Speed Product Innovations and new Features
Identity and access solutions is currently developing multiple products in our labs to support real-world use cases that we have seen in our customer environments. I have to say that the team is full of brilliant ideas and we just don’t have enough time in the day to build them all. Some of the products that we feel are actively developing are outlined below. Look for updates here as they become more mature. Risk Adjustable Access Control
One of the biggest gaps that we see in most modern access control systems is the ability to enforce risk adjustable access control (RAdAC) systems in real time. Tools like ArcSight focus on finding the bad guy after the attack or leak has already happened. Their agents are hard to install and manage, and the infrastructure is expensive to maintain. The real-time tools in the market do not analyze the whole picture and only focus on the transactions within individual pages in an application. These solutions can only keep a short amount of activity data online and available before it becomes too expensive to manage. The Identity and access solutions utilizes open source technologies to aggregate the data in near real time and calculates risk on security-relevant events across your infrastructure. We analyze the user’s current behavior against their heuristic behaviors and the behaviors of their peers. Our rules are not static and are constantly managed within the system as usage patterns change and systems grow over time. Customers have the option of using their own business intelligence (BI) tools to analyze the historical data or use our built-in reporting capabilities. Once customers have defined their security-relevant events, the system can then begin enforcing them in real time. By utilizing the power of the Hadoop software, we are able to scale to massive numbers of nodes with petabytes of historical information at a significantly lower cost than traditional database backed solutions.
We are excited to show this to our customers. If this is something your organization might be interested in please contact us and we’ll be happy to get back to you. Co-Sourced Risk Analysis
For years the Spamhaus project has provided the works with blocklists for the email world. With the increase of cyber-attacks and amount of fraud online it is time someone began providing a centralized blocklist capability for online commerce. The banking industry has stated that over $200 billion dollars are lost each year in online fraud. Identity and access solutions have built a framework to allow organizations to ship their security-relevant log data to our services and correlate user actions across websites. We are able to predict patterns and determine which IP addresses and user accounts are currently under attack and provide real-time risk scores to these organizations about whether or not they should allow a transaction to continue.