New Cyber-Threat Prevention Tech

New Cyber-Threat Prevention Tech

This post is also available in: heעברית (Hebrew)

23564189_s featureFireEye revealed the MVX cyber security technology. According to the company the new technology will significantly improve intelligence gathering and security platforms for organizations; this by incorporating endpoint protection and managed security services from recently acquired Mandiant. Attendees at the 2014 RSA Conference in San Francisco will be able to view demonstrations of the new platform at the FireEye booth on February 24–27, 2014. The new products and services are expected to be generally available during the first half of 2014.

The new intrusion prevention system will address the shortcoming of traditional IPS solutions by applying the FireEye Multi-Vector Virtual Execution (MVX) technology to validate attacks and minimize the time and resources security teams spend investigating false alerts. Users get actionable insight from validated alerts so they can focus on alerts that present the greatest risk and accelerate incident response. By adding intrusion prevention capabilities to the FireEye Security Platform, organizations can get a more comprehensive view of an advanced attack.

IHLS – Israel Homeland Security

Current IPS products are deficient for two reasons–they are signature-based and therefore unable to detect modern threats, and they create excessive alerts, requiring customers to devote additional resources to manage their system. FireEye MVX-IPS takes a new approach to IPS by extending the FireEye Multi-Vector Virtual Execution (MVX) technology to a new layer in the security stack, eliminating both problems created by traditional IPS solutions. The unique architecture of FireEye MVX-IPS allows validation of attacks identified by IPS, thereby reducing alerts and allowing security teams to focus on genuine threats. This approach consolidates threat prevention for known and unknown threats, increases the efficacy of defenses against known threats leveraging multi-protocol signatures, and optimizes time and resource investments needed to identify, validate, and resolve these threats.