Imperva and Sentryware pad layer 7 security
Hive and SecureSphere deliver enhanced protection to Web applications
The real power of SecureSphere comes into play with its CAV (Correlated Attack Validation) engine. The CAV engine takes collected data and compares it to known vulnerabilities and against learned traffic patterns. It then distills all data and looks for patterns. It only alerts you when there is sufficient reason to believe an attack is taking place. SecureSphere can track user activity over time and help determine the true intent of the user.
Installing SecureSphere can take less than a day, but you will want to put it in learning mode for a week or more to allow it to learn what traffic to expect on your LAN. The Irregular Events and Alerts pages in the Activity Console are well laid out and easy to read. My overall impression is that with proper tuning SecureSphere can provide a level of security for your Web and database servers not found in most other layer 7 security products. Unfortunately, the price tag my prove to be too high for all but the largest of companies.
Both Sentryware and Imperva have taken layer 7 protection to new heights. Although I like SecureSphere’s CAV engine and ability to learn application behavior, I believe Hive’s proactive approach to security is going to be the model for future application security devices.