DB Networks adds Real-Time Compromised Credential Identification Capabilities to DBN-6300 and Layer 7 Database Sensor Products
DB Networks Applies Machine Learning and Behavioral Analysis to Immediately Identify Credential Abuse
SAN FRANCISCO, Feb. 29, 2016 /PRNewswire/ -- RSA Conference 2016, Booth No. 607 South Hall -- DB Networks®, a leader in database cybersecurity, today announced industry-first capabilities to non-intrusively identify compromised credentials in real-time by uniquely applying machine learning and behavioral analysis to every database communication. This powerful new feature is now available in its DBN-6300 and Layer 7 Database Sensor products.
Photo - http://photos.prnewswire.com/prnh/20160229/338383
Logo - http://photos.prnewswire.com/prnh/20160229/338384LOGO
Many high profile database breaches have resulted from the abuse of legitimate logon credentials. Identifying these apparent "insider threats" requires a new approach. Those who were once considered trustworthy may have lost their credentials to an attacker and are now posing an insider threat. This is why identifying compromised credentials in real-time has proven elusive until now. The situation has changed, and so must the mechanisms to mitigate the risk.
Rather than inherently trusting specific clients, servers or users, the new approach identifies normal business flows and evaluates the risk and business context of any deviation. Doing this accurately and in real-time requires deep protocol analysis on large amounts of database communications to detect when an entity demonstrates a new behavior – indicative of an attacker using stolen credentials.
The cyber criminals' primary goal is to obtain privileged logon to gain access to sensitive and valuable data. Once the attacker has obtained the proper credentials they can pose as the privileged insider and breach the databases. At that point they can access sensitive assets and setup a channel to exfiltrate an entire data set to an off-site server.
"Databases are the organizations 'crown jewels' and compromised database credentials are essentially the 'keys to the kingdom' for attackers," said DB Networks' Chairman and CEO Brett Helm. "Through the unique application of machine learning and behavioral analysis, DB Networks is now able to immediately identify stolen credentials so that a data breach can be stopped in its tracks."
Once a compromised credential is identified it's critical to understand the scope of the incident. DB Networks assists security professionals with a security search tool to enable them to easily investigate any suspicious activity in the database tier. This powerful capability is extremely useful to understand the scope of activity that resulted from compromised credential.
For a personal demonstration of DB Networks' products and the opportunity to meet with members of the team, visit the company at the RSA Conference 2016 -- front row booth #607 South Hall at the Moscone Center in San Francisco from Feb. 29 - March 3. Or see DB Networks at the HIMSS 16 Conference & Exhibition -- booth #9908-13 at the Venetian Palazzo Sands Expo Center in Las Vegas from Feb. 29 - March 4.
About DB Networks®
DB Networks innovates database cybersecurity products. Its customers include the world's largest financial institutions, healthcare providers, manufacturers, and governments. DB Networks technology non-intrusively assesses database infrastructures through deep protocol extraction, machine learning, and behavioral analysis. Customers gain insights by discovering all active databases, identifying tables being accessed, and the specific applications accessing the databases. In addition, analyzing application database access that deviates from the model of normal application behavior immediately identifies database attacks. DB Networks is a privately held company headquartered in San Diego, Calif. For more information, call (800) 598-0450 or visit the DB Networks website, Twitter page, LinkedIn page, Google+ page, and YouTube channel.
Contact:
Dan Spalding
Email
(408) 960-9297
DB Networks is a registered trademark of DB Networks, Inc. in the United States and other countries. All other company and product names are either trademarks or registered trademarks of their respective companies.
SOURCE DB Networks
Share this article