InvestorsHub Logo
Followers 18
Posts 668
Boards Moderated 0
Alias Born 02/08/2008

Re: stlogic post# 4177

Friday, 10/11/2013 8:53:49 PM

Friday, October 11, 2013 8:53:49 PM

Post# of 6440
Pre-Empt has always been valuable and useful for many applications, not just Host Intrusion Prevention security.

It is going to be updated in a new release, and ported to other platforms (mobile, tablet, Android, non-Windows, plus virtual machine hypervisor/cloud platforms) to re-launch as an updated and fundamentally-better security software product, yes. But it will also become other products that we are not ready to announce yet.

The method of securing the compute device that was employed in 2005, reverse engineering of vulnerabilities and development of custom security fixes that the Pre-Empt software attempts to inject (as unauthorized arbitrary code) at runtime into vulnerable software, was not economical and it was not easy for customers to manage.

The theoretical security benefit of being able to fix a security flaw between the time of its discovery "in the wild" and the time that an official vendor security patch became available did not outweigh the actual difficulty of managing the quality assurance and stability risks that were posed by our attempt to force our unauthorized "fix" code to execute in place of the vulnerable software from the original software vendor. In every case, the official software vendor security fix is the preferred remedy to specific security vulnerabilities, so it never made any sense to me that our product would knowingly tolerate out-of-date software just so we could try to sell customers subscriptions to our custom security fixes!

Here's just one example of what DOES make sense, a strategy in which the product lets the owner of a compute device digitally-sign the software they want to allow to execute on their device while blocking the execution of everything else, including malicious code that might attempt to hijack vulnerable software that we all receive and use daily from OS and application vendors:

http://www.google.com/patents/US20080025515

We stopped accepting new paying customers in 2006 because we did not have funding with which to keep the intrusion prevention definitions up-to-date and to switch to a strategy that was more commercially-viable compared to this approach. We have always had more commercially-viable strategies available, but the company must raise substantial new capital before most of those options will become achievable in practice. It was always expected that it would take years to turnaround the company and to raise that new capital.

I am happy with the progress that has been made since 2006, especially considering the significant new products, computing platforms, prototypes and lines of business that we have been able to launch primarily around our core expertise and our intellectual property in forensics, security, social networking, crowdfunding and expert witness services -- this core expertise was the source of our previous software products, including PreView Security and ThreatFocus, and between 1999 and 2013 that expertise has itself been the source of millions of dollars of revenue while we did not previously achieve any significant scale of software product sales or licensing revenue.

If re-launching Pre-Empt means providing high-value services in the areas of "Managed Forensics" (http://www.managedforensics.com) and "Forensic Social Media" and "Public Startup Company" secure and forensically-transparent collaborative crowdfunding and crowdsourcing so that everyone, everywhere can receive expert help and material support for the productive work they are doing then that will be a huge success even if we never return to the old software licensing sales model.

Our industry has moved away from the old licensing model for software. The future of our business is more likely to look like automated digital services and renewable subscriptions to forensic computing platforms and security features that we provide to every computing endpoint in mobile and cloud ecosystems. The only missing component right now is capital, and we're working on that.