InfoWatch Targeted Attack Detector

InfoWatch Targeted Attack Detector – the solution is developed especially for detection of the difficult purposeful attacks using unique malware, vulnerabilities (0day) and social engineering. The solution InfoWatch Targeted Attack Detector is capable to detect the targeted attacks which remain imperceptible for classical means of protecting. The malware for the purposeful attacks is written under the specific organization taking into account specifics of its business processes and architecture of protection therefore to counteract or even to detect it extremely difficult in time, noted in InfoWatch.

At commission of the purposeful attacks the social engineering is also used, different vulnerabilities — known and unknown are operated. The insiders helping malefactors to get into IT infrastructure of the enterprise thereby can participate in the attacks leveling security defense of perimeter.

2015: InfoWatch Targeted Attack Detector 3.0

On June 18, 2015 the InfoWatch company announced a product yield of InfoWatch Targeted Attack Detector 3.0^[1].

The principle of work of a product is based on control of creation in the system of the atypical changes entered by the malicious software. InfoWatch Targeted Attack Detector carries regularly out scanning of the IT system of the organization and collects information on a status of crucial objects. Data retrieveds go to a cloud, are compared to results of complete researches then the intellectual analysis of the happened changes is made. In case of identification of anomalies, to the analysis of the unknown malware the analyst of InfoWatch is attracted.

Representation of InfoWatch Targeted Attack Detector, 2014

In this version the centralized installation, updating and removal of agents at workstations is available to users. The server of the centralized installation also allows to integrate all agents in the closed local network where Internet connection has only one centralized server. The same system informs the security officer on a status of the agents and files sent to a cloud. The server of the centralized installation allows with ease and in short terms to create the protected network, the attacks to which will come to light at the earliest stage.

If in the previous versions of a product the analysis of cuts of a system was started regularly, then in the current version of InfoWatch Targeted Attack Detector, the companies can execute continuous monitoring of changes in IT infrastructure. Together with high data processing rate it provides the most operational identification of the attacks, and the self-training expert system which is a part of the solution precisely classifies the revealed anomalies.

The version of InfoWatch Targeted Attack Detector 3.0 gives to the security service specialist an opportunity of control of transfer of confidential information in a cloud, defining the list of files for the analysis in an expert cloud system and what should not leave perimeter of network.

"In spite of the fact that the data transferred to an expert cloud do not belong to sensitive information, need of use of external storage confused some of our clients, – Andrey Arefyev, the manager on development of products of InfoWatch company noted. – In the new version of InfoWatch Targeted Attack Detector 3.0 we made this stage of work of a product the most clear, transparent and managed that our clients could control completely what information goes to a cloud".

In this version the personal account is more convenient and functional. In it status reports on agents, statistics on all incidents are available. If desired users can configure a subscription to email notification about a status of an information system and the recommendation about elimination of vulnerabilities.

2016: InfoWatch Targeted Attack Detector 3.1

InfoWatch Group, the developer of information security systems, announced a release of the new version of InfoWatch Targeted Attack Detector with support of Windows 10. It is said in the statement.

In the version of InfoWatch Targeted Attack Detector 3.1 the interface of a personal account of the user underwent changes. Thanks to increase in a usability it became more intuitive and convenient in use, told in the company.

Besides, for the benefit of simplicity of administration in the new version the technology allowing to set the solution at workstations and servers of the organization in shorter terms is implemented.

Notes