RSA expands NetWitness Live for greater threat detection and mitigation

RSA has enhanced its NetWitness Live platform to offer more threat content, customised content distribution capabilities and new integration with its analytics platforms.

As its industry-wide conference begins today in San Francisco, the corporate announced that its cloud-based, 24/7 threat intelligence delivery platform, that is engineered to aggregate, analyse and spotlight probably the most relevant security content from 100 trusted sources, now provides 30 per cent more threat content, with data sources from RSA's CyberCrime Intelligence service and eFraudNetwork added, in addition to intelligence feeds from Bit9 and ThreatGRID integrated.

The company has also added customised content distribution capabilities and integration with its analytics platforms, with the RSA NetWitness for Logs platform and the RSA NetWitness Spectrum malware detection platform enabling security teams to stream relevant NetWitness Live content directly; the analytics platforms are designed to automatically ingest the information to augment the precision in their threat detection results.

Amit Yoran, senior vice-president and general manager of RSA's security management and compliance division, said threat intelligence and related information have to be shared faster than ever to defeat today's cyber adversaries, whose attacks are becoming increasingly sophisticated and customized.

“NetWitness Live have been instrumental to our customers in detecting and defeating advanced threats. By tapping into the collective intelligence and analytical skills of the worldwide security community, the service helps organisations significantly enhance their situational awareness and shorten their time to reply to potential threats,” he said.

“The latest enhancements and integrations extend our capabilities in real-time security analytics and advanced threat detection to provide organisations more timely and constructive visibility into potential attack vectors.”

Additions include a central management console to tailor content sources in response to an organisation's unique environment and threat profile or to feature network monitoring feeds and optimise content flow, to boot the power to engineer NetWitness Live Manager content profiles to permit security analysts to highlight the duty of defending network assets by reducing the effort and time normally required to effectively manage content.