|
* March 27, 2007: The ESSG approved the HBSS for full-scale deployment throughout the DoD enterprise
* October 9, 2007: The [[Joint Task Force for Global Network Operations|JTF-GNO]] releases CTO 07-12
* November, 2009: The [[United States Air Force|Air Force]] awarded [[Northrop Grumman]] with the deployment of HBSS on the SIPRNet<ref>Henry Kenyon, ''Northrop Grumman Wins Air Force SIPRNET Contract'', http://www.afcea.org/signal/signalscape/index.php/2009/11/northrop-grumman-wins-air-force-siprnet-contract/, 3/13/2010 {{Dead link|date=August 2021}}</ref>
== HBSS components ==
Throughout its lifetime, [https://99web.org/host-based-security-system/ HBSS] has undergone several major baseline updates as well as minor maintenance releases. '''The first major release of HBSS''' iswas basedknown onas Baseline 1.0 and contained the McAfee ePolicy orchestrator engine, Inc'sHIPS, '''ePolicy'''[[software Orchestratorcompliance profiler]] (ePOSCP), [[rogue system detection]] (RSD), [[asset baseline manager]] (ABM), and otherassets McAfeesoftware. point productAs securitynew applicationsreleases suchwere asintroduced, Hostthese Intrusionsoftware Preventionproducts Systemhave (HIPS)evolved, .had Thenew systemproducts comprisesadded, severaland modules/componentsin some cases, including:been completely replaced for different products.
'''Host Intrusion Prevention System (HIPS):''' A module that provides intrusion detection and prevention capabilities to protect against known and unknown threats .
'''Policy Auditor (PA):''' A module that enables administrators to audit and enforce compliance with security policies across the enterprise .
'''Assets Baseline Module (ABM):''' A module that enables administrators to establish a baseline of authorized software and configuration settings for each host ¹.
'''Rogue System Detection (RSD):''' A module that detects unauthorized devices on the network and prevents them from accessing sensitive data .
'''Device Control Module (DCM):''' A module that enables administrators to control access to peripheral devices such as USB drives, CD/DVD drives, and printers .
'''Asset Publishing Service (APS):''' A module that enables administrators to publish asset information to other HBSS servers in the enterprise .
Recently, the Defense Information Systems Agency (DISA) has rebranded HBSS into a new suite called Endpoint Security Solutions (ESS), which adds new capabilities on top of the existing HBSS software . ESS is a multi-point product designed to meet known intrusion points, discover gaps, and reduce the likelihood of unauthorized device and network access .
=== HBSS Baseline 4.5 MR2 components ===
<!----==== Security compliance profiler ====
The security compliance profiler (SCP) was one of the original products provided in HBSS Baseline 1.0. It was removed from HBSS as of Baseline 2.0 and replaced with the policy auditor component. The SCP is an integral component of ePO that provides enterprise-wide reporting on security patches, including the Microsoft® operating systems.<ref>'''System Compliance Profiler''', http://www.mcafee.com/us/enterprise/products/promos/system_security_management/epolicy_orchestrator/compliance_profiler.html, 3/14/2010</ref>
---->
| 