AT&T introduces AT&T Threat Intellect providing security services and a foundation to businesses facing threats.
Threat Intellect claims to offer visibility into the data patterns and threat activity on the network aiding security customization based requirements.
Implementing threat signature data streams, analytics and intelligence makes the service work against known and unknown threats, alongside adaptation of latest global security issues, said the company.
“AT&T secures more connections than any communications company in North America,” said Steve McGaw, chief marketing officer, AT&T Business Solutions. “No carrier experiences the depth and scale of security threats we see on a daily basis– more than 30 billion vulnerability scans and 40 million spam messages are detected on our IP network,” he added.
Threat Intellect allows automatic deployment of security protections. This automation willbenhance speed of security protections by 95 percent, improving threat detection and resolution.
Threat Intellect will enable processing of up to 5 billion security events, a complete day activity for all security customers of the company, in a 10 minute duration, says the release.
This transformation in security is similar to that of computer search tools.
“In the past, you had to know exactly where a specific file was stored to access it. Now, you only need a key word to find that file,” McGaw said.
AT&T can search across the data crossing its network from mobile devices, applications, data centers, or through its security services to identify and address potential threats for customers on the network.
The analytics of the same can identify abnormal and malicious activity based on data patterns. Also an activity from an unauthorized user, or an atypical location can be recognised.
In case of abnormal activity, it will be flagged for review.
If it is tagged as a malicious event, the attack will be halted in order to keep operations running. This will aid protection of other customers,
too.
The data intelligence claims to validate threat information based on a massive database of threat signatures by monitoring 117.4 petabytes of data on an average business day, to identify threat activity.
It can also detect and respond to new zero-day attacks and threats, which is achieved by adding dynamic search capabilities on top of the platform providing a scalable solution, with unparalleled processing capability, to deliver security intelligence at better speeds.
“AT&T Threat Intellect has a similar capability. It is the power behind every AT&T firewall, network security protection and every other security capability we have integrated in our network and services,” further adds McGaw.
Data across all mobile devices, computer networks, applications, and data sets are under vigil and offer a pool of threats for analyzing. This helps to protect the network and update security policies for securing connections against emerging threats.
When a new abnormal activity is detected, it will be added to the malicious entity database and hence the platform will detect the abnormality in future threat scans also.
The security analytics platform automatically updates the threat database across the network, along with the global threat activity monitoring with 5 billion vulnerability scans and 200,000 malware events targeted specifically per day, giving threat data.
Businesses will be able to experience the first of many benefits of Threat Intellect via AT&T Threat Manager Log Analysis, designed such that user familiar to a web browser can use it.
The company plans to move to a software defined network and hence the security functions will change to virtual solutions, aiding set up and modification of services in near real-timeby customers.
The company’s first SDN-based service named Network on Demand with more than 200 customer base, starting in 2014 now offers services like the NetBond allowing transition to SDN and NFV technology.
