RSA expands NetWitness Live for greater threat detection and mitigation

RSA has enhanced its NetWitness Live platform to offer more threat content, customised content distribution capabilities and new integration with its analytics platforms.

As its industry-wide conference begins today in San Francisco, the corporate announced that its cloud-based, 24/7 threat intelligence delivery platform, that is engineered to aggregate, analyse and spotlight the foremost relevant security content from 100 trusted sources, now provides 30 per cent more threat content, with data sources from RSA's CyberCrime Intelligence service and eFraudNetwork added, in addition to intelligence feeds from Bit9 and ThreatGRID integrated.

The company has also added customised content distribution capabilities and integration with its analytics platforms, with the RSA NetWitness for Logs platform and the RSA NetWitness Spectrum malware detection platform enabling security teams to stream relevant NetWitness Live content directly; the analytics platforms are designed to automatically ingest the info to boost the precision in their threat detection results.

Amit Yoran, senior vice-president and general manager of RSA's security management and compliance division, said threat intelligence and related information should be shared faster than ever to defeat today's cyber adversaries, whose attacks are becoming increasingly sophisticated and customized.

“NetWitness Live was instrumental to our customers in detecting and defeating advanced threats. By tapping into the collective intelligence and analytical skills of the worldwide security community, the service helps organisations significantly enhance their situational awareness and shorten their time to answer potential threats,” he said.

“The latest enhancements and integrations extend our capabilities in real-time security analytics and advanced threat detection to provide organisations more timely and constructive visibility into potential attack vectors.”

Additions include a central management console to tailor content sources according to an organisation's unique environment and threat profile or so as to add network monitoring feeds and optimise content flow, besides the power to engineer NetWitness Live Manager content profiles to permit security analysts to concentrate on the duty of defending network assets by reducing the effort and time normally required to effectively manage content.