Arbor Security Engineering & Response Team (ASERT)
http://www.pravail.com Arbor Networks has leveraged its pervasive product deployments in service provider networks to develop ATLAS, a unique global threat monitoring network. Nearly three hundred service provider customers have agreed to share anonymous traffic data with Arbor, totaling 80Gbps. This massive data set is further enhanced by a global honeypot network of sensors in dark IP address space as well as strategic partnerships, such as the Red Sky Alliance. Together, this gives Arbor unprecedented visibility into the global threat landscape. ASERT: World-Class Security Research Data in and of itself is meaningless. What makes this data so powerful for customers is the work of Arbor's Security Engineering & Response Team (ASERT). ASERT is one of the largest dedicated research organizations in the security industry, featuring twenty five security analysts who bring a diverse set of expertise, with backgrounds ranging from Fortune 25 Computer Emergency Response Teams (CERTs) to law enforcement (F.B.I.) to threat mitigation vendors and well-known malware researchers. ASERT has both visibility and remediation capabilities to turn this unique data set into actionable intelligence for customers, complete with security context required to stop specific threats, and continuously enhance their security posture over time. ASERT shares this operational intelligence with hundreds of international CERTs and with thousands of network operators around the world. ATLAS® Intelligence Feed On a daily basis, ASERT gathers approximately 5,000 malware samples from ATLAS and other sources. The malware samples are then run through an automated threat analysis system, where they are classified. Unique attacks are stored in a database of over 2.5 million such analyses. When a new botnet or application-layer attack is detected, an attack signature is created, distributed and installed in Arbor's Pravail products via the ATLAS Intelligence Feed.