Press Release

Narus Announces NarusInsight™ Secure Suite 7

Major Upgrade of Flagship Security Suite Provides Enhanced Mitigation, Cutting-Edge Traffic Intelligence and Security Management Capabilities for Large Carriers

 

MOUNTAIN VIEW, Calif., November 27, 2007—Narus, Inc. today announced version 7 of the award-winning NarusInsight™ Secure Suite (NSS), the leading carrier-class anomaly detection and traffic intelligence system for the world’s largest IP networks. NSS 7 dramatically improves the ability of carrier service providers to quickly and accurately identify emerging network attacks, while reducing the amount of time and resources spent analyzing alerts and security events. In addition, this new version offers advanced mitigation options including seamless integration with Cisco Guard™ DDoS mitigation appliances, allowing carriers to more granularly manage security rules, operations and provisioning.
“Service providers who implement enterprise security technologies that have been retrofitted to try and solve carrier-class security will fail,” said Brian Partridge, program manager at Yankee Group. “The unique security challenges carriers face, particularly distributed denial of services (DDoS) attacks, require a new set of tools that can detect and mitigate threats at tremendous speed and scale.”
In addition to Cisco Guard integration, NSS 7 offers customers a number of additional features designed to reduce network resource and operator costs, improve service stability and reliability, and better address today’s distributed, large-scale attacks. These features include:

A fully integrated portal that displays relationships between traffic and security information — NSS 7 offers tremendous operational and network resource efficiencies by introducing a portal that includes a revolutionary method for putting in context the relationships among petabytes of data such as security, traffic and network event information presented to the operator, allowing for faster pinpointing of the root cause of an attack. These efficiencies include the clustering of alerts into Meta-events; improved correlation of Border Gateway Protocol (BGP) Events to reduce alerts by tenfold; and Converged Operational Views across network traffic, routing, topology, service and application behavior.

• Advanced mitigation capabilities — NSS 7 tightly integrates with Cisco Guard to quickly and accurately detect the presence of malicious traffic and mitigate it in real time. NSS 7 offers management of all Guards network-wide as a single infrastructure allowing customers to maximize their investment in Guard technology, while minimizing the operating expense of managing threat mitigation measures. Using NSS, service provider operators can manage mitigation down to a single Guard device, giving them unprecedented control over threat mitigation.

• Topology and routing awareness — NSS 7 provides deep visibility into the behavior of the network, its applications and services by providing complete topology and routing awareness. This awareness allows operators to design the management of critical applications and services into their overall network control strategy. NSS 7 provides an accurate view of traffic associated with BGP anomalies, as well as an accurate forecast of the directed impact to Traffic Engineering. In addition, NSS 7 delivers feedback to the operator necessary to evaluate which peers or upstream providers have caused routing instability.

• Third generation anomaly detection algorithms — Utilizing the advanced anomaly detection algorithms with Entropic Variance Analysis (EVA), NSS 7 moves far beyond ten-year-old Holt-Winter techniques used by outdated enterprise approaches to combine cutting-edge algorithms, third-party sources and massive scalability. This advanced technology detects even the most well-disguised, widely distributed threats with an extremely high level of accuracy and confidence. This confidence allows operators to save precious time by prioritizing problems efficiently, and making concise, accurate mitigation decisions.

“Today’s age of Web 2.0, hosted applications and software as a service has created a very different threat landscape,” said Les Niles, vice president of product management and development, Narus. “A new generation of technology is required to protect today’s networks. NSS 7 employs new technology to empower operators to make rapid, accurate decisions focused on the root cause of the highest priority threats. It maximizes the service provider’s investment in existing infrastructure such as Cisco NetFlow and Cisco Guard, and it scales to consume massive amounts of information not only from the traffic, but from the routing infrastructure, and a wide range of network elements. NSS 7 expands its focus beyond security to actual network control.”

A recent study by the Yankee Group evaluated the long-term cost savings, both in cash and brand protection, of implementing a core IP security solution such as NSS 7 with the capabilities to detect and analyze complex-security threats to the carrier network. The result: When the carrier deploys an IP security solution in support of IPTV service and a managed clean pipes offering, analysis demonstrates an internal rate of return of 125 percent.*

 

About NarusInsight Secure Suite
NarusInsight Secure Suite enables carriers to detect attacks, abuse and behavioral anomalies in real time and to direct actions that can prevent security breaches, attack propagation, loss of productivity, unwanted traffic and network outages.

The industry’s most state-of-the-art, carrier-class security and traffic intelligence system, NarusInsight Secure Suite combines high visibility of the network traffic with full correlation among various sources of data including IP, Flow, BGP, SNMP, etc., across all of the links on the network as well as external storage facilities to access historical data. This total network view of combined traffic visibility and network correlation enables unprecedented accuracy and industry-leading performance. NarusInsight Secure Suite provides the ability to non-intrusively collect and process user traffic in real-time, generating statistics on abusive usage patterns and malicious IP traffic.

*The financial benefit of the carrier IP security solution is quantified in terms of free cash flow and cumulative FCF benefit from the solution. The FCF is a measure of the financial benefit that is derived year over year, and the cumulative FCF measures the benefit cumulatively during a 5-year period (p. 10, “Building an ROI Methodology for Core IP Security Solutions,” 2007.)


 

About Narus, Inc.

Narus is the leader in real-time traffic intelligence for large IP networks, and is the only company that provides security, intercept and traffic management solutions within a single, flexible system. With Narus, service providers, governments and large enterprises around the world can immediately detect, analyze, mitigate and target any unwanted, unwarranted or malicious traffic. Narus provides its customers with complete, real-time insight into all of their IP traffic from the network to the applications. Combined with the ability to enable numerous actions, Narus customers have the ability to take the most appropriate actions quickly.

Narus’ system protects and manages the largest IP networks around the world including AT&T, KT (Korea), KDDI (Japan), Telecom Egypt, Reliance (India), Saudi Telecom, US Cellular and Pakistan Telecom Authority. Narus is headquartered in Mountain View, California with regional offices around the world. For more information, please visit www.narus.com.

Media Contact

Kathleen Shanahan
Boca Communications
T: 415.570.1405