Deep System Cyber Intelligence for Next-Generation Honeynets and Advanced Malware Analysis
WALTHAM, Mass. (February 26, 2013) – CounterTack, the industry’s first and only provider of in-progress cyber attack intelligence and response solutions, today announced the next version of CT Scout (formerly Event Horizon®), a cyber intelligence product helping enterprise and government organizations close the Detection Gap.
The CounterTack Scout product offers a unique platform for next-generation honeynet deployments as well as advanced malware analysis. A self-contained appliance with a multi-blade virtual machine (VM) architecture, CT Scout supports a range of honeynet configurations, from single honeypots in sensitive network areas to networks of honeynet systems deployed throughout enterprise networks to improve detection coverage and perceptual consistency.
“It's fair to say that many of us want to see what the bad guys are up to, how they’re coming after us, and what they’re coming for, but we certainly don’t want to let them into our production systems to watch them work,” said Christian Seifert, CEO of The Honeynet Project. “If your job is to protect your assets, there's no better way to keep abreast of what the bad guys are up to than to watch them work, and honeynets give us a way to do that in a lower risk setting.”
CounterTack’s CT Scout appliance also provides a safe way to detonate malware for detailed analysis. When configured as a closed protected environment, the CT Scout VM architecture supports configurations of exact Windows and Linux production-system replicas, including network connectivity. By leveraging CounterTack’s patented Deep System Inspection technology, CT Scout provides unique visibility into previously undetectable malware behaviors.
“You can’t protect against what you can’t see,” said Sean Bodmer, Chief Researcher in the CounterTack Cyber Counterintelligence Research Lab. “The kind of intelligence we’re gaining with Deep System Inspection on CT Scout is what enabled us to figure out how to detect Red October and other advanced threats.”
CT Scout V3.2 will be available for sale in March 2013 and is being demonstrated at the RSA Conference this week at CounterTack’s booth #2533.