Category: IPFIX

The Cost of Incomplete

By collecting and analyzing NetFlow with advanced solutions like Lancope’s StealthWatch System, organizations can fill in the gaps left by conventional security controls. READ MORE

Anatomy of an SQL Injection

Intelligent NetFlow analysis can provide deep visibility into an SQL injection at several stages of the assault. The mitigation can be automatic or authorized by an operator. Mitigation can range from blocking the traffic at a firewall to advanced actions including routing traffic into a Honeynet. NetFlow analysis provides the actionable intelligence needed to prevent, mitigate and respond to data exfiltration of this type. READ MORE

Are My Computers for Rent?

In a recent blog entry, Brian Krebs revealed that a Russian-based service is selling the IP addresses, usernames and passwords of computers inside organizations including Fortune 500 companies using the Remote Desktop Protocol (RDP). In the comments section, some readers asked how they can check if their servers are listed in the service’s database. While there certainly is merit in that type of diligence, they could better answer that question by reviewing their own network surveillance data. It is a question that intelligent analysis of enterprise NetFlow/IPFIX can quickly answer. READ MORE

No Matter How Frequent or Infrequent, Insider Threats Come at a Cost

If you have paid attention to the security landscape over the past decade, even in passing, you have likely picked up on the idea that the insider threat makes up at least some measurable percentage of concern within an organization's security framework. Lancope’s StealthWatch System brings all of this visibility under the same single pane of glass, and correlates anomalous host behavior with user and device information to help solve the insider threat headache. READ MORE

Internal IP Reputation for Combating Advanced Threats

The link between network visibility and network security is critical to tackling threats facing networks today. Lancope’s StealthWatch System, unlike other solutions such as Riverbed Cascade, provides the missing security piece of network visibility. READ MORE