Webroot, the market leader in next-generation endpoint security and threat intelligence, today announced it has acquired the assets of CyberFlow Analytics, an innovator in applying data science to network anomaly detection. This acquisition enhances Webroot’s ability to address the explosion of internet-connected devices and an increasingly complex threat landscape.
Adding the FlowScape network behavioral analytics solution extends Webroot’s leadership in machine learning-based cybersecurity to the network layer. As malware is now overwhelmingly polymorphic and advanced persistent threats (APTs) mask their activities within everyday network noise, SaaS-based FlowScape adversarial analytics and unsupervised machine learning enables Webroot to further reduce time to classify and address threats.
"Today, one of the only things attackers can’t find out about your network is what’s normal. This solution can identify and alert on potentially malicious activity that deviates from normal traffic in milliseconds," said Dick Williams, Webroot CEO. "Our machine learning platform powers the most cutting-edge endpoint protection, threat intelligence services, and now network analytics, enabling us to stay ahead of evolving threats for our customers."
Identifying network anomalies in both IPv4 and IPv6 traffic can quickly uncover APTs and insider threats, and even identify newly connected devices, before they cause damage. Security analysts can view alerts via a SIEM solution or the automated FlowScape visualization console, which creates self-forming behavioral clusters that provide an early warning system of high-risk activity that forms over time.
Webroot will continue to create new solutions that address current and future security use cases, combining a proven track record in endpoint security and threat intelligence with innovative FlowScape anomaly detection to address both known and currently unknown threats.
"As the Grand Prize Winner in the 2015 Cisco Innovation Grand Challenge, CyberFlow Analytics is a trailblazer in the field of Network Behavioral Analytics. We founded the company with a vision of applying data science to help solve the most pressing cybersecurity challenges," said Tom Caldwell, co-founder of CyberFlow Analytics. "By using unsupervised machine learning for real-time detection of anomalous high risk activity, CyberFlow Analytics has solved a problem that previously required significant manpower and resources. We are very excited to join Webroot and enhance both FlowScape and Webroot® next-generation security solutions."
FlowScape technology sees beyond the endpoint across a variety of environments, such as cloud services, new device types (IoT), BYOD, and network infrastructures (including closed systems). The software-only solution deploys on premises or in the cloud to start detecting anomalies on day one, while getting more intelligent the longer it runs. FlowScape is available for custom integration and evaluation as part of an initial pilot program, with full availability and further product integrations expected in 2017. For more information, or to register interest in the FlowScape solution, visit webroot.com/flowscape.