ABOUT SYMANTEC

Technology Overview

Symantec’s teams around the world are developing technologies and building solutions to help customers secure and manage their information. The company has a robust portfolio and a long history of technology leadership.

Security Technology and Response (STAR)

Symantec’s Security Technology and Response (STAR) division, which includes Security Response, is a global team of security engineers, virus hunters, threat analysts, and researchers that provides the underlying security technology, content, and support for all Symantec corporate and consumer security products. The group is Symantec’s eyes and ears when it comes to surveying and keeping a finger on the pulse of the Internet security threat landscape.

Symantec Research Labs

Symantec Research Labs (SRL) is Symantec’s global research organization and has played a leading role in developing and commercializing numerous cutting-edge technologies across Symantec’s business areas. Commercialized technologies from the group include industry leading rootkit protection, innovative browser protection technology to proactively block future exploits of known vulnerabilities, Symantec’s first antispam technology, generic exploit blocking technology that proactively blocks fast-spreading threats, online consumer security services, and technology to help protect our nation’s critical power-grid infrastructure. SRL also partners with outside organizations on joint projects, through its university and government research efforts.

Insight and Innovation

Creativity is deeply woven into Symantec’s culture with great technology and business ideas coming from across the company organically and through acquisition. The company holds more than 1200 global patents. Engineers throughout the company pursue advanced projects and work with our engineering centers, research labs and global services teams to translate hands-on experience into new security, storage and systems management technologies. Symantec also plays a leading role in key industry standards and certifications programs. It all contributes to the strong culture of innovation that we believe will continue to drive the company’s growth for the next quarter century and beyond.

Software and Services to Enable Confidence in a Connected World

Symantec’s portfolio of software and services protects completely, in ways that can be managed easily and with controls that can be enforced automatically – enabling confidence wherever information is used or stored. Our market-leading solutions help customers ensure that their information – from digital photos to intellectual property – is secure and well-managed.

Consumer Products

Symantec’s Norton brand of award-winning Consumer Products for individual users, home offices and small businesses focuses on delivering online protection of our customers, their systems and the things they value most – photos, documents, videos, and music – without compromising system performance. Our Norton brand of products and services range from Internet security and backup and recovery solutions to PC tune-up and PC help services that assist our users to resolve their computer problems and allow them to get the most out of their PC.

Security and Compliance

Security and Compliance focuses on providing large, medium and small-sized organizations with solutions for information risk management, endpoint security and management, data loss prevention, and endpoint virtualization. Our security and management solutions ensure that information, infrastructure and processes can be protected, managed and controlled across physical and virtual platforms.

Storage and Availability Management

Storage and Availability Management focuses on providing enterprise customers with storage management and high availability as well as data protection solutions across heterogeneous storage and server platforms.

Symantec.cloud

Symantec.cloud, Symantec’s hosted services, uses the power of cloud computing to secure and manage information stored on endpoints and delivered via email, Web, and instant messaging. Building on the foundation of MessageLabs market leading software-as-a-service (SaaS) offerings and proven Symantec technologies, Symantec.cloud provides essential protection while virtually eliminating the need to manage hardware and software on site.

Symantec Services

Symantec Services offers deep technical knowledge and expert resources including, managed services, hosted and support and education Services. With an expert staff and an extensive partner network, we help customers address information security, availability, storage, and compliance challenges from the endpoint to the data center.

Industry Standards

As an industry leader in providing platform-agnostic software solutions, Symantec is critically dependent on highly functional, open, and interoperable industry standards. These same standards simultaneously ensure that our customers realize maximum vendor selection flexibility, ever increasing security, and streamlined efficiency in managing computing solutions.
Symantec has founded and now leads many industry standards efforts, and most Symantec products are based on standards. A few examples of the standards that Symantec integrates in its products include SCSI, iSCSI, SNMP, Fibre Channel, the HBI-API, Ethernet, and SMI-S.
Symantec Involvement in Standards Organizations (partial list):

Product Certifications

As standards mature and evolve, our customers need assurance that the products they purchase comply with these standards. Certification programs emerge to validate vendor claims that their products comply with the standards often times utilizing independent, third-party evaluation labs. Symantec is involved in a number of certification programs.
Common Criteria is an internationally-recognized standard (ISO 15408) to assess the security of IT products. The US Department of Defense requires that information assurance products are certified under this program. Symantec has demonstrated commitment to meeting this rigorous testing standard for our international public sector customers. Symantec is strongly committed to this effort as it represents the universal security standard. Symantec has been a leader in this effort by initiating the Common Criteria Vendors’ Forum and participating in the International Common Criteria Conferences. Common Criteria Portal URL: www.commoncriteriaportal.org
FIPS-140 (US Federal Information Processing Standard) is a cryptographic standard. The Cryptographic Module Validation Program (CMVP) was established by the US National Institute of Standards and Technology (NIST) and the Canadian Communications Security Establishment (CSE) in July 1995. All of the tests under the CMVP are handled by third-party laboratories that are accredited as Cryptographic Module Testing (CMT) laboratories by the National Voluntary Laboratory Accreditation Program (NVLAP). This standard is in place to ensure consistent standards for encryption strength and implementation correctness. FIPS 140 URL: csrc.nist.gov/cryptval/
ICSA Labs The goal for ICSA Labs Certification is to enhance and improve security implementations of network and Internet computing, which will improve commercial security and its use of appropriate security products. Certification promotes user acceptance of increased security while improving the ease of use and seamless integration of security technology in everyday computing. ICSA Labs Certification criteria are public, objective and credible criteria that yield a pass-fail result. This certification is widely recognized by large enterprise customers. Symantec has been submitting its anti-virus products for ICSA testing for many years. ICSA Labs URL: www.icsalabs.com/icsa/icsahome.php
Symantec's Customer-Driven Philosophy
2008 Corporate Responsibility Report