Barracuda Networks plans to focus on finding prior art to defend itself and the open source ClamAV project against patent claims by rival anti-virus vendor Trend Micro, which stressed Tuesday that it owns a tested and valid patent.
Barracuda, facing a Trend Micro complaint before the U.S. International Trade Commission (USITC), will work on showing the agency that other companies used gateway anti-virus scanning before Trend Micro received its patent in 1997, Barracuda said Tuesday. Barracuda, based in California, uses ClamAV code in some of its products.
"In their claim, Trend Micro is seeking an interpretation of its ... patent such that would give it exclusive control of gateway antivirus scanning," said Kylie Heintz, spokeswoman for Barracuda.
"We believe that neither our products, nor the free and open source ClamAV software, infringe the patent, and further we believe that the patent itself is invalid due to prior art," Heintz said.
The USITC launched a formal investigation of the patent claims in December.
Barracuda's announcement that it intended to find prior art spurred action in the open source community. Early Tuesday, Groklaw, a blog focused on open source legal issues, posted an announcement asking for help finding prior art.
But Trend Micro, which filed the USITC complaint in November, has a "known and time-tested patent," said Michael Sweeny, a spokesman for Trend Micro. The company won a similar dispute with rival Fortinet before the USITC in May 2005, Trend Micro noted. Fortinet later settled the patent claims, getting a license from Trend Micro.
In addition, Trend Micro filed a similar complaint against Panda Software International and Panda Distribution, which use a proprietary software package, said Mark Davis, Trend Micro's outside counsel. Trend Micro has not targeted the ClamAV project, he said. "This is purely against commercial competitors," Davis added.
Commercial software vendor Sourcefire purchased the ClamAV project in August. Sourcefire declined to comment on the patent dispute.
Open source software is not the issue in the USITC complaint, Sweeny added. "We can't see how this would negatively impact open source development," he said.
Barracuda CEO Dean Drako called scanning for viruses at the gateway "an obvious and common technique" used by most businesses. Almost anyone, including the owners of more than 1 million ClamAV installations, could be sued by Trend Micro if the company's patent claims hold up, he said in a statement.
Barracuda, maker of hardware containing cybersecurity products, has won support in the dispute from the Software Freedom Law Center, a group working to protect open source software. The law center is grateful to Barracuda for fighting the patent, said Eben Moglen, the center's founding director. "Collective defense from software patents is a shared responsibility for everyone in the free software ecosystem," he said in a statement.
Barracuda has a pending lawsuit seeking to invalidate the patent in the U.S. District Court for the Northern District of California, San Jose division.
Trend Micro is misusing the USITC because it's filing a trade complaint asking the agency to bar importation of a product against a company based in the United States, Barracuda added. "Barracuda Networks designs and manufactures all of the products in question in the United States," Drako said in his statement. "We believe Trend Micro's actions are a blatant abuse of the U.S. legal system."
But Trend Micro said the USITC is an appropriate venue for the patent complaint. The 2005 Fortinet ruling was also against a company based in the United States, Davis said. "There appear to be several components that are imported," he said.
Trend Micro's USITC complaint says Barracuda uses code from ClamAV, which is written in part in Europe and Australia. Barracuda also imports hardware components, the complaint says.
Get the independent advice and expertise you need to support a virtual workforce.
The increase in Linux popularity has increased the frequency and sophistication of malware attacks. Read this 2 page white paper now to learn how you can protect your Linux environment with real-time protection that is certified by all major Linux vendors.
Download now »Ensuring acceptable application delivery will become even more difficult over the next few years. As a result, IT organizations need to ensure that the approach that they take to resolving the current application delivery challenges can scale to support the emerging challenges. This handbook elaborates on the key tasks associated with planning, optimization, management and control and provides decision criteria to help IT organizations choose appropriate solutions.
Download now »A common misconception is that mid-range storage requirements are dramatically different than that of a larger enterprise. Mid-range storage users may require less capacity, but they have similar functionality and management requirements. This ESG paper examines mid-range storage needs and reviews a new solution that adjusts size while retaining value, performance and functionality.
Download now »
Sign up to receive Security Resource Alerts
This white paper provides guidance on how to develop a strategic approach to managing and monitoring logs, a key function required for compliance with many regulatory mandates and a critical defense against security threats.
Download now! »Learn about the processes and technologies that support security information management (SIM) operations, as well as the business case for SIM. The series examines different options for implementing SIM and gives you evaluation criteria for selecting the best option for your organization.
Download now! »Learn the strategies, actions, and capabilities that Best-in-Class organizations employ and technologies they choose to obtain superior performance against various security performance metrics. This report provides guidelines for identifying which security solutions to consume as a MSS and defines best practices for choosing and managing MSSPs.
Download now! »