Archive for the ‘Forensics’ Category

Integrated Network Forensics Solution Provides Incident Response and Situational Awareness Capabilities

SALT LAKE CITY and MILPITAS, Calif., July 20, 2010 – Solera Networks, a leading network forensics products and service company and FireEye, Inc., the leader in next-generation Malware Protection Systems (MPS), today announced a technology partnership to deliver an integrated solution to provide businesses with full visibility into cyber incidents before and after they occur. The powerful combination of FireEye’s Malware Protection System and Solera Networks’ network forensics platform integrate to deliver a single solution for capturing detailed analytics of cyber security attacks, including zero-day and advanced, persistent attacks to enable swift, intelligent response.

“FireEye is an industry leader in network security and malware protection and we are excited to combat the growing threat of cyber attacks with them,” said Peter Schlampp, Vice President of Marketing and Product Management at Solera Networks. “The combined solution provides customers with greater insight, enabling a more comprehensive incident response against zero-day, targeted attacks.”

Today’s cyber threats challenge enterprise and government networks at a new level of sophistication. Major incidents like Operation Aurora that targeted Google™ and other prominent organizations require dynamic malware protections, as offered by FireEye and in-depth, real-time network capture, as offered by Solera Networks to fully understand the context and impact of the attack. Solera Networks’ open architecture seamlessly integrates with FireEye’s threat prevention appliances. FireEye provides packet-level detail (PCAPs) of an attack alert while Solera Networks simultaneously provides full network capture and replay for administrators to understand the full contextual details of what happened before and after an incident was blocked. The Solera DS network forensics appliances record every packet at line rates up to 10Gbps on physical and virtual networks for full event reconstruction.

The partnership with Solera Networks and FireEye enables two key components: incident response and situational awareness. Customers can now leverage efficient incident response and analysis for any confirmed security event blocked by FireEye. Solera Networks appliances recreate and replay network traffic surrounding any zero-day, targeted attacks stopped by FireEye and provide full context of what happened before and after the event. This new insight gives IT departments the opportunity to further analyze related attack incidents and uncover the root cause of the network breach to mitigate any possible further risks. The added value of situational awareness provides customers with evidence and complete understanding of any cyber security incident that conventional intrusion prevention, web filtering and antivirus products have missed.

“Together with Solera Networks we are addressing cyber attacks, looking at both incident response and situational awareness. As a result, we provide our customers with a deeper understanding of the zero-day attacks before and after they occur, giving them more granularity on incidents,” said Ashar Aziz, founder and CEO of FireEye. “We are committed to fight the Modern Malware infection lifecycle, and partnering with Solera Networks enables us to take on a more aggressive approach.”

About FireEye, Inc.
FireEye, Inc. is the leader in malware protection systems and next generation network threat prevention solutions that safeguard valuable data and networks against Modern Malware infiltration and theft in commercial enterprises, higher education, and government institutions. The FireEye Malware Protection System is the industry’s first solution that completely breaks the Modern Malware infection lifecycle by stopping inbound, zero hour, targeted attacks, outbound data exfiltration callbacks, and dynamically inoculating networks from future attacks through both local and global intelligence. FireEye finds and blocks the 90% of Modern Malware attacks that conventional defenses miss, at network speeds and near-zero false positive rates, delivering an extremely low security TCO. FireEye is based in Milpitas, Calif. and is backed by Sequoia Capital, Norwest Venture Partners, JAFCO Ventures, DAG Ventures, Juniper Networks, and In-Q-Tel. Visit us at www.FireEye.com.