The Kaspersky's Threat Intelligence Portal now allows all experts to access it data that the company has collected security on the threats to cyberspace. The portal helps businesses respond to a threat in a timely manner and investigate any breach. Recently, Kaspersky updated its portal aiming to create a safer world. Now, the company allows more users to use them services such as breach incident analysts and Security Operation Centers (SOC) analysts working with Managed Security Service Providers (MSSPs).
Access to information related to online threats can help them businesses to accelerate it a suspicious activity analysis process, making the work of IT departments more efficient. However, according to a Kaspersky survey, only 36% of businesses use these services. About 31% of respondents think they will do so next year.
One of the main reasons why businesses not using these services are the high cost. For this reason, Kaspersky has decided to allow more users to use Threat Intelligence Portal and not just corporate clients, as it did in the past. The service offers many information for modern and past threats that the company has collected.
Gaining access to this information helps analysts understand threats early and prioritize them accordingly. risk. SOC analysts will now be able to check on the Kaspersky Threat Intelligence Portal for anything suspicious they find out (e.g. a file, file hash, IP address, or URL).
The Portal will show analysts if it's really something malicious, and how fast it can spread this threat. It also provides information on the threat, such as its current or previous names, details of the organizations it has affected, date of first and last occurrence, and much more.
Each file that is inserted into the portal is analyzed separately advanced technological threat detection tools, in order to observe his behavior. The Kaspersky Cloud Sandbox is one of them tools and detects more than 346.000 new malware every day.
In addition, the portal is constantly enriched with new threat information, coming from a variety of trusted sources (eg Kaspersky Security Network, surveys, etc.). This information is carefully reviewed before entering the portal. Now, all analysts will have this information.
A Kaspersky spokesman said business IT security teams face daily risks. For this reason, they need a framework that shows them how dangerous the suspected 'object' is or where it comes from. "Therefore, access to new and up - to - date information is essential for protection companies from the threats of the Internet. To meet our mission of building a safer world, we are pleased to announce that Kaspersky Threat Intelligence Portal will provide the necessary data to a wide range of companies, ”he said.
Users will be able to upload to the Threat Intelligence Portal any file they wish to check. The maximum number per day is 100 data. Users with full commercial license will have access and other data, such as detailed reports from Threat Lookup and Cloubox Sandbox, APT Intelligence and Financial Threat Intelligence Reporting and Sandbox for URLs.
The company is constantly working to develop and enhance the Kaspersky Threat Intelligence Portal with more features and capabilities.
Kaspersky Threat Intelligence Portal is now available to all security analysts at website.
Greek
Chinese (Simplified)
English
Greek
Russian