Niara

Niara Analyzer is a big data, analytics platform that builds constantly updating and historically complete Entity360 risk profiles that are context-rich security-dossiers for users, systems and IP addresses.

Niara uniquely combines identity data with both IT logs and alerts (e.g., firewall, web proxy, VPN, endpoint, DLP, AD, DNS, DHCP, badge logs etc.) and network sources (packets, flows, etc.) to detect attacks that have evaded real time systems and accelerate incident response.Niara’s behavioral analytics platform automates the detection of attacks that have bypassed an organization’s perimeter defenses and dramatically reduces the time and skill needed to investigate and respond to security events.

The solution applies machine learning algorithms to data from the network and security infrastructure to detect compromised users, entities, and malicious insiders, reduce the time for incident investigation and response, and speed threat hunting efforts by focusing security teams on the threats that matter. The software makes use of identity data and network sources with both IT logs and alerts to detect threats. The software builds risk profiles. These risk profiles are built using machine learning techniques.

Machine learning techniques could be supervised, semi supervised and unsupervised. These techniques identify deviation in behavior or anomaly behavior presenting a risk. The software is easy to install and use. The software has the capability to perform its operations without configuration, signatures and tunings.

The software is easy to use and produce instant results. Entity 360 risk profiles present various types of risks and malicious activities. This features assign score to risk. High score means highly damaging risk and low score means less damaging risk. Two types of scores are assigned. One is machine learning driven entity risk score. The second one is normalized score.

Machine driven scores assign score to risk by taking into account various factors. These factors are spread, time proximity of incident attack and order. Normalized scores are assigned keeping in view the prioritization of efforts of analysts. The software performs multi-dimensional analytics to detect risks. The software is capable of carrying out full investigation. The software investigates data across various sources to detect threats. Threats are identifies before they cause huge damage. The company also provides NIARA packet processor to carry out in depth analysis and inspection. The software makes use of powerful analysis techniques to locate risks and stop them before destruction is caused.