Spirent Communications announced the availability of the first solution using data breach emulation technology to provide holistic and hyper-realistic security testing of networks and devices for awareness of data breach and intruder activity. This new solution, CyberFlood Data Breach Assessment, is a component of Spirent’s CyberFlood product line, extending it into production environments for continuous testing of live networks and devices.
As an holistic automated solution within the live network, CyberFlood Data Breach Assessment provides active monitoring and ongoing evaluations such as Purple Team assessments. Unlike testing solutions that simulate attacks, CyberFlood Data Breach Assessment uses actual attack components, true hacker activity and malware executables to assess an organization’s vulnerability to cybercrime. A study from the Center for Strategic and International Studies estimates that cybercrime costs the global economy $600 billion.
“With the ever-increasing stakes and mounting costs and penalties for a data breach, organizations must continually assess their abilities to detect an active attacker,” said David DeSanto, director, products and threat research, Spirent Communications. “Unlike existing solutions, which do not use the real methods and techniques used by real attackers, CyberFlood Data Breach Assessment uses unique data breach emulation technology to provide hyper-realistic scenarios and assessments using the actual methodologies intruders follow. This gives organizations the ability to assess their production defenses and fortify weaknesses before they are compromised by the work of an attacker.”
CyberFlood Data Breach Assessment utilizes real traffic and activities that are indistinguishable from live efforts by cybercriminals and other malicious actors, rather than relying on replayed traffic and network activities that seem real. Security infrastructures often discount simulated, unreal artifacts, treating them as phony, non-malicious traffic, and simply pass them through or block them as invalid network streams. Such traffic cannot adequately test an organization’s defenses against cybercrime.
