Russian Flag
BalaBit announces general availability of Blindspotter; advanced monitoring to identify suspicious user activity

BalaBit announces general availability of Blindspotter; advanced monitoring to identify suspicious user activity
31.08.2015

BalaBit, an IT security innovator specialising in advanced user monitoring technologies, today announced that its next-generation IT security tool, Blindspotter, is now generally available. Blindspotter is a real-time, user behaviour analytics (UBA) tool that analyses user activities and identifies suspicious events occurring throughout IT systems. It is designed to help organisations mitigate the impact of advanced persistent threats (APTs) or identify malicious internal activity and to speed up the investigation process of any suspicious activity.

Blindspotter tracks and visualises user activity in real-time to provide organisations with a better understanding of what is really happening on the network. The solution works by collecting and analysing user-related events and user session activity in real-time or near real-time. It then compares every action to the corresponding baseline of users and their peers to spot anomalies in their behaviour – such as an administrator logging in outside of their normal hours. Blindspotter is even capable of detecting abnormality on the level of issued commands. This means that, if a system administrator uses a command that is different from the generally used command set, Blindspotter will alert the security team. Once this has been detected, Blindspotter can automatically react to minimise the impact of any threat.

It is designed to meet today’s key security challenges and alert organisations to key threats, for example:

  • Detection of hijacked user accounts

    The activities of an attacker who has compromised a legitimate account will differ significantly from a normal user’s activity; external attackers will typically try to map the IT system by accessing various systems to probe for available services or download a large amount of data, which would be of value to them. Blindspotter is able to detect and alert security analysts to deviations of this kind.

  • Detection of misuse of privileges

    Blindspotter can help to detect if a user with high privilege rights has attempted to steal company data or to copy or modify sensitive company data that is not required for his job. In this way the data breach can be prevented.

  • Detection of automated system account misuse

    Automated system accounts are typically created by administrators to repeat regular tasks such as backing up the database or restarting certain services overnight. Automated system accounts increase the efficiency of administrators’ jobs, however, to make their job easier, in many cases they take a risk by using their own credentials. This is a security risk; in the event that the script is hacked, the attacker not only has the account details of the system administrator but also gains access to all the services that the administrator has. Using Blindspotter, it is possible to distinguish between accounts used by automated jobs and humans.

  • Screen Content Analysis

    Used in conjunction with Shell Control Box – BalaBit’s privileged activity monitoring appliance – Blindspotter can also analyse screen content, including issued commands and applied software or any textual data that appears on the screen. This enables the detection of any anomalies, which are the obvious signs of an APT-attack or a serious misuse of privilege.

 

| Share

     
 
Russian Market: Don-t Buy The Restrictions StoryInformation security is one of the most popular ICT topics in Russia. Local companies have an increasing demand for information security solutions due to increasing ñyber attacks, both in number and sophistication.

More

Cyber threats in healthcare The number of cyber attacks against organizations in the healthcare industry is increasing and this trend is expected to continue in 2017. According to a report released by the security firm TrapX, criminal organizations are more focused on stealing data to spread ransomware.

More

Financial Security Day & NFC Technologies Financial Security Day at InfoSecurity Russia will bring together thousands of information security Departments Heads from banks, retail and telecom - leading industries using NFC technologies.

More

Firewalls review According to IDC, in the fourth quarter of 2016 the global market for security devices shown quantitative and qualitative growth. The main factor for that is the growing demand for UTM systems. Over the last five years their sales have almost tripled, and in 2016 reached $ 5.6 billion. Sales of firewalls and control systems have also increased for 10.4% and 0.8%.

More

Opinion: Russian integrator & Distributor SYSSOFT Information Security Magazine by InfoSecurity Russia met with Yakov Grodzensky, Head of Information Security Products Department at "Syssoft", one of the leading system integrators and distributors on the Russian market. Yakov spoke on some trends & insights of the Russian information security market and shed some light on the problem of becoming key player of the market in fast changing conditions.

More

Russia Anti-DDoS Services Market  

More

Interview: Check Point Software Technologies Russia & CIS Information Security Magazine by InfoSecurity Russia continues learning international vendors- success stories on Russian information security market and sits down with Vasily Diagilev, Chief Representative of Check Point Software Technologies in Russia and the CIS countries for an interview.

More

Seasons Greetings from InfoSecurity Russia! Dear Colleagues,

More

Information Security in the Finance Sector According to official statistics from the Russian Central Bank, last year the number of cyber-attacks in the Russian banking sphere increased by 30 percent, compared to 2014, with up to 64,000 cases reported, however, according to the Russian Ministry of Internal Affairs, the real figure is about ten times higher than the figures provided by the Central Bank.

More

Retail Cyber Security For the last two years Russian credit and financial sector loss due to fraud increased on average by 26.8%, in the telecommunications sector - by 6,8%, in retail - 16 % depending on the segment.

More