Norse expands threat intelligence

SAN MATEO, USA: Norse, a leading provider of live threat intelligence solutions, today announced availability of Norse IPViking™ 2.0, the next generation of its cloud-based IT security solution, which provides context-rich, dark-threat intelligence about the darkest segments of the Internet.

New to IPViking are unique threat intelligence capabilities that detect malware while it is in the development phase, before cybercriminals can use it as part of an attack. Norse has also added capabilities that identify mobile and desktop devices, appliances, servers and even satellites in space attempting to connect to networks via malicious IP addresses.

Pre-attack malware detection and malicious-device-type identification capabilities allow customers to reduce their risk of falling victim to costly compliance violations, compromises and data breaches. Norse's fully automated threat intelligence capabilities improve threat identification and detection accuracy and eliminate delays caused by manual processes.

Pre-attack malware intelligence

Malware is an insidious problem for all connected enterprises, government agencies and consumers. With the emergence of the Internet of Things (IoT), where virtually all electronic devices, from consumer appliances to industrial systems, are connected to the Internet via an IP address, cybercriminals and nation-backed operators are finding it easier to execute advanced attacks.

Malware, used to infect computers to siphon data, engage in cyber espionage and even inflict physical damage, is at the forefront of most attacks. Pre-attack detection capabilities added to IPViking allow customers to detect and take action to defend against malware while it is in the development, Zero Day or identified (signature) phase.

Device and OS threat intelligence

IPViking customers have benefited from the solution's ability to detect malicious IP-based attacks before they develop into compromises and data breaches. IPViking 2.0 adds device type and OS identification, providing more context to Norse's already detailed threat intelligence.

IPViking now identifies devices such as desktops, iPads or other mobile devices as well as servers and appliances on IPs conducting high-risk activity. To provide customers with more threat-intelligence context and enable them to make better decisions, IPViking also classifies the high-risk devices it identifies into categories such as government, consumer, education and corporate.

"The Internet is the most widely used business communications and transaction platform and at the same time, the most dangerous. There is no real way to remain protected against attacks and exploits without visibility into what the bad actors are doing and planning," said Sam Glines, CEO, Norse.

"IPViking 2.0 delivers the most comprehensive threat intelligence available today and true early warning that enables enterprises and government agencies to detect threats and take action before they inflict financial and reputation damage."