Lumension PatchLink Developers Kit

PatchLink Developers Kit Overview:

PatchLink Developers Kit is a powerful security content development application that allows you, in conjunction with PatchLink Update, to respond to the growing number of threats that target hardware and software configuration errors, or software vulnerabilities for which there is not a publicly available patch.

Enforce Configuration Policies

Managing the myriad of hardware and software configuration settings for every machine on your network is a time-consuming, yet critical task. PatchLink Developers Kit relieves this burden by allowing you to develop custom packages that identify which systems have drifted out of compliance with corporate configuration policy, and then quickly remediate the issue(s), returning the affected systems to their desired state. With PatchLink Developers Kit, you can also automate the identification, correction, and validation of specific software and hardware configurations on servers, workstations or laptop machines, such as:

• Identifying and removing unauthorized applications
• Closing down vulnerable ports
• Shutting down dangerous services
• Removing protocols across end-points
• Enforcing password policies and registry settings

Create custom remediation content via simple, easy to use interface

Respond to Zero-day Threats

The time available to protect your network is shrinking rapidly. The days when you had a considerable period of time between the original discovery of a vulnerability and its exploitation are gone forever. As the diagram below illustrates, hackers are now producing and distributing malicious attacks long before an authorized patch is made available. This rapid vulnerability exploitation, commonly referred to as a “Zero-day Threat”, provides a substantial challenge to IT organizations. Fortunately, PatchLink Developers Kit allows you to react immediately to new vulnerabilities, identifying all machines that contain the Zero-day vulnerability and automatically deploying a custom script to blocks access to the vulnerability until the software vendor is able to produce and distribute an authorized patch.

Zero-day threats are now a reality

Secure Closed Networks

Just because a network (or network segment) is isolated from the Internet does not mean that it is free from security threats. The 2006 E-Crime Watch Survey conducted by the United States Secret Service (USSS), the SEI CERT® Program, and CSO Magazine discovered that almost one third of electronic crimes were perpetrated by insiders.

Distribute Software and Data

PatchLink Developers Kit provides the ability to rapidly distribute applications or data files throughout your organization. This distribution is not limited to commercial software applications, but can also include items such as the latest antivirus definitions, proprietary applications, policy documentation and other files that you need to rapidly deploy to a large and diverse number of machines.

Develop and Deploy Custom Patches

PatchLink Developers Kit enables you to develop software patches for home-grown applications, or legacy software that is no longer supported by the manufacturer. These custom patches can include fingerprint signatures that allow you to assess their applicability to target machines. Once developed, these custom patches are easily uploaded into the PatchLink Update assessment, remediation and validation process. PatchLink Developers Kit also allows you open and modify content contained in your PatchLink Update repository, allowing you to edit any of our more than 14,000 existing vulnerability remediation packages to meet the unique needs of your organization, including the management of approval notices, trouble ticket information, change order or approval numbers, and more.

Modify any of the 15,000+ patches in the PatchLink repository

How it Works

Custom content creation and distribution can be completed in a simple 5-step process using the PatchLink Developers Kit.

1. Custom configuration and software remediation packages are created using PatchLink Developers Kit, either from scratch or by any patches within the enterprise's patching repository (Premier edition only)
2. Custom remediation content is seamlessly uploaded to PatchLink Update Server
3. Utilize PatchLink Update to assess applicability of your custom packages across your enterprise
4. Deploy your custom content to all managed end-points using standard PatchLink Update deployment tools
5. Validate, audit and report custom patch efficacy

Features & Benefits:

• Flexible Content Creation - custom remediation packages can be created to address a wide range of software and configuration threats, distribute or remove applications and files, enforce configuration policies, and more.
   
• Rapid Content Development - intuitive, easy-to-use interface allows you to develop custom packages in minutes to react to the latest threats.
   
• Immediate Content Distribution - content is seamlessly ported into your PatchLink Update repository for automated, enterprise-wide deployment.
   
• Applicability Testing - custom packages can be wrapped with intelligence using our patented Fingerprint Technology™, allowing you to test machines for applicability before distributing packages throughout your network.
   
• Broad Coverage - custom packages can be deployed across your heterogeneous network to any machine that contains a PatchLink Update agent.
   
• Continuous Monitoring - custom packages created with PatchLink PDK can be continually monitored and reported on through the PatchLink Update interface.

Requirements:

Minimum Requirements and Supported Systems

Minimum Hardware Requirements

• Intel Pentium 800Mhz Processor
• 512 MB of RAM
• 20 MB of free disk space for installation
• 5 GB of free disk space after installation

Supported Operating Systems

• Microsoft® Windows XP Professional
• Windows XP Professional with SP1
• Windows XP Professional with SP2
• Microsoft Windows Server™ 2003, Standard Edition with SP1
• Windows Server 2003, Enterprise Edition with SP1
• Windows Server 2003, Web Edition with SP1
• Windows Server 2003 R2, Standard Edition
• Windows Server 2003 R2, Enterprise Edition
• Windows Server 2003 R2, Web Edition
• Windows Vista

Note: The PatchLink Developers Kit database must be installed on the same server as the PatchLink Update Server application. PatchLink Developers Kit, however, can be installed on any computer that has access to your PatchLink Update Server.

Documentation:

Download the Lumension PatchLink Developers Kit Datasheet (PDF).