LiveAction releases new network detection and response platform

Network visibility company LiveAction Inc. today released a new network detection and response platform designed to give SecOps teams what it says is unprecedented visibility into encrypted traffic, threats and network anomalies.

Called ThreatEye NV, the NDR platform combines next-generation data collection, advanced behavior analysis and streaming machine learning. The service uses deep packet dynamics that eliminate the need for payload inspection.

The platform analyzes more than 150 packet traits and behaviors across multivendor, multidomain and multicloud network environments. The company says that helps accelerate real-time threat detection, eliminate encryption blindness, validate encryption compliance and allow teams to secure the entire network better. In addition, the service coordinates responses with other security tools such as security information and event management, or SIEM, and security orchestration, automation and response, known as SOAR.

ThreatEye NV was designed to help organizations and their SecOps teams improve threat detection and prevent adversaries from executing successful disruptive and damaging attacks. Detection capabilities include advanced behavior anomaly detection, encrypted metadata threat detections, plaintext metadata threat detections,  artificial intelligence- and machine learning-driven detections, encryption inventory, domain name system detections and active exploit detections.

The platform also offers continuous packet capture with single-click pivot-to-PCAP through a probe integration with LiveAction LiveWire, which extends packet-to-flow visibility of virtual infrastructure. LiveAction claims that the combination of threat detection and encrypted traffic analysis with packet capture delivers unmatched visibility for SecOps teams looking to improve their security strategy and response capabilities.

“Having comprehensive visibility into encrypted traffic and being able to automate advanced analysis of that data in real-time is critical to protecting against today’s advanced threats,” Thomas Pore, director of security products at LiveAction, said in a statement. “Traditional tools rely on deep packet inspection or rules-based monitoring, which impacts performance and is proven to no longer be sufficient.”

Pore added that the service’s new DPD technology that provides high-fidelity flow records when combined with advanced data collection and machine learning models mean that “customers get the industry’s most powerful NDR solution.”

Image: LiveAction