Solutions Introduction
Enterprise OEM
Click Here for White Papers and Case Studies

Enterprise

Introduction

What Damballa Does
Damballa's enterprise solutions combine local appliances and an Internet-based surveillance network to identify targeted attack activity and isolate it from legitimate network traffic.

Damballa has two deployment options that work cooperatively to protect enterprise organizations. Clients receive focused, real-time information and analysis of targeted attack malware compromises on their networks and broader malicious activity by subscribing to Damballa’s Internet-based Global Surveillance Network. This service delivers immediate alerts when new compromises occur on client networks. It requires no equipment on client premises and can be fully operational within hours.

Organizations concerned about compromised machines operating inside their network, unimpeded by AV or IDS/IPS, use Damballa’s Failsafe appliances. These devices are placed at key Internet access points and network intersections to identify internal activity typical of targeted attacks such as bots. Damballa notifies clients in real-time when a new compromise is detected.

Damballa's enhanced technology delivers a number of advantages over other security offerings, including:

  • Faster identification, understanding and response to newly emergent or previously undiscovered targeted attacks
  • Rapid analysis of suspicious activity, without requiring signatures or network behavior profiles
  • Detailed, real-time information on changes to compromised systems
  • Immediate attack disruption, including infiltration of malware armies and the issuance of false information to malware command-and-control (CnC) nodes
  • Live attack monitoring within a safe, controlled environment in order to learn more about the exact risk, intent and evolution of an attack

The end result is an easily managed, cost-effective solution that prevents sensitive information from leaving the enterprise and protects with minimal impact on network management, security management or end user operations. As such, Damballa represents a powerful advance in real-time protection against targeted attacks, and a valuable addition to Defense-in-Depth (DiD) security infrastructure.