Slashdot Mirror
Cloud Security Startup ProtectWise Creates Network DVR To Analyze Threats (hothardware.com)
MojoKid writes: A Denver-based security startup called ProtectWise has a rather interesting twist on a security as a service platform that also incorporates an innovative threat detection and management user interface. The ProtectWise security platform runs on a cloud-based infrastructure that currently utilizes Amazon AWS for storage and processing. ProtectWise is an all software solution comprised of a "Cloud Network DVR" platform made-up of virtual cameras in the cloud that record all traffic on the network. The sensors (12MB install package) record all network traffic wherever they're installed and stream it up to the ProtectWise platform where it is securely stored and the threat analysis is performed. The sensors can be configured with profiles to capture just light metadata like netflow or headers (source, destination etc.) all the way to the full payload. You can then playback the traffic from the ProtectWise cloud analytics platform, going months back if needed, and analyze the data for threats. You can go back in time and see if, where and how you've been compromised retrospectively. There's also a ProtectWise HUD that visualizes and renders network threat location and progression, allowing you to make better use of all the data recorded. It has a 'KillBox' that visually shows attack event progression across the network area. The only question has to do with compliance for financial applications since it is cloud-based. Currently, ProtectWise has 100 or so deployments of its product in the market with customers like Netflix, Hulu, Expedia, Pandora and Universal Music.
Security as a service platform, innovative, cloud based infrastructure, CLOUD NETWORK DVR virtual cameras, light metadata, playback, cloud analytics platform, back in time, K-K-K-ILLBOX!
Does it come in a cereal box?
It might be an excellent system but even if it is you are still adding several new points of failure outside your control to your security.
no. not the only.
horse leaves barn.
...with customers like Netflix, Hulu, Expedia, Pandora and Universal Music...
It looks more like a geo-location service and VPN/Tor detector
“He’s not deformed, he’s just drunk!”
Confused, where are they putting all the software again?
"There is more worth loving than we have strength to love." - Brian Jay Stanley
So now we have private companies setting up gross hoovering of network traffic worldwide - listening in to all the world's net traffic.
Why was it the powers that be want to get rid of good encryption again? certainly not to protect my credit card data when I buy stuff.
The time for crypto everywhere is now!
How do I disable targeted ads, masquerading as articles?
Now you too can have your own little NSA! Spy on your network just like the big boys!
Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
Some say the best talents have no name. Since I don't know who said that, I picture it must be the best of the minds.
I had a similar idea 20 years ago. Capture/record a signal stream and use it later. Should've patented it.
How much they they pay for this ad on /.?
And what's with the retarded "DVR" and "virtual cameras in the cloud" bullshit? It's called a packet sniffer. The only "news" here is that the mirror is streamed to a remote server for analysis, apparently to no advantage whatsoever.
Comment removed based on user account deletion
I'd put my money with https://packetsled.com similar pitch better functionality
Physical artefacts do not behave the same way as digital information, you know when the former is stolen. Security of your inner network is not the same as storage of interchangeable items like money, if you put money in a bank and it gets stolen later you don't lose anything so long as the bank remains solvent. Banking moves the target outside of your control and outside of your responsibility, this does neither at best it adds a few more locks, but also more possibly unguarded doors. In fact I am struggling to see exactly what you are trying to imply...
Does it come in a cereal box?
No, it comes in it's own damned planet. A planet like ours but much bigger, whose inhabitants have dedicated all their time and resources to the task of storing our planet's data streams so highly paid net-nerds can surround themselves with 'real time threat displays' while making knowing grunts of surprise, and giving tours of the NOC to doe-eyed CEOs, meanwhile getting zero productive work done..
Ping traffic (admin scripts and and early DDOS) sometimes grabbed 50% of all network traffic.
Email spam (in the days of open relays) at times comprised 50% of all traffic.
Netflix and Youtube video streaming now comprise 250% of all traffic.
Cloud service load balancing and proxy mechanisms use 150% of available backbone networks.
Cloud virtual process space sharing, where the same 'Hello World' apps bounce back and forth for no earthly reason, use a mere 100%.
The loading of ridiculously massive JPG images into tiny rectangles on webpages (with smart phones some now exceed 1000dpi) comprises 130% of all traffic.
People accessing web services that give real-time charts and summaries of traffic, use another 300% of all available bandwidth.
Now, net-nerds are going to use the cloud to duplicate the cloud so they can play it all back later. 200%.
Some 'net DVRs' will be installed on networks that already have one, to monitor (and capture) the copies of DVR data streams. 400%.
Two networks will try to DVR each other, resulting in a 'race condition to the finish' (Infinity%)
The network statistics shown above were obtained from Netcraft, by hacking into their website and placing them there.
<blink>down the rabbit hole</blink>
There is no such thing as "comprised of". There is "comprises", which means "composed of", which is what you should have used.
That's what I was thinking. It's a fucking system to log traffic! What genius! How unique! They should quickly patent this.
Distributed network DVRs aren't new at all. See:
Network Flight Recorder
netsniff-ng
WildPackets
cPacket
OpenFPC
Snort
Security Onion...
I guess that these don't have the new ultra secure Cloud feature that makes all the difference. they also lack apps. I'll admit that the egregious omission of apps makes them ludicrously poor options. Everyone knows that you can't have security without cloud apps, because apps are security and cloud makes it so.
Right?
I thought it meant a shared TiVo or cloud storage of traffic cameras or some bizarre thing like that. No, it just fucking logs packets.
I came here to say the same thing. I guess I'll go back to what I was doing. Which is nothing.