Tag: Behavioral Analysis

Insider Threat Protection with NetFlow

Despite the fact that external attacks often get more attention in the media, recent data is proving that the threat posed by malicious, negligent or compromised insiders is indeed very real. The best way to detect and prevent insider threats is to have in-depth visibility into the internal environment and a means of filtering and prioritizing the massive amount of data available on the network into concise, actionable intelligence. READ MORE

Lancope’s Cisco ASA Updates

NSEL data from Cisco ASA provides rich information and unique data points for advanced security troubleshooting. Lancope stitches Cisco ASA NetFlow records together with records from the remainder of the network, allowing StealthWatch users to understand not just the transaction path for network traffic, but also what happened to those transactions when they were handled by the ASA. Lancope has also recently added StealthWatch support for the NAT translations available from NSEL records. READ MORE

Forrester Endorses Lancope and Cisco Approach for Combating Advanced Threats

According to a Forrester Consulting Technology Adoption Profile commissioned by Lancope and Cisco, “Enlightened organizations have adopted network flow analysis capabilities to augment their preventative controls, but fail to include the additional context necessary to truly identify malicious activity within their networks.” While there are many solutions on the market that simply collect and store flow data, or even provide basic analysis, Lancope’s StealthWatch System provides the additional context called for by Forrester. READ MORE

Lancope Shares Top 5 Tips for Network Protection During NCSAM

In the spirit of National Cyber Security Awareness Month (NCSAM), Lancope’s director of security research, Tom Cross, offers tips for effectively securing enterprise networks. READ MORE

StealthWatch Goes Beyond Signatures; Detects the Weird

Robert Lemos recently put together a great article for Dark Reading detailing the increasing need for organizations to move beyond typical signature-based, hardened perimeters in order to “detect the weird.” Lancope of course has been on the edge of this wave for several years, providing anomaly detection down to the host level utilizing what we refer to as the Concern Index (CI). READ MORE