Global threat intelligence for service providers and enterprises

Information overload is a real danger for today's information security managers. To maintain business continuity, they must cut through a proliferation of security data – then convert it into actionable intelligence. The process is time consuming, resource intensive and complex.

Arbor Networks' Active Threat Level Analysis System (ATLAS) is the world's first globally scoped threat analysis network. With ATLAS, enterprises and ISPs can rely on Arbor to deliver comprehensive threat intelligence. For the first time, customers can gain contextualized intelligence into threat activity from a global and local perspective.

Background

Arbor Networks protects over 70 percent of the world's service provider networks with Arbor Peakflow SP, the leading anomaly detection platform. As a result, Arbor has visibility into more than 80 percent of global Internet traffic. By leveraging this visibility, the Arbor Security Engineering & Response Team (ASERT) analyzes and tracks emerging large-scale threats.

ATLAS takes threat analysis to the next level. Working with ISPs, Arbor is creating the world's largest distributed darknet sensor network. This network enables ASERT to develop a globally scoped view of malicious traffic traversing the backbone networks that form the Internet's core. With this unique vantage point, Arbor is better positioned to deliver intelligence about malware, exploits, phishing and botnets than any other entity today.

ATLAS Portal

The ATLAS portal delivers a sub-set of intelligence derived from the ATLAS sensor network; this includes host/port scanning activity, zero-day exploits/worm propagation, security events, vulnerability disclosures, and dynamic botnet/phishing infrastructures. The portal also includes:

• Global Threat Map: Real-time visibility into globally propagating threats
• Threat Briefs: Summaries for the most significant security events within the past 24 hours.
• Top Threat Sources: A view of originating attack activity, based on country, ASN or host
• Threat Index: A summary of malicious activity traversing the Internet on that date
• Top Internet Attacks: A 24-hour snapshot of the major exploits launching attacks globally.
• Vulnerability Risk Index: The most dangerous vulnerabilities being exploited on the Internet today