Public Relations

Asgent Announces “SecureDock MSS”, a New Service to Proactively Detect Malware Infected Endpoints with High Risk, Using Correlative Analysis

March 1^st, 2016
Asgent, Inc.
（JASDAQ: 4288）

Asgent, Inc. (President & CEO: Takahiro Sugimoto, located in Chuo-ku, Tokyo, JASDAQ: 4288), a pioneer in network security and operations management solutions, announces the start of sales for “SecurityPlusR SecureDock MSS” (SecureDock MSS), a new service to use correlative analysis to proactively detect malware infected endpoints with high business risk.

Targeted attacks are a form of cyber-attack that targets particular corporations or organizations and, using social engineering, attempts to infiltrate malware into the network through various methods such as e-mail, SNS or the Internet. Therefore, it is difficult to completely prevent these targeted attacks just with firewalls or IPS devices etc., and so it is vital to have combined countermeasures that handle both internal and external attack vectors. In particular with regards to internal countermeasures, it is important to be able to detect anomalies early on and remove the threat before real damage is caused.

However, in order to determine the threat level or analyze risk based on malware behavior requires many years of experience and knowhow, and both training and retaining such personnel is a major issue for organizations.

DAMBALLA Failsafe, sold by Asgent, is focused on detecting with certainty threats such as malware before actual damage occurs. Taking over from the security engineer, it determines which endpoints are communicating with external sources, performs correlative analysis, and prioritizes infected endpoints with high business risk for early action.

DAMBALLA’s detection algorithm is constantly analyzing big data that constitutes approximately 30% of global internet traffic, and is continually updated, leading to low over-detection and misdetection, which is the reason why many global companies including financial institutions have implemented Failsafe as SOC and PSOC tool.

Instead of each organization hiring multiple security specialists to set up and operate their own security division, “SecureDock MSS” enables such organizations to deploy a DAMBALLA Sensor (rental only) in the network, and utilize Asgent’s Security Operations Center (SOC) to monitor and perform correlative analysis on malware infections 24/7 in order to determine infected endpoints with high business risk. In case such an endpoint is detected, the first alert is sent to the administrator. Then following the correlative analysis and determination of which endpoint has high business risk, another alert is sent.

By using this service, it becomes possible for even organizations without veteran security specialists to deal with infected endpoints with high business risk and prevent leaks of critical information.

■ Start of Sales:

March 1^st, 2016

■ Sales Price:

Open Price （Reference price: 50 nodes @ \175,000（tax excl.））

■ Features:

・Early detection of malware infection endpoints
It is possible to reduce damage to a minimum through early malware detection.

・Determination of endpoints with high business risk
Correlative analysis determines endpoints with high business risk.

・Granular alerts
Multiple detection engines are used to detect infected endpoints, meaning that highly granular alerts can be given with low number of false alarms.

・Reduced operational burden
By deploying a DAMBALLA Failsafe Sensor in the network, Asgent’s security analysts can monitor and perform analysis, reducing the burden on the customers’ security administrator or team.

・Easily deployed
Monitoring is performed by sampling connecting to a mirror port; changes in network configuration are unnecessary.

・Providing 24/7 monitoring at a reasonable cost
A monthly purchased cloud service makes it easy to implement a system to detect malware infected machines early and in a short period of time.