08 April 2019

New from Riverbed is a product which the company says transforms network data into cybersecurity intelligence.

Called SteelCentral Advanced Security Module, it is said to provide essential visibility and forensics for broad threat detection, investigation and mitigation.

Riverbed says it uses full-fidelity network flow analytics to capture and store all the data needed for forensic analysis. It delivers insights and empirical evidence to detect and investigate advanced threats that bypass typical preventative measures, as well as those that originate inside the network.

Designed for security operations teams, the new software module is said to offer a wide range of threat detection features.

It raises alerts if the user’s system communicates with blacklisted communications -- such as known malware download sites and command and control sites – allowing prompt investigation and action.

It also quickly and accurately identifies a broad range of DDoS attacks so customers can make informed decisions to end interruptions simply and seamlessly.

In addition, says Riverbed, the module automatically identifies threats that generate unusual patterns, such as unexpected new services, hosts or connections. And SteelCentral proactively searches for hidden security threats on a network before they affect the business.

It also provides full historical details so customers get the complete scope of the attacks, reducing the likelihood that future attackers will get the data they want.

As well as network monitoring, NetProfiler provides insight into cloud usage, answering such questions as what resources are in use, who is using it, are cloud resources being used efficiently, are unknown costs being incurred, and helps to fix problems.