An intriguing problem…

When we set out to solve the Web-application Security Problem, we began by examining all the current approaches of Firewalls, IDSes, IPSes, SQL Filters, etc. We asked, "why are these methods ineffective at stopping attacks and malware?"

We found that all these existing approaches have one thing in common: They all use a combination of pattern matching and lookups against a database of known attacks and threats as the basis for identifying new attacks and threats.

The Fatal Flaw…

While this pattern matching and database lookup approach may seem alright at first, it is severely limited and suffers from a fundamental flaw. This can be best understood by a simple analogy:

Suppose you are trying to protect a bank from being robbed. You know that some banks have been robbed by a man wearing sunglasses carrying a gun. This does not mean that if you just stop all males wearing sunglasses at the door will your bank is safe from robbers. You need to do a lot more, you need to figure out how to identify ALL possible robbers, and take appropriate measures in a timely way to prevent disaster. Similarly, in order to successfully protect a web application, the web application security system must do a lot more than match threat patterns or lookup a database of attack signatures. Here is where ryū is far ahead of any existing approach:

An elegant solution…

ryū is a complete expert system that combines fully trained Artificial Intelligence systems with new compiler theory to deliver security that predicts threats to the system, sensitive data or other components from any operation in the entire Web Application Stack. ryū security system analyses every operation and determines any direct or indirect threat it may cause in combination with other past or future operations.