TOPSPIN Defeating attacks in action.
Doron Kolton, CEO
E-mail: doron@topspinsec.com
Tel: +972-52-882-4865
Company and Solution at a Glance
TopSpin’s DECOYnet employs a powerful new approach for identifying advanced attackers that have bypassed current security solutions. With TopSpin's product, an organization will be able to block the attacker early in the attack process and avoid exfiltration of data from the organization.
Rather than trying to hit difficult, well-hidden or moving targets, which is the approach adopted by many security products, DECOYnet lures attackers to an automatically created, “parallel network” that looks and feels exactly like the corporate network. However, it is in fact a trap to catch the perpetrators and their attempts to exfiltrate data and compromise the organization. DECOYnet also intercepts command-and-control traffic the attackers are using to manipulate or steal valuable assets.
Customer Challenges
Current security solutions are easily bypassed by advanced attackers that are using different evasion techniques to deal with solutions based on signatures, sandboxing technologies and anomaly detection. Current technologies provide customers with a limited view of the attackers' activities in their networks and require significant overhead for configuration and for analysis of the many false positive events. The outcome is that on average, attackers are operating for 6 months before they are exposed.
Offering
-
TopSpin DECOYnet identifies the activities of the attacks during their different phases, using dedicated autonomous components, revealing the attacks at an early stage and provides a complete understanding of the attackers' activities.
-
The solution is composed of a balanced network of intelligent honeypots, internal to the organization that is set up automatically in the organization's environments, luring the attackers to step into it, and sophisticated behavioral analysis of the organization's Internet traffic.
-
A unique feature of the product is correlation of events from its different components into one actionable incident, rather than triggering single events, something that virtually eliminates false alerts
Unique Differentiators
-
The network of internal honeypots triggers only true positive incidents and, combined with the behavioral analysis of the Internet traffic, gives a complete understanding of the entire attackers' activities
-
Extremely high Threat Capture Rate using technology that is completely different to other approaches
-
Quick and easy installation with minimal overhead for incidents analysis
-
Additional layer of defense that confirms your normal approach and finds attacks that current technologies don’t find
-
Captures Malware in a safe environment and observes its behavior and damage parameters. Lures intruders away from the organization's real assets
-
Plugs right into existing infrastructure in listen-only mode - cannot cause any issues or additional exposure
Business Benefits for Clients
-
Identifies compromised endpoints before data is stolen
-
Protect organizational data
-
Detect insider threats
-
Provide step-by-step forensic information
-
Reduces the workload on the security team
References, Strategic Partners, Current Presence outside Israel
TopSpin’s DECOYnet is installed in an Israeli financial institution, technology and infrastructure companies.
2010 - present
2010 - present