Network Assessment Software helps defend against major breaches.
Share:
Press Release Summary:
Combining data collection, logic, and visualization, Orkos identifies critical credential theft risks in organizational networks. Solution identifies critical links that attackers will exploit in major breach, immediate risks, as well as higher-order effects to show total risk of credential theft. Credential assessment capability also supports remediation through simulation of network changes that would prevent attacker from compromising additional systems with stolen credentials.
Original Press Release:
root9B Announces Development of First-Ever Credential Risk Assessment and Remediation Solution
Orkos product defends against major network breaches
NEW YORK -- root9B, a leading provider of advanced cybersecurity services and tailored active defense capabilities, announced today the development of Orkos, a revolutionary product to identify critical credential theft risks in organizational networks. root9B is a root9B Technologies company (OTCMKTS: RTNB).
Major network breaches follow a pattern of three phases - attackers first exploit a vulnerable system; then steal credentials granting them access to thousands more systems; and then use the stolen credentials to deploy malware across an enterprise and steal critical information or destroy systems.
"In a large organization, no matter how thorough the security team, you have to assume attackers will be able to compromise at least one server or one workstation," said Matt Weeks, root9B's Director of Emerging Technologies. "The greatest weakness of enterprise networks is in the second phase; the credential exposure that leads to total network compromise."
Today, organizations spend millions of dollars on products and services aiming to stop cyber attackers from exploiting systems in the first phase and detecting malware in the third phase. This approach does not address the second phase - a large credential risk gap that dramatically increases the impact of compromise.
"A credential assessment should be just as important as a vulnerability report for audit committees, and executives charged with compliance and cyber insurance responsibility," Mr. Weeks added. "We are seeing increasing interest from the PCI, Government, Healthcare, and other sectors."
Orkos, root9B's credential assessment capability, combines comprehensive data collection, advanced logic, and cutting-edge visualization to identify the critical links attackers will exploit in a major breach. It identifies not only immediate risks, but higher-order effects, showing the total risk of credential theft. Orkos also supports remediation through simulation of network changes that would prevent an attacker from compromising additional systems with stolen credentials. Orkos was designed to find and mitigate the types of dangers vividly illustrated by the recent Target and Sands breaches.
root9B's Emerging Technologies Directorate maintains a world-class team of research and development engineers that prototype, refine, and deploy new technology solutions for network defense, including vulnerability and credential risk assessments and mitigation strategies. root9B operators, threat analysts, and engineers execute active adversary pursuit, network threat detection, and risk mitigation services with a unique set of advanced tools.
Matt Weeks presented and demonstrated this new root9B product offering at the annual applied security conference in Vancouver, CanSecWest 2015.
Orkos is expected to be released in Summer 2015.
About root9B
Based in Colorado Springs, Colo., root9B is a leading provider of advanced cybersecurity services and training for commercial and government clients. Combining cutting-edge technology, tactics development, specialty tools, and deep mission experience, root9B personnel leverage their extensive backgrounds in the U.S. Intelligence Community to conduct advanced vulnerability analysis, penetration testing, digital forensics, incident response, industrial control system (ICS) security, and active adversarial pursuit (HUNT) engagements on networks worldwide. For more information, visit www.root9B.com.
About root9B Technologies
root9B Technologies is a leading provider of Cybersecurity, Regulatory Risk Mitigation, and Energy & Controls Solutions. root9B Technologies delivers results that improve productivity, mitigate risk and maximize profits. Our clients range in size from Fortune 100 companies to mid-sized and owner-managed businesses across a broad range of industries including local, state, and government agencies. For more information, visit www.root9Btechnologies.com
Media Contact:
Andrew Hoffman
908-655-6798
andrew@zitopartners.com
