 | |
| Company type | Subsidiary |
|---|---|
| Industry | Network security;intrusion detection,intrusion prevention system and anti-malware |
| Founded | 2001 |
| Founder | Martin Roesch |
| Fate | Acquired |
| Headquarters | Columbia, Maryland |
Key people | John Becker (CEO) (at the sale of the company),Martin Roesch (Founder and CTO) |
| Products | Sourcefire Firepower network security appliances |
| Revenue | $223.1M (FY12) |
Number of employees | 560 (3Q12) |
| Parent | Cisco Systems |
| Website | cisco |
Sourcefire, Inc was a technology company that developednetwork security hardware and software. The company's Firepower network securityappliances were based onSnort, anopen-sourceintrusion detection system (IDS). Sourcefire was acquired by Cisco for $2.7 billion in July 2013.[1][2]
Sourcefire was founded in 2001 byMartin Roesch, the creator ofSnort. The company created a commercial version of the Snort software, the Sourcefire 3D System, which evolved into the company's Firepower line of network security products. The company's headquarters was inColumbia, Maryland in the United States, with offices abroad.
The company's initial growth was funded through four separate rounds of financing raising a total of $56.5 million from venture investors such asSierra Ventures,New Enterprise Associates,Sequoia Capital, Core Capital Partners, Inflection Point Ventures, Meritech Capital Partners, and Cross Creek Capital, L.P.[a]
In 2005,Check Point Software attempted to acquire Sourcefire for $225 million,[3] but later withdrew its offer after it became clear US authorities would attempt to block the acquisition.[4] The company completed aninitial public offering in March 2007, raising $86.3 million.[5][b] In August of the same year, Sourcefire acquiredClam AntiVirus.[6] Sourcefire rejected an offer of $187 million in May 2008 from security appliance vendorBarracuda Networks,[7] who had offered to pay US$7.50 per share, amounting to a 13% premium of their then-current stock price.[8] Sourcefire announced its acquisition of the cloud-based antivirus firmImmunet in January 2011.[9][10]
Revenue for the fourth quarter of 2012 was $67.4 million compared to $53.2 million in the fourth quarter of 2011, an increase of 27%.[11] Revenue for the year ending December 31, 2012 was $223.1 million compared to $165.6 million for 2011, an increase of 35%. International revenues were $74.4 million, up 77% over 2011. As of December 31, 2012, the company's cash, cash equivalents, and investments totaled $204.0 million.[12]
Sourcefire received SC Magazine's 2009 "Reader Trust" award for best intrusion detection andintrusion prevention system (IDS/IPS) for Snort[13] and Network World's "2009 Best of Tests" award for the Sourcefire 3D System.[14]
On July 23, 2013,Cisco Systems announced a definitive agreement to acquire Sourcefire for $2.7 billion.[1][15]
The Sourcefire Firepower line of appliances are designed to form part of a layered security defense. They can be deployed as:
Sourcefire Advanced Malware Protection (AMP) offers malware analysis and protection for networks and endpoints usingbig data analytics to discover, understand and block advanced malware outbreaks, advanced persistent threats (APTs) and targeted attacks. AMP enables malware detection and blocking while provisioning continuous analysis and retrospective alerting, using Sourcefire's cloud security intelligence[clarification needed].
Advanced Malware Protection can be deployed inline via aproduct key on NGIPS, dedicated AMP Firepower appliance or on endpoints, virtual and mobile devices with FireAMP.[16]
Snort is an open source networkintrusion prevention and detection system utilizing a rule-driven language, which combines signature, protocol and anomaly based inspection methods. Developed in tandem with the Snort open source community, its developers claim it is the most widely deployed intrusion detection and prevention technology worldwide.[17]
Immunet uses the cloudvirus definitions along with virus definitions from Clam AntiVirus which is an open source (GPL) anti-virus toolkit primarily used on UNIX operating systems designed for e-mail scanning one-mail gateways. It provides a number of utilities including amulti-threadeddaemon, acommand-line interface scanner and tool for automatic database updates. The core of the package is an anti-virus engine available in a form of ashared library.[18] Immunet was provided in two versions, Free and Plus.[19]
As of June 10, 2014, Immunet Plus is no longer available, replaced with Immunet Free, supported by Cisco.[8]
The Sourcefire Vulnerability Research Team (VRT) was a group of network security engineers which discovered and assessed trends in hacking activities, intrusion attempts, and vulnerabilities.[20] Members of the Sourcefire VRT include theClamAV team as well as authors of several standard security reference books[21][22][23] and articles. The Sourcefire VRT is also supported by the resources of the open sourceSnort[24] andClamAV[25] communities.
The group focuses on developing vulnerability-based rules to protect against emerging exploits for Sourcefire customers and Snort users. The VRT has provided zero-day protection for outbreaks ofmalware, includingConficker,[26]Netsky,Nachi,[27]Blaster,Sasser,Zotob,[26]Nachi[28] among others. The VRT also delivers rules that provide same day protection forMicrosoft Tuesday vulnerabilities, develops the officialSnort rules used by the Sourcefire 3D System, develops and maintains the official rule set of Snort.org, and maintains shared object rules that are distributed for various platforms in binary format.[29][20]
Following the Cisco acquisition[30] of Sourcefire in 2013, the VRT combined with Cisco's TRAC and SecApps (Security Applications) group to form Cisco Talos.[31] "Talos" was officially coined in usage in 2014, followed by its trademark, and was announced at Blackhat that year.
