EEye Digital Security

eEye Digital Security is a company that specialises in analysis and prevention of security vulnerabilities in software. Founded by Firas Bushnaq and Marc Maiffret in 1997, the company has been credited by Microsoft with bringing a number of security vulnerabilities to their attention and is a noted authority on information security processes.

In 2001, eEye discovered a security vulnerability in Microsoft's Internet Information Server (IIS) web server software. After reporting the issue to Microsoft and working with them to develop a patch, they released a security advisory report that outlined the vulnerability on June 18 2001 and linked to the patch. [http://www.eeye.com/html/Research/Advisories/AD20010618.html] A month later on July 13, the Code Red worm was released that took advantage of this vulnerability to infect computers running unpatched IIS software. [http://www.eeye.com/html/Research/Advisories/AL20010717.html]

eEye have also released advisories on security flaws in various components of Internet Explorer such as its ActiveX component and its PNG display component. [http://groups.google.com/groups?selm=bi32n6%24fo7%241%40FreeBSD.csie.NCTU.edu.tw&output=gplain] [http://groups.google.com/groups?selm=MKEAIJIPCGAHEFEJGDOCCEDMIBAA.marc%40eeye.com&output=gplain]

eEye is known for their products Retina Vulnerability Assessment Scanner, Blink Intrusion Prevention System and REM Enterprise Management Console, all of which focus on finding and preventing exploitation of security breaches. In 2004, the Company was awarded a multi-million dollar contract from DISA, the IT arm of the United States Department of Defense (http://www.eeye.com/html/company/press/2004/PR20040623.html).

The company's headquarters is in Aliso Viejo, California.

External links

* [http://eeye.com/ eEye Digital Security site]
* [http://msnbc.msn.com/id/4486825/ An eEye on Microsoft]
* [http://grc.com/securitynow.htm#91 eEye's Blink discussed on Security Now! Episode 91]