Cloud

1/24/2018
04:00 PM
Connect Directly
Twitter
LinkedIn
Google+
RSS
E-Mail
100%
0%

Meet Chronicle: Alphabet's New Cybersecurity Business

Google parent company Alphabet introduces Chronicle, which will combine a security analytics platform and VirusTotal.

Alphabet, parent company of Google, Nest, and other ventures, today announced a new independent business focused on cybersecurity. Chronicle is the latest project to graduate from X, the internal research lab where Alphabet develops new technologies.

Chronicle was built to help security and IT professionals detect and prevent cyberattacks before they cause damage. The businesses will be split in two parts: an intelligence and analytics platform to handle security-related data, and VirusTotal, which Google acquired in 2012.

Part of the intent behind Chronicle is to help businesses deal with an increase of data amid the security talent shortage, writes Chronicle cofounder and CEO Stephen Gillett in a blog post.

"At large companies, it's not uncommon for IT systems to generate tens of thousands of security alerts a day," he explains. "Security teams can usually filter these down to about a few thousand they think are worth investigating — but in a day's work, they're lucky if they can review a few hundred of them."

The result is thousands of potential clues about hacking are either overlooked or thrown away. Further, many businesses don't have the budget to store all relevant data amid increasing storage costs, impeding security investigations.

Chronicle is building its analytics platform, which is currently undergoing testing at Fortune 500 companies, to detect and analyze security signals that are otherwise too hard and expensive to find. The platform will leverage machine learning to dig through enterprise data, detect threats, and look for patterns to find areas of likely vulnerability.

VirusTotal, the second component, is a malware intelligence service that analyzes suspicious files and URLs to detect viruses, Trojans, worms, and other forms of malware. Alphabet integrated VirusTotal into X in 2015 and reports it will continue to operate as it has been.

Chronicle was officially founded as an X project in February 2016 and spent two years in development. Alphabet has recruited enterprise security experts from across the industry to work on Chronicle. In addition to Gillett, who was formerly COO at Symantec, the team includes Norton antivirus co-founder Carey Nachenberg and Google engineering vet Will Robinson.

The launch of Chronicle outside the scope of typical projects at X, also known as "the moonshot factory." Previously explored ideas include smart contact lenses, Internet-beaming balloons, and self-driving cars. Very few have advanced to the graduation phase of Alphabet's projects.

Related Content:

Kelly Sheridan is Associate Editor at Dark Reading. She started her career in business tech journalism at Insurance & Technology and most recently reported for InformationWeek, where she covered Microsoft and business IT. Sheridan earned her BA at Villanova University. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
aumickmanuela
50%
50%
aumickmanuela,
User Rank: Apprentice
2/7/2018 | 10:03:25 AM
Add an example
wow, i haven't met this before...maybe you can add any articles or other tutorials where I can get more information??? I will be very pleased) 
Facebook Aims to Make Security More Social
Kelly Sheridan, Associate Editor, Dark Reading,  2/20/2018
SEC: Companies Must Disclose More Info on Cybersecurity Attacks & Risks
Kelly Jackson Higgins, Executive Editor at Dark Reading,  2/22/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
How to Cope with the IT Security Skills Shortage
Most enterprises don't have all the in-house skills they need to meet the rising threat from online attackers. Here are some tips on ways to beat the shortage.
Flash Poll
[Strategic Security Report] Navigating the Threat Intelligence Maze
[Strategic Security Report] Navigating the Threat Intelligence Maze
Most enterprises are using threat intel services, but many are still figuring out how to use the data they're collecting. In this Dark Reading survey we give you a look at what they're doing today - and where they hope to go.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.