BROOMFIELD, CO - February 1, 2017
Webroot, the market leader in network and endpoint security and cloud-based threat intelligence, today announced the expansion of its platform with 3 new products. Webroot FlowScape® Analytics, Webroot BrightCloud® Streaming Malware Detection, and Webroot SecureAnywhere® DNS Protection leverage the security industry’s most sophisticated artificial intelligence engine to give customers greater protection against today’s most malicious known and unknown cyber threats.
“In our increasingly mobile connected world, old security perimeters can’t protect against rapidly evolving threats,” said Chad Bacher, SVP of product strategy and technology alliances. “By providing deeper insight into behaviors in the web and network layers, our new products offer better protection against today’s most advanced threats—both known and unknown—no matter where users are or what devices are connected. These new solutions are built on a mature cloud platform that uses proven machine learning methods that continue to get smarter and more effective as we add new endpoints, sensors, and data sources.”
Webroot FlowScape Analytics
Webroot has integrated FlowScape Analytics with Webroot BrightCloud® Threat Intelligence to significantly accelerate the discovery and investigation of unknown threats that access, traverse, and exit today’s disparate networks. The FlowScape solution analyzes different traffic types and behaviors within the network, as well as inbound and outbound traffic, to supply security operations teams with highly accurate data to quickly identify anomalous network traffic from unknown threats. Combined with BrightCloud Threat Intelligence, FlowScape Analytics provides contextual threat intelligence on malicious IPs and URLs with network visibility for incident response teams to investigate threats and devise mitigation plans. As malware is now overwhelmingly polymorphic and advanced persistent threats (APTs) mask their activities within everyday network noise, FlowScape analytics and unsupervised machine learning enable organizations to further reduce the time required to classify and address threats.
“With a daily count of approximately 500,000 cyberattacks against the city of San Diego networks, Webroot FlowScape Analytics gives us the network visibility we need to protect critical infrastructure and services,” said Gary Hayslip, chief information security officer for the city of San Diego. “FlowScape Analytics technology allows us to determine risk of system-wide user behavior and flag anomalies for remediation.”
Webroot BrightCloud Streaming Malware Detection
To further address the challenges of unknown polymorphic malware, as well as targeted malware in general, Webroot has developed BrightCloud Streaming Malware Detection, which enables organizations to detect malicious files in transit at the network edge in real time. This innovative solution places advanced machine learning models directly on perimeter security appliances to make extremely fast and accurate determinations on files without needing to download them in their entirety. The technology makes determinations on files at a rate of over 5,700 files per minute – over 500 times faster than network sandboxing. Users determine the threshold at which files are blocked or routed for further investigation, helping to focus limited resources on the most pressing threats. BrightCloud Streaming Malware Detection complements network security devices to identify and eliminate malicious files before they infiltrate the network and have the chance to spread or mutate internally.
Webroot SecureAnywhere DNS Protection
Providing organizations with protection from malicious websites, Webroot has introduced SecureAnywhere DNS Protection, a domain name resolution service. Leveraging the Webroot BrightCloud Web Classification, Web Reputation, and IP Reputation Services, SecureAnywhere DNS Protection defends devices at the most basic level of internet communication, the Domain Name System (DNS). Tightly integrated with Webroot SecureAnywhere endpoint security, SecureAnywhere DNS Protection provides robust protection against malicious sites with minimal complexity for the service provider, device manufacturer, and end consumer. With continuous updates to the classification database, SecureAnywhere DNS Protection covers the highest volume of domains with the most accurate classification, ensuring greater coverage and lower support costs.
“With these new releases, Webroot is working to address some of the key issues that make protection against modern malware so difficult,” said Eric Ogren, Senior Analyst with 451 Research. “Through greater visibility into the network layer, Webroot will now help customers identify threats based on anomalous network behavior. Providing a security solution that combines endpoint security and DNS-based web security, will also help protect businesses from threats, while lowering overall support costs.”
Availability
The FlowScape solution is available for custom integration and evaluation as part of an early availability program. BrightCloud Streaming Malware Detection is available for Beta technology partners with general availability scheduled for mid-2017. Webroot SecureAnywhere DNS Protection is in Beta currently and scheduled for GA release in April 2017.
