Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Sourcefire FireAMP uses cloud and Big Data Analytics to deliver security
Posted on 24-Jan-2012 16:04. | Tags Filed under: News.



Sourcefire, Inc. is introducing FireAMP, a malware discovery and analysis solution that analyses and blocks malware by utilising big data analytics.

Designed for large enterprises, FireAMP delivers unprecedented visibility and the control needed to block threats missed by other security layers. FireAMP is the latest fulfillment of Sourcefire’s Agile Security vision for context-aware, adaptive, and automated security solutions.

“Test results consistently show that the endpoint protection platforms (EPPs) currently available still do not protect endpoints against mass-propagated consumer threats — and their performance is even more dismal when faced with handcrafted targeted attacks,” said Neil MacDonald, vice president and fellow, and Peter Firstbrook, research director, at Gartner.1 “Moreover, the dwell time of targeted threats can be measured in months or even years, in some instances. Gartner currently estimates that 4% to 7% of enterprise endpoints are infected at any given time, and that the next scheduled scan will catch only 1% of threats.”

With the launch of FireAMP, Sourcefire is first to market with five new capabilities that amplify an organisation’s defenses against advanced malware:

• FireCLOUD – Cloud-based infrastructure encompassing a number of advanced detection capabilities that leverage big data analytics to identify and score threats missed by other security layers
• File Trajectory – Tracks file movement within the enterprise, allowing organisations to identify the entry point and propagation path of malware
• File Analysis - Provides detailed information on malware behavior backed by the elite Sourcefire Vulnerability Research Team (VRT) and the company’s collective security intelligence
• Outbreak Control – Customer-defined detections that immediately block malware without requiring an update from your security vendor
• Cloud Recall – Continuous in-the-cloud analysis of historical file activity to discover and remediate threats that were previously missed

FireAMP uses a lightweight agent to communicate with a cloud-based analysis engine and only leverages metadata for evaluation, requiring less storage, computation and memory than other security products. This minimises system impact and allows it to coexist with and supplement existing security layers without sacrificing performance or manageability.

“While developing this product, we spoke with more than 100 large enterprises and heard one common theme – while they have the latest security technologies with all of the latest updates, they still see malware infections,” said Chris Wood, Regional Director of Sourcefire Australia and New Zealand. “We developed FireAMP with sophisticated detection, visibility and control especially for enterprises whose primary solutions are lacking. FireAMP’s discovery and analysis capabilities can help these companies quickly determine which systems are infected, how the infection occurred, the extent of the infection and how the malware behaves in order to both stop the malware and recover.”

FireAMP offers powerful reporting that delivers visibility into the state of malware in an environment. These reports detail high-risk computers; threat root cause, showing applications that are introducing malware; and advanced persistent threats, listing advanced malware that could be unique to a customer’s environment. FireAMP also includes comparative reporting, so that users can evaluate activities within their environment in the context of their overall organisation or the larger, global installed base of FireAMP customers.


More information: http://www.sourcefire.com/FireAMP...

comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

NZ Prime Minister John Key Resigns
Created by ajobbins, last reply by andrew027 on 5-Dec-2016 21:17 (84 replies)
Pages... 4 5 6


The President Of The USA - Who do you think?
Created by TimA, last reply by freitasm on 5-Dec-2016 11:04 (897 replies)
Pages... 58 59 60


Dishwasher not Working Properly
Created by tdgeek, last reply by mdav056 on 5-Dec-2016 20:18 (28 replies)
Pages... 2


'Quality' NZ news on the way?
Created by Rikkitic, last reply by alasta on 4-Dec-2016 09:49 (91 replies)
Pages... 5 6 7


Gigabit cable now available
Created by sub, last reply by Scotty1986 on 2-Dec-2016 12:00 (712 replies)
Pages... 46 47 48


Does anyone have experience with an EVGA RMA?
Created by Kol12, last reply by Kol12 on 5-Dec-2016 21:14 (47 replies)
Pages... 2 3 4


Mazda Atenza/6 or a Suzuki Swift 1.6 for four people one off trip?
Created by TeaLeaf, last reply by alasta on 5-Dec-2016 20:18 (15 replies)

Pike River - Seal or recovery?
Created by gzt, last reply by dickytim on 5-Dec-2016 12:51 (70 replies)
Pages... 3 4 5