NGR Softlab: Dataplan Analytical Platform

The main articles are:

• Business Intelligence Definition
• Big Data
• Data mining Data mining
• OLAP system

Dataplan is an analytical software and hardware complex that allows you to work with big data and, using machine learning and statistical analysis algorithms, build metrics based on this data.

The collected metrics are used to make "Data Driven" decisions based on data analysis for the purpose of:

• reducing the risks of violation of the activities of the organization,
• increase in profits or decrease in losses of commercial companies,
• growth of assets, etc.

2024

Obtaining the status of software with AI

The analytical platform for solving information security problems Dataplan, developed by NGR Softlab, has received the status of software with artificial intelligence. The Ministry of Digital Development of Russia has confirmed the compliance of the system with the criteria for products with AI. NGR Softlab announced this on October 30, 2024.

Dataplan analyzes data using algorithmic machine learning and AI to comprehensively assess the security status of information systems. The platform stores and processes large amounts of data, including unstructured data. It uses AI technologies to identify signs of hidden threats and help reduce the risks of violating the security of information and business processes of the company.

The intelligent algorithms built into Dataplan perform a number of tasks that are complex with traditional tools. For example, they help users in making data-driven decisions when investigating information security incidents and disrupting business processes. Role Mining Application uses AI to find and classify objects, identify abnormal security groups, and directory service users to prevent sensitive data from leaking. The xBA Application AI module, based on historical data, detects signs of compromise of credentials, insider activities and other hidden security threats. In addition, the platform provides the data necessary for investigating security incidents to different systems, for example, SIEM, SOAR, etc.

The artificial intelligence methods of the Dataplan platform make the work of information security officers more efficient, helping to cope with the increasing complexity of information processing and the speed of context change. The platform takes over the automatic analysis of a large amount of data and provides additional information for making the right decisions, "explained Dmitry Pudov, Deputy General Director of NGR Softlab.

Release of version 1.10 with the ability for users to customize the scoring model

NGR Softlab has updated the Dataplan analytics platform to version 1.10. The changes are primarily aimed at improving the algorithms of the xBA Application behavioral analytics modules and Role Mining Application role modeling. The developer announced this on May 13, 2024.

The updated version of Dataplan will allow users to receive hidden threat search results adapted to the features of specific information systems, as well as apply the principle of least privileges when building an access role model (RBAC).

In the updated version of xBA Application (UEBA solution class), system users will be able to independently configure the scoring model, setting the risk value of the detected deviation depending on its importance. This will allow security services to prioritise incident response. It also became possible to customize the type of statistics to identify deviations: individual, group or complex - of all types at once. Working with individual statistics will make it possible to focus on identifying signs of compromise of accounts, with data group - on detecting signs of insider activities and violation of security policies.

Role Mining Application adds the ability to select the algorithms used to optimize time and computing resources: state assessment and deviation detection, role modeling. Also, the updated version allows you to create role-based access delimitation models (RBAC model) not only with the preservation of current privileges, but also with their minimization. Built-in machine learning algorithms will offer to eliminate unnecessary access rights, which will reduce the risk of data leakage when implementing the model. The advanced toolset allows you to more accurately form the RBAC model by adding exceptions to the model calculation for both individual users and groups.

Dataplan version 1.10 introduced a real tool for implementing the key principles of the Zero Trust model. Continuous monitoring and profiling of infrastructure elements, users, as well as constant audit of the role model and access rights make this tool a mandatory element of the modern cybersecurity system, "said Dmitry Pudov, Deputy General Director of NGR Softlab.

2023

Dataplan 1.9.1 with advanced statistics of the xBA Application module

NGR Softlab has updated the Dataplan analytics platform to version 1.9.1. The update is primarily aimed at reducing the number of routine actions to work with the xBA Application behavioral analytics module. The company announced this on October 31, 2023.

This version of the UBA/UEBA class module provides information about abnormal accounts, hosts, processes, and other controls within a specific behavioral profile. It is possible to instantly view basic information on the behavior of a group of objects and the most abnormal among them.

The update also expanded the statistics of the xBA Application module - for faster decision-making when investigating incidents and tracking the most dangerous objects that pose a threat to information security.

In the updated version, the entry threshold has decreased - it has become easier to work with the platform and respond to potential incidents. At the same time, it remains possible to see more information if detailed information is needed to make a decision.

After the update, Dataplan became available to users with different levels of qualifications, a range of tasks to be solved and a level of decision-making, "said Dmitry Pudov, CEO of NGR Softlab. - Customers have the most flexible and cost-effective tool to prevent the risk of compromising sensitive data and hidden malicious actions in the infrastructure.

The Dataplan platform analyzes data using algorithmic machine learning, comprehensively assessing the state of information protection systems, user behavior and infrastructure elements.

Dataplan 1.9 with optimized data sources

On May 22, 2023, NGR Softlab announced the update of the Dataplan analytical platform and its expansion modules to version 1.9. The update will help users comprehensively assess the behavior parameters of users, hosts and other objects, and timely identify anomalies that increase the risk of information security threats.

In this version, Dataplan has improved its work with data sources and introduced tools to control their receipt. Updated the interface, improved the performance and stability of the analytical platform.

An entity card was added to the xBA Application behavioral analytics module - a tool that will help determine the degree of risk of behavior of a particular user, host or any other object by a set of parameters, compare it with other similar elements, analyze the sequence of deviations and get details on anomalies.

NGR Softlab specialists have improved the mechanism for sending notifications on detected anomalies and changes in the risk level of the xBA module to reduce the number of false positives in SIEM systems, if xBA information is used to write correlation rules, as well as to increase awareness of information security employees. In this version, it is easy to see the values ​ ​ related to anomalies on the graphs, as well as the ability to select raw data from which it was detected. This significantly reduces the time spent analyzing suspected incidents and allows you to focus on information that is important for the work of the analyst.

Updating the xBA module makes it as complete as possible in terms of the functionality of the UBA/UEBA solution class, "said Dmitry Pudov, CEO of NGR Softlab. - At the same time, users still have access to a choice of parameters for assessing the behavior of certain objects without reference to any data sources and vendors. We provide the user with the most flexible tool for solving the tasks of identifying internal violators and preventing significant risks that arise due to insider activities or caused by compromising information systems. In addition, Dataplan ─ a product with the best total cost of ownership on the market.

Role Mining Application Release

On February 2, 2023, the company NGR Softlab announced that as part of the analytical platform Dataplan has released the Role Mining Application module, which implements the functions (mining generation) of the role-based access control model (RBAC).

Role Mining Application - a module for assessing the current state of the access rights delimitation system. Designed to update access delimitation rules, automatically generate and optimize the role model, which reduces data leakage risks.

The module will analyze Active Directory and assess its condition by a number of high-quality metrics, determine the composition of security groups and give recommendations for improving the current access delimitation system. Using algorithmic machine learning, it will identify security groups and users with the highest levels of risk, as well as form a project for a role-based access delimitation model.

The Role Mining Application module will help information security specialists identify users with abnormal access rights and security groups with low efficiency, reduce the time for granting access rights for new employees or when moving existing ones to a new position (role), show an objective picture of access to resources, and also help in audit before implementing access control systems.

Access control ─ one of the most important tasks of information security. Irrelevant access rights to information systems can provide an opportunity for illegitimate access to confidential information and provoke significant risks for business, "said Dmitry Pudov, CEO of NGR Softlab. - We are consistently expanding the platform's capabilities by providing analytical solutions to information security challenges in the most demanded areas to provide customers with protection against current threats. Role Mining Application is an extension module for the Dataplan analytics platform that allows responsible departments of the customer to improve the quality of role-based access control.

2022

Packing Components in Containers

On September 19, 2022, the developer of information security solutions NGR Softlab announced the release of an update for the Dataplan platform. To reduce the cost of computing power and the load on the information security specialists of the customer in the updated version of the product, the components are "packed" in containers, mechanisms for rotating data in the storage are implemented, and the functions of the xBA Application behavioral analytics module are added.

Component containerization has simplified the process of deploying, updating, and scaling a solution across a customer's infrastructure, including its isolated segments. Before installing or during platform updates, you do not need to have an Internet connection ─ all dependencies and working environments will be "packaged" in a container and deployed with it.

Optimize storage costs and keep them up-to-date with data rotation. It is carried out by setting the time interval at which the old information will be automatically deleted from the store.

To detect the launch of programs or processes unusual for the user, the xBA Application behavioral analytics module has added a calculation function. It is useful for finding unusual characteristics not only in user actions, but also in network traffic. This will help identify connection attempts from other cities or countries.

xBA also added the ability to analyze several behavioral profiles of the same category to assess the state of the company's information security system or business processes based on data from different sources. The updated version reduces the number of false positives for individual profiles.

The increasing number of attacks and their rapid evolution force companies to look for solutions that are able to detect their signs in the earliest stages. The Dataplan platform provides the opportunity for information security specialists to work proactively with a large range of threats so that companies prevent incidents, and not fight their consequences, ─ said Dmitry Pudov, CEO of NGR Softlab.

Dataplan version 1.7 with additional options for working with data sources

On June 17, 2022, Angara Security announced that NGR developer Softlab had released update 1.7 for the Dataplan platform.

The platform is used as a modular universal tool, storages processing visualization and analysis results large data arrays using. algorithms machine learning The updated version of Dataplan includes eliminating shortcomings in the operation of source interaction services, data expanding administrative functions, the results of optimizing algorithms for working storage with and analytical modules.

There are additional options for working with data sources: now you can connect the source using a connector template or editor, as well as using a downloadable file or python script. For connected sources, the mechanism for monitoring their condition and the receipt of new data has been improved. Information about the status of new data receipt can now be received by mail.

The list of administration functions that appeared included: the ability to control the launch of most platform components from the Web interface, the presentation of advanced information about their status, sending administrative notifications by syslog - including for the xBA Application behavioral analytics module.

At the request of users, they optimized the functions of interaction with the storage, which were also included in the update. The main thing is that through the Web interface you can now analyze the structure of the store, its databases, as well as make changes if you have the appropriate access rights: add or delete databases, delete tables, add or delete table columns, configure aliases and mask data.

We invest in product development and listen carefully to the needs of our partners and customers. With each next version of NGR, Softlab becomes a step closer to our main goal - to create products in demand on the market that have special characteristics, "said Dmitry Pudov, CEO of NGR Softlab.

2021: Inclusion in the Unified Register of Russian Programs

The Dataplan platform Russian of the developer of tools for processing and analysis, and data robotizations business processes solutions in the field information security NGR Softlab was included in and Unified Register of Russian Programs. The electronic computers databases developer announced this on March 16, 2021.

The product is presented in two classes: software monitoring and control systems, as well as systems for collecting, storages processing, analysis, modeling and. visualization of data arrays

As of March 2021, there are practically no companies that are not interested in the development of their analytical tools, and the demand for such solutions is growing steadily. We focus on information security applications. At the same time, the platform is quite universal and should find its application in a wide variety of industries. External support measures states allow us to invest more R&D in and consistently prove that Russian solutions can compete with Western counterparts, "comments Dmitry Pudov NGR Softlab CEO.

2020: Platform Structure

The platform structure is represented by 4 components

• Dataplan Processing - event collection, filtering, aggregation and normalization;
• Dataplan Storage - highly efficient distributed data storage designed for online processing of analytical requests (OLAP);
• Dataplan Analytics - data analysis;
• Dataplan Visualization - visualization of key metrics and analytics results indicators.

Structure of platform modules

• XBA module - advanced UBA (user behavior analytics) - analysis, where, in addition to the user, assets, networks, tasks, business processes and systems are analyzed;
• Predictive Monitoring - predictive monitoring, which is an analysis of event logs in order to predict and prevent violations, instead of simply detecting them;
• Evaluation of personnel using the "360 degrees" method is an approach to the company's specialists and incoming candidates to identify patterns and form a more cohesive team.

Application areas of the platform

• Information security, allowing analysts to reduce decision-making time.
• For external threats - identifying compromise of accounts and assets, leaks of critical data and exploitation of vulnerabilities;
• For internal threats - abuse of issued rights, insider activities, inconsistency of the accounts used.
• Service area - creating a system for analyzing the actions of employees of the call center when working with requests;
• Insurance - a system for analyzing sources of data leakage on customer insurance claims in order to re-register the right of claim;
• advertising sphere - assessment of the effectiveness of advertising campaigns, search for robots that "wind up clicks" in purchased advertising;
• Banking - creation of a system for numerical assessment of the reliability of the generated reporting;
• other possible business challenges facing Customers.

Platform Values

• The platform allows you to access, including unstructured data, combining it for transformation, analysis and visualization.
• Dataplan provides the ability to perform advanced analysis: predictive, statistical, and spatial.
• The platform allows you to analyze data without involving specialists who own Machine Learning algorithms.

Platform objectives

• Behavioral analysis and detection of deviations;
• Making forecasts based on available data;
• Search for dependencies, i.e. the influence of some business parameters on others;
• Creating Custom Result Visualization Systems