Press Release: August 03, 2010
Topics:

HP TippingPoint Updates Zero Day Initiative Program to Improve Security for Clients

New policy enforces deadline to help eliminate vulnerabilities in vendor software

PALO ALTO, Calif. -- HP today announced an enhancement to the HP TippingPoint Zero Day Initiative (ZDI) that calls for the publishing of vulnerability advisories no later than six months after flaws are detected and submitted to the program.

After this period, ZDI will publically release limited details of the vulnerabilities so end-users can take precautionary measures. By establishing a deadline, ZDI is encouraging vendors to fix affected software quickly, reducing the risk of potential security attacks through identified weaknesses in these applications.

ZDI, managed by HP TippingPoint, is a research program designed to improve security by identifying software flaws that lead to cyber attacks and security breaches. This policy update makes ZDI one of the first vendor-agnostic research organizations to impose a time limit on vulnerability disclosure cycles.

This policy change also makes it easier for HP to keep its TippingPoint clients’ systems up to date and protected from the latest security exploits. Once vulnerabilities are validated by ZDI, HP TippingPoint’s Digital Vaccine Labs (DVLabs) immediately develops a filter to provide protection from threats targeted at that weakness. This process enables HP TippingPoint Intrusion Prevention System (IPS) clients to more quickly harden their networks against security attacks.

”Comprehensive protection of critical data assets requires organizations to keep their defenses up to date as malicious activity reaches new levels and applications become more complex,” said Aaron Portnoy, manager, Security Research, TippingPoint, HP. “This policy change is critical for staying ahead of threats so users can reduce data, financial and productivity loss.”

HP TippingPoint products are part of the HP Secure Advantage portfolio. More information about HP TippingPoint solutions is available at www.hp.com/go/networking.

About HP

HP creates new possibilities for technology to have a meaningful impact on people, businesses, governments and society. The world’s largest technology company, HP brings together a portfolio that spans printing, personal computing, software, services and IT infrastructure to solve customer problems. More information about HP (NYSE: HPQ) is available at http://www.hp.com/.


This news advisory contains forward-looking statements that involve risks, uncertainties and assumptions. If such risks or uncertainties materialize or such assumptions prove incorrect, the results of HP and its consolidated subsidiaries could differ materially from those expressed or implied by such forward-looking statements and assumptions. All statements other than statements of historical fact are statements that could be deemed forward-looking statements, including but not limited to statements of the plans, strategies and objectives of management for future operations; any statements concerning expected development, performance or market share relating to products and services; any statements regarding anticipated operational and financial results; any statements of expectation or belief; and any statements of assumptions underlying any of the foregoing. Risks, uncertainties and assumptions include macroeconomic and geopolitical trends and events; the execution and performance of contracts by HP and its customers, suppliers and partners; the achievement of expected operational and financial results; and other risks that are described in HP’s Quarterly Report on Form 10-Q for the fiscal quarter ended April 30, 2010 and HP’s other filings with the Securities and Exchange Commission, including but not limited to HP’s Annual Report on Form 10-K for the fiscal year ended October 31, 2009. HP assumes no obligation and does not intend to update these forward-looking statements.

© 2010 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

About HP

HP Inc. creates technology that makes life better for everyone, everywhere. Through our portfolio of printers, PCs, mobile devices, solutions, and services, we engineer experiences that amaze. More information about HP Inc. is available at http://www.hp.com.