Expert Network Analysis
Cognitive Analyst services can be readily deployed by our experts to perform near real-time traffic monitorinig and the analysis of threats against a corporate network. These services are oriented towards organizations with a high standard in security protection, as well as clients that require advanced layers of security to protect themselves against fraud, intellectual property theft, sabotage, or terrorism. Cognitive Analyst is also ideal for clients which may not have the necessary internal resources for continuous and in-depth network analysis.
The deployment of the Cognitive Analyst as a service offers the following features & benefits:
- Reveal the presence and activities of botnets, trojans and other malware infections, thus allowing the client to quickly take appropriate action to protect themselves
- Verify the effectiveness of firewalls, intrusion detection and prevention (IDS & IPS) devices, and other perimeter defenses, thus ensuring that the investments made in their security infrastructure is maximised
- Enhance the effectiveness of Security Information and Event Management Tools (SIEM), thus minimizing the output of false positives
- Enhance a Managed Security Services (MSS) offering, for the monitoring and management of devices, by providing added security intelligence
- Evaluate the SLA (Service Level Agreement) compliance when the network security or management is outsourced
Forensic Analysis
To address the need to understand the network traffic during APT ("Advanced Persistent Threats"), network compromises, or other modern attack vectors, Cognitive offers professional traffic analysis and forensic analysis. Through the use of Cognitive Analyst, and other advanced security tools, our analysts can efficiently triage pending and existing attacks, in real-time. The use of NetFlow data in the forensics investigation allows investigators to:
- Quickly determine the extent of the threat, as well as the orgin and often even the intent of an attack
- Compartmentalize the network and maintain business continuity in the affected departments, or remote branch locations
- Prioritize the investigation of individual hosts, and follow the command & control actions of the attacker. Thus allowing remedial actions to protect the corporate assets and employees
Strategic Security Consulting
Cognitive Security provides a range of expert security consulting capabilities including:
- An independent assessment of client networks to cover corporate policy or regulatory requirements
- Network architecture design, as it pertains to security infrastruture and protection against advanced and persistent threats.
Our strategic consulting capabilities also serve to complement those of our international partners.
Software Development and Research
Cognitive Security's expertise stems from an established team of best-in-class Artificial Intelligence researchers, and software developers. Similar to the rapid growth and maturity of the Cognitive Analyst series of products and services, our team of developers have the expertise to integate into third party solutions, and enhancing security products that service the security ecosystem. The structure of our development team allows for this unrivalled flexibility in software customisation in Network Behaviour Analysis and Anomaly detection, to meet the specific needs of clients and OEM partnerships.
