The CounterTack Scout product offers a unique platform for next-generation honeynet deployments as well as advanced malware analysis. A self-contained appliance with a multi-blade virtual machine (VM) architecture, CT Scout supports a range of honeynet configurations, from single honeypots in sensitive network areas to networks of honeynet systems deployed throughout enterprise networks to improve detection coverage and perceptual consistency.
"It's fair to say that many of us want to see what the bad guys are up to, how they're coming after us, and what they're coming for, but we certainly don't want to let them into our production systems to watch them work," said Christian Seifert, CEO of The Honeynet Project. "If your job is to protect your assets, there's no better way to keep abreast of what the bad guys are up to than to watch them work, and honeynets give us a way to do that in a lower risk setting."
CounterTack's CT Scout appliance also provides a safe way to detonate malware for detailed analysis. When configured as a closed protected environment, the CT Scout VM architecture supports configurations of exact Windows and Linux production-system replicas, including network connectivity. By leveraging CounterTack's patented Deep System Inspection technology, CT Scout provides unique visibility into previously undetectable malware behaviors.
"You can't protect against what you can't see," said Sean Bodmer, Chief Researcher in the CounterTack Cyber Counterintelligence Research Lab. "The kind of intelligence we're gaining with Deep System Inspection on CT Scout is what enabled us to figure out how to detect Red October and other advanced threats."
CT Scout V3.2 will be available for sale in March 2013 and is being demonstrated at the RSA Conference this week at CounterTack's booth #2533.
CounterTack, the industry's first and only in-progress attack intelligence and response solution provider, was born out of the critical need to develop new security approaches for enterprise and government organizations. The detection gap persists despite massive investments and continuing advancements in security technologies, with cyber attacker innovations outpacing cyber defenses. CounterTack is leading the way on new approaches for deeper security intelligence monitoring and faster attack response.