LightCyber upgrades to speed the shutdown of malicious activity

POSTED on May 7, 2016

May 7, 2015 10:47 AM PT  Tim Greene

LightCyber is upgrading its endpoint detection and remediation platform so when it discovers bad behavior on the network it can also identify the machine and exact process that’s causing it, then shut the malware down.

LightCyber Magna 3.0 makes an important step in the evolution of endpoint security in that network behavior can by synched with endpoint telemetry to definitively say what’s behind the problem, says Lawrence Pingree, an analyst with Gartner. The big upside is that it saves time nailing down the cause and shutting down the exploit, which minimizes the damage, he says.

The company calls this new technology Network-to-Process Association (N2PA). Before, when the platform found bad behavior, security pros had to track down the cause of it manually, which isn’t 100% effective. “A human may not connect the dots,” Pingree says.

In addition to N2PA, LightCyber Magna’s upgrade includes Malicious File Termination, a feature that enlists third-party platforms via APIs to shut down malicious files.

When Magna detects malicious behavior it traces back to the host and queries it with a dissolvable agent to check logs and find out what process generated it. It can quarantine by revoking credentials or through partner platforms including Check Point Software and Palo Alto Networks

The new version of the platform is available this summer.