Free Newsletter
Register for our Free Newsletters
Newsletter
Zones
Access Control
LeftNav
Alarms
LeftNav
Biometrics
LeftNav
Detection
LeftNav
Deutsche Zone (German Zone)
LeftNav
Education, Training and Professional Services
LeftNav
Government Programmes
LeftNav
Guarding, Equipment and Enforcement
LeftNav
Industrial Computing Security
LeftNav
IT Security
LeftNav
Physical Security
LeftNav
Surveillance
LeftNav
View All
Other Carouselweb publications
Carousel Web
Defense File
New Materials
Pro Health Zone
Pro Manufacturing Zone
Pro Security Zone
Web Lec
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
 
News

Attack path vulnerability assessment

Attivo Networks : 05 August, 2016  (New Product)
Black Hat sees the launch of ThreatMatrix Deception and Response Platform from Attivo for assessing attack path vulnerabilities
Attack path vulnerability assessment

The Attivo ThreatMatrix Deception and Response Platform has been enhanced to provide an organisation's visibility and assessment of vulnerable attack paths that a cyber attacker would take to reach critical assets. Attivo is empowering organisations with insight into how an attacker would target misconfigured systems or misused credentials and then automating the response actions to isolate these systems from causing additional infection, exfiltrating data or harming critical infrastructure. Additionally, the company announced that its next generation software has enhanced its deception technology to misdirect and detect attackers seeking to begin their attack by targeting Microsoft Active Directory, which is a favored target for attackers seeking credentials for attack escalation. The new release will also include an expansion of the ThreatMatrix Platform to support routed networks, for micro-segmented datacenters and enterprises networked across multiple locations and branch offices.

The ThreatMatrix Deception and Response Platform provides real-time threat detection and attack forensic analysis for accelerated incident response and remediation. The platform is designed to provide early detection of cyberattacks from all threat vectors including zero-day, stolen credential, ransomware and phishing attacks that are renowned for bypassing traditional prevention systems. The platform is aligned to Gartner's Adaptive Security Architecture of Predict, Block/Prevent, Detect and Respond (Gartner, February 2016) and is designed for early detection of threats, accelerated incident Response and strengthening of Prevention systems based on attack information gathered while deceiving and engaging attackers. The company's announcement expands the ThreatMatrix Platform into the pillar of Prediction and enhances its Detection capabilities.

ThreatPath: Provides an attack path vulnerability assessment based on likely attack paths that an attacker would have traversed through misconfigured systems or credential misuse. Visual illustrations of attacker paths based on penetration techniques provide insight into risks and clickable drill downs provide the details of weaknesses and IP addresses for systems needing to be isolated and/or fixed.

Active Directory Deception and Detection: organisations running the Microsoft Windows Server platform are susceptible to attacks where attackers exploit and gain un-authorized access to Active Directory. Attivo ThreatMatrix BOTsink integrates deception into the organisation's Active Directory Infrastructure to deceive and identify attackers seeking to gain escalation privileges.

Routed Network Support: ThreatMatrix BOTsink engagement servers can now engage with deceptive IP addresses and networks on routers over Layer 3 GRE tunnels, which is ideal for micro-segmented datacenters, enterprises networked across multiple locations and branch offices. The solution will also support sending Darknet IP traffic to the deception servers, which will dynamically engage attackers and deceive them into revealing themselves.

"Our customers are referring to the ThreatPath offering as an ideal and highly efficient solution for continuous end-point and server attack path vulnerability assessment," said Tushar Kothari, CEO of Attivo Networks. "ThreatPath allows our customers to assess credential based vulnerabilities on demand and as frequently as they desire. This allows our customers to proactively address these vulnerabilities before an attacker can exploit them."

In his April 7th report, "Addressing the Cyber Kill Chain", Gartner Analyst Craig Lawson provides steps to augment existing prevention methods. "Start to inventory how many steps of the CKC you currently cover for your most critical IT assets," he states. "Know what's on your network and prioritize patching that takes into account vulnerabilities that are seeing active exploitation in the wild."

Bookmark and Share
 
Home I Editor's Blog I News by Zone I News by Date I News by Category I Special Reports I Directory I Events I Advertise I Submit Your News I About Us I Guides
 
   © 2012 ProSecurityZone.com
Netgains Logo