VPS
QuarantineDelete
Clean/Deliver
Checks mail subjects, words & sentences.Supports Regular Expression (irregular subject checks also supported).Distinguishes between capital & lowercase letters.
Subject Filtering
Detects certain characters or words in mail bodies.Filters URLs & IPs hidden in mail bodies. Supports HTML purification
Body Filtering
Analyzes spam for URLs that have been reported as malign.URL Engine
Analyzes spam for certain keywords or a number of specified keywords
Heuristic Engine
From, To, Cc and Bcc headers & IDs, names & domains of a given email. IP, domain & reply-to address of the mail-sending server. Filters out emails with To, Cc or Bcc headers that contain toomany recipients.
Basic Header Filtering
Filters content type, X-mailer, X-priority, X-mimeOLE, X-msmail-PriorityExpanded Header Filtering
Blocks spam using statistics in accordance with the Bayes principle. The mail server at Jiransoft automatically provides standards for analyzing spam. Administrators can boost filtering rates significantly (over 99.99%) by configuring the Bayesian engine to learn about different types of email.
Bayesian Engine
Filtering EnginesFiltering Engines
Filters attachments based on name, size, number & length of file names.Filters contents of attached files
Attachments Filtering
Filtering TargetsFiltering Targets
SpamSniper Contents Filtering Technologies
05Powerful and Flexible Administration
Powerful and Flexible Administration
• Centralized Web-based administration.
• Consolidated Reports & Various Statistics.
• Centralized Monitoring Service.
• Filtering Customization.
• Inside Information Leak Prevention.
• Mail Management.
• System Overview.
• Daily Report.
Others
Role-based
Statistics
Mail flows
• Searches by periods / other conditions.• Statistics can be printed / saved as a *.xls file.
• Administrators for each domain / group can searchsummarized statistics under their authority.
• For each filter, virus, reason of rejection,sender’s IP, sender’s email address,recipient's email address, domain & group.
• Number of incoming/outgoing legitimate,spam, virus and rejected messages.
Consolidated Reports & Various Statistics:
Guarantees the reliability of your mail service 365/24.
We provides a 365/24 monitoring service to prevent a possible system failure. We keep a close eyes on the mail service of client companies to guarantee reliable and trouble-free mail service.
SA & Administrator
Service ProcessService ProcessService Process
Centralized Monitoring Service:
Mail Service Monitoring
Possible Failure Detected
Failure
Reliable Mail ServiceGuaranteed
Alert & Preventive Measures
Alert & Repair
Our precise content filtering engine provides 10 steps of multiple filtering so that managers can set up flexible blocking policies and easily search and update their settings.
Users can:• Screen and modify filter policies by SMTP, system, domain, group and individual level.• Classify filters and search by content, action, registration path, etc. • Search pattern lists for all blocking and register target users AI-Blocking. • Set up live update policies: usage and registration set-ups. • Add filters and search functions.• Save and print a file.
Provides powerful and convenient filter management functions
Filtering Customization:
FeaturesFeaturesFeatures
Protects Critical Internal InformationProtects Critical Internal Information
Setup an InsideInformation
Security Policy
Search contents ofattachments
Filter everytype of email
contents
Set spam/virus maildefinition
Return mailviolates policy /
Request permission
Inside Information Leak Prevention:
Facilitates e-mail management with its powerful administrative tools, allowing users to restore, delete, store, search mails and gain an accurate picture of mail flow.
The most convenient and powerful mail management function of all comparable products
Email Management:
FeaturesFeaturesFeatures
• List up All of incoming / outgoing allowed / rejected mails and Individual Mail Management, including browse and search.
• Provides advanced search criteria, including period, mail type, sender, recipient, subject and contents.
• Features crucial management functions including search, delete and send spam and virus warnings to the original recipient and administrator.
• Allows users with the appropriate permissions to browse, search and manage mail.
• Includes functions to browse, download and print the original scripts of mail messages.
• Provides a rejected email list – unique in Korea
Detailed monitoring of the overall system’s condition
System Monitoring:
FeaturesFeaturesFeatures
• Shows network (eth, IO) usage rates.
• Monitors system resources (CPU, process, system load, # of users, memory, swap area).
• Follows disk usage (/boot, root file system) rates.
• Searches by hour, day, month and year.
• Provides an option to save the system condition logs.
• Alerts administrators when HDD capacity is overloaded.
Administrators can ensure reliable system operations by using our system monitoring tools to gather information on the system’s operating condition and usage rates.
Individual users can manage their mails through the “Daily Report”, without needing to login or open a new webpage.
21 1: Daily Report
2. Menu in the report.
Daily Report:
FeaturesFeaturesFeatures
• Check and restore blocked spam mail.• Setup additional individual spam screening policy.• Reject daily reports.• Send real-time spam mail reports.
06SpamSniper Major Customers & Partners
Our Customers Lineup
SMBs30.5%
Government Bodies25.9%
Large Corporations
20.4%
Schools /Universities
18.7%
Banks /Financial
Institutions4.5%
• Samsung Samsung Card, Samsung Mall, Samsung Insurance etc.
• LGLG Chemical, LG Mart, LG Life Science, LG Petrochemical, LG Innotek, LG CNS, LG Insurance etc.
• SK GroupSK Corp., SK Life Insurance, SK Engineering & Construction etc.
• POSCOPOSCO, POSCON, POSCO Engineering & Construction etc.
• Hyundai GroupHyundai Merchant Marine, Hyundai Information Technology etc.
• Hanhwa Group Hanhwa Corp. and 30 affiliated companies including Hanhwa L&C, Hanhwa Stores, Hanhwa Chemical, Hanhwa S&C, Hanhwa Securities etc.
Our Major Customers
Our Major Customers
• Kumho GroupAsiana Airlines and 20 Affiliated Companies including Asiana IDT, Kumho E&C, Kumho Life Insurance, Kumho Petrochemical etc.
• UniversitiesSeoul National University, KAIST, Pusan National University, Pukyong National University, Chungnam Natioanl University, Information and Communications University, Daegu University, Gongju Natioanl University of Education, Sangmyung University, Gwangju Institute of Science and Technology, Hannam University, Keimyung College, Kaywon School of Art and Design, Pusan University of Foreign Studies, Ansan College, Gumi College, Keukdong College, Paichai University, Yonam college, Chonan University, Sunlin College, Daejin University, Shingu College, etc.
• Banks & Financial InstitutionsSamsung Card, BC Card, Samsung Fire & Marine Insurance, Kumho Life Insurance, LG Insurance, Korea Development Bank, Choheung Bank, Korea Eximbank, Pusan Bank, Dongwon Securities, Mirae Asset Securities, Hanhwa Securities, Midas Asset, Seoul Credit Guarantee Foundation, Pyeongtaek Mutual Savings Bank, etc.
Our Strategic Business/Research Partners
Sophos Inc.
Dr. Sakuraifrom Kyushu
Uni.
Ahn Lab.
Korea Telecom
BusinessPartners
ResearchPartners
KSIGN Co., Ltd.
IIRT ResearchCenter
07SpamSniper Press Release
The Summary of Press Release (01):
[Hankuk Ilbo Daily – 2004.07.06] Blue chip company for value investment – Jiransoft
Spamsniper is the leading anti-spam product, owning more than 40% of the Korean market. Seoul national university and various financial institutions acknowledged Spamsniper as providing the best anti spam and virus protection technology available. Jiransoft runs a spam and virus mail research team, Anti-Spam Lab - the first of its kind in Korea - which supports the highest filtering rates. Recently, Jiransoft began supporting VPS (Virus Prevention System) to provide additional protection from worm viruses. It also supports ASP, which provides an affordable spam filtering and anti virus service for small- and medium sized companies.
[The Electronic Times 2004-03-10 17:58] Jiransoft, expanding its spam filtering solution supply
On March 10th, Jiransoft (President Chi-young Oh) announced that it supplied National Federation of Fisheries Cooperatives and BC Card with its spam and virus mail filtering solution, “Spamsniper”. The contracts were awarded to Spamsniper after it won the top mark in a competitive bidding process. A company official said that the fact that Spamsniper won a series of top marks from financial industries, well-known for their strict standards, suggests Spamsniper is the most appropriate solution for protecting financial systems. Last year Jiransoft signed contracts with Korea Development Bank, Choheung Bank, Pusan Bank, SK Life, Kumho Life and the Seoul Credit Guarantee Foundation, and is currently pursuing contracts with 20 other financial institutions in addition to the National Federation of Fisheries Cooperatives.
[Maeil Kyungje – Economic Daily 2003-10-30 20:09] Spamsniper maintains the top position
Jiransoft (President Chi-yeong Oh), a leading spam filtering solution provider, announced on October 30th that the third quarter revenue of Spamsniper, its spam and virus filtering solution, more than doubled their second quarter earnings. Moreover, they expect their fourth quarter revenue to triple their second quarter earnings, allowing Jiransoft to maintain its top position in the industry. Over the course of the year, Spamsniper has strengthened its brand recognition, while maintaining a dominant share of the market.
[Financial News 2003-09-04 19:00][Over-the-counter Blue chip company IR – Jiransoft] A leading supplier for about 1900 clients
Jiransoft is a leading provider of spam filtering software in Korea. The Seoul-based company plans to reinforce its internal strength by 2005 and to expand overseas afterwards, operating out of its laboratory in DaedeokValley. Spamsniper’s monthly revenue has increased 1.5~2 times each month this year, claiming more than 50% of the domestic spam filtering software market. In particular, Spamsniper won top marks from a technology evaluation conducted by Seoul national university and is supplying KAIST, ETRI (Electronics and Telecommunications Research Institute), SK, Choheung Bank, Dongwon Securities and others with its products.
The Summary of Press Release (02):
08About Us: Jiransoft at A Glance
Who We Are ?
Jiransoft Co., Ltd.http://www.jiran.com
Founded: September, 1994
CEO & President: Chi young Oh
Headquarters: Seoul, Korea
R&D Center: Dae Deok-valley, Daejeon-city, Korea
Employees: +65
F A C
T S
H E
E T
r e a l s p e c i a l i s t s r e a l r e s u l t s
What We Are Doing ?
CoolMessenger
• No.1 Business IM.• Grasp school markets.• Japanese Edition.
SpamSniper
FileSafeOfficeHard
• No.1 Brand in Korea.• Technology Expert.• 40% of Market Share.
• File Security.• USB & PSs.• Japanese Edition.
• Online Storage.• File Management• Security
09CONCLUSION
CONCLUSION I:
Matured BUT
GROWING
Matured BUT
GROWINGIncreasingAS MarketIncreasingAS Market
Most Advanced
IT Infra.
Most Advanced
IT Infra.
• Many Early Adaptor. • Matured AS Market.
• Expected to grow to 15-20 Billion KRW
• Powerful IT Infrastructure.• Spammers taking advantages. • Being No. 3 Spam Source.
CONCLUSION II:
JAPANJAPAN
SimilarCulture
2-ByteCodes
Not ManyPlayers
Opportunityto be a
First Mover
CONCLUSION III:
CONCLUSION IV:
JAPAN • WIN from worst market.• Most Well-Known Brand. • Excellent Technology.
• High Quality Market.• In Funds. • Growing Needs & Wants.• Few Players.
Thank you very much !
Q & A