Damballa's Global Surveillance Network uses the Internet itself to deliver the information and insight that businesses need to protect themselves against targeted attacks.
Damballa's Global Surveillance Network is a subscription-based information service that delivers critical intelligence on targeted threats such as BotArmies and their activities across the Internet. Damballa has partnered with a wide range of Internet infrastructure organizations to locate sensors that can identify and track malicious traffic, including BotMaster command-and-control communications, from anywhere in the world. This information is collected and analyzed in the Damballa Analysis Center, and accessed by customers via the Damballa's secure Portal.
These reports are concise and easy to understand, with rapid access to additional information that reveals critical details of where targeted attack activity originates, and the IP address of BotMasters and other online criminals. Security professionals use this real-time intelligence to respond to compromises on their own networks, and to protect their systems from external attack and control.
Global Surveillance Network Benefits
| Feature |
Description |
Client Benefit |
| Rapid identification of compromised systems |
- IP address at client site
- Precise location
|
- Faster recognition and alerting drives a more flexible, more thorough response
- No guesswork. You know what's compromised
|
| Online activity monitoring |
- Current and historical machine status
- Recent activity from compromised systems
- Probability that host is still compromised with active malware
|
- Compromised communications are highlighted for additional review
- Suspected bot communications can easily be accepted, denied or quarantined
|
| BotArmies Knowledgebase |
- Malware attack, reconnaissance and polymorphic capabilities
- Recent suspicious activities including rallying and attack behavior
- Relative BotArmy size
- Remediation guidance for compromised systems
|
- Understand risk to intellectual property.
- Educate executive management on the threat from targeted attacks
- Assists in prioritizing remediation activities
- Assist in locating the exact file, or binary representation, on the compromised systems
|
| 24x7x365 Web Portal Access |
- Daily summary reports.
- Customized alerting for each user
- Trend reporting of the internal and external targeted attack activity over time
|
- Ensures that the user receives actionable information in the most efficient manner possible in order to protect the enterprise
|
