Webroot Inc., the Broomfield, Colo.-based security vendor with specializations in end point protection and threat intelligence, has acquired the assets of CyberFlow Analytics, a developer of cloud-based network behavioral analytics software.
Headquartered in San Diego and founded three years ago, CyberFlow Analytics makes a solution named FlowScape that utilizes machine learning technology to search network traffic flows in real time for anomalies that could signal security risks.
Adding FlowScape to its existing portfolio of products extends Webroot’s current machine learning threat intelligence capabilities to the network layer and positions it to identify and address today’s increasingly sophisticated threats more rapidly at a time when rising deployment of Internet of Things solutions is expanding the scale, importance, and vulnerability of network communications.
“Today, one of the only things attackers can’t find out about your network is what’s normal. This solution can identify and alert on potentially malicious activity that deviates from normal traffic in milliseconds,” said Webroot CEO Dick Williams in a press statement. “Our machine learning platform powers the most cutting-edge endpoint protection, threat intelligence services, and now network analytics, enabling us to stay ahead of evolving threats for our customers.”
Equipped to study both IPv4 and IPv6 network traffic, FlowScape comes in two editions, including one targeted at small to medium-sized network deployments with fewer than 10,000 IP addresses. The system is designed for use in a software-as-a-service model, but can also be deployed on traditional local infrastructure, in a VMware-based private cloud, or in the Amazon Web Services public cloud. Users can view FlowScape alerts via FlowScape’s own web-based console or an integrated security information and event management solution.
“By using unsupervised machine learning for real-time detection of anomalous high risk activity, CyberFlow Analytics has solved a problem that previously required significant manpower and resources,” said CyberFlow Analytics co-founder Tom Caldwell in today’s press release. “We are very excited to join Webroot and enhance both FlowScape and Webroot next-generation security solutions.”
FlowScape is available for integration and evaluation through an initial pilot program immediately. Webroot plans to add full availability and further product integrations in 2017.
The acquisition disclosed today comes some four months after the release of Webroot’s BrightCloud Threat Intelligence for IoT Gateways solution, which lets Internet of Things gateway partners and developers add real-time protection against malicious threats, unauthorized network access, and Denial of Service attacks.