Product Watch: NetWitness To Add Real-Time Malware Analysis
New tool assesses, scores, and prioritize risks from malware found in the enterprise
January 21, 2011
NetWitness next week will add a new dimension to its network monitoring portfolio with an automated malware-analysis and prioritization tool.
The new Spectrum platform doesn't use a closed sandbox or a proprietary signature-based cloud service, but rather gathers and interprets real-time intelligence from around the security community via its NetWitness Live service. Spectrum is integrated with the company's network monitoring platform.
Spectrum basically assesses, scores, and prioritize risks from malware that's detected. "It looks at the difference between what's good and everything else" and uses a metric to score the threat, for instance, says Eddie Schwartz, chief security officer at NetWitness, who described the approach of Spectrum as an open analytic process.
NetWitness' new product will compete against offerings from FireEye and Damballa, for instance, according to Schwartz. Pricing begins at $50,000.
"With NetWitness Spectrum, we are combining the pervasive knowledge and real-time power of our flagship enterprise network monitoring platform with analytic vectors from numerous sources and methods," said Tim Belcher, chief technology officer at NetWitness in a statement.
Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.
About the Author
You May Also Like