Security First® Corp. Launches SPxConnect™
Security Software for Web and Cloud Communications

Military and independently tested cryptographic-splitting technology
is used to eliminate “man-in-the-middle” vulnerability

Rancho Santa Margarita, CA, June 13, 2011 --  Security First® Corp., a data high availability and security company whose disruptive patented software technology is revolutionizing information handling, today announced the release of its newest software security product, SPxConnectTM. SPxConnect is a revolutionary technology for securing the data transmission between remote users and web or cloud based applications, designed to ensure that users‘ private information is not being redirected through a malicious eavesdropping third party.  

To date, communications over the web have been secured through Secure Sockets Layer and Transport Layer Security (SSL and TLS). This security methodology, however, has a major vulnerability known as a “man-in-the-middle” attack. This attack is a significant risk to web-based systems and in particular to financial transaction systems such as online banking, payment gateways, e-business websites, and credit card servicing platforms. Also vulnerable are web- and cloud-enabled back-office systems as well as non-HTTP applications such as some mail and database servers.

SPxConnect addresses this security vulnerability by creating a Distributed Trust Model™. At its core, SPxConnect uses the patented and Federal Information Processing Standards (FIPS 140.2) certified SecureParser® cryptographic splitting technology from Security First. This core cryptographic splitting technology is designed for and has achieved military-grade security certifications and passed rigorous independent vulnerability and assessment testing. SPxConnect securely splits data at each packet of information into multiple secure smaller packets and transmits them across an ultra-secure group of simultaneous connections. Each connection uses a separate uniquely issued certificate, establishing a Distributed Trust Model.

SPxConnect is easy to deploy, requires no user intervention, eliminates the needs for any additional hardware, is highly secure, and will not compromise productivity. By cryptographically splitting the data, SPxConnect further is designed to ensure that adversaries cannot obtain useable transmitted user information. This eliminates the possibility of anyone intercepting or stealing any useful private information. 

Independent Security Evaluators (ISE), a Baltimore-based security consulting firm specializing in security evaluation and penetration testing, has completed an in-depth design assessment and penetration test of the technology. “SPxConnect was fully evaluated at the design level, and penetration tests were conducted by our team of experts led by Dr. Charlie Miller and Dr. Matt Green,” said ISE President and CEO Dr. Avi Rubin. “We were not able to break it or obtain any useful information from data being transmitted between client users and server applications. SPxConnect is a product that uniquely addresses one of the major flaws in the current implementation of TLS.”

Security First CEO Mark O’Hare stated, “By using SPxConnect, organizations can secure data transmission across their enterprises on both internal and public networks. Web-based application and collaboration services can now be military-grade secure with little or no change to existing enterprise applications. We see SPxConnect as a key enabler for cloud computing because it can ensure the safe connections between cloud application and users, removing risks and saving enterprises millions of dollars of costs associated with data loss events."

About SPxConnect

• SPxConnect secures the data transmission between users and applications, ensuring that information is not being redirected through a malicious eavesdropping third party.
• Enterprises using SPxConnect can ensure that communications with their web and cloud based applications are not compromised, and that they can eliminate damaging and costly data losses.
• SPxConnect is a patented Distributed Trust Model that eliminates man-in-the-middle attacks.
• SPxConnect is game-changing technology that is easy to install, operate, and maintain.
• SPxConnect secures Internet communications between a remote user and web-enabled applications such as banking, commerce, enterprise databases, mail servers, and more.
• Independent Security Evaluators completed a successful independent security evaluation including design evaluation and penetration testing.

About Security First Corp.
Security First is an emerging industry leader in information assurance including data security, privacy, integrity, and high availability. Security First’s scientific discovery and patented lead technology SecureParser® Cryptographic Splitting is transformational software and meets even the stringent security requirements of military organizations, government agencies, and commercial enterprises. By replacing disparate bolt-on perimeter technologies with a single data-centric solution that can be applied to any digitized information, SecureParser ensures the confidentiality, integrity, and continuous availability of data-at-rest and data–in-motion while providing a platform for secure information sharing. Because it is woven directly into the fabric of the data, SecureParser protection remains with data for its entire lifetime. For more information, visit www.securityfirstcorp.com.

Contact
Security First Corp.
Jeff Kennedy
540.630.1701
info@securityfirstcorp.com
or
sales@securityfirstcorp.com
949.858.7525