According to Gartner, Inc., 20 billion IoT connected devices are expected to be in use worldwide in 2020. For businesses, the benefits associated with IoT are extraordinary – from improved productivity and resource utilization to process optimization, cost savings and enhanced situational awareness. However, with great opportunity often comes great risk and today, malicious actors also plan to reap their own extraordinary benefits from IoT by focusing on the security shortcomings of connected devices.
Unfortunately, security has rarely been made a priority for IoT device manufacturers whose consumers are most concerned with functionality. As a consequence, many IoT devices are deployed with little or no protection, leaving critical infrastructure exposed to attack. For example, cyber criminals can use large-scale botnets to leverage unprotected IoT devices and launch distributed denial of service (DDoS) attacks of unparalleled scale and sophistication.
The Gigamon and anuview Joint Solution
Understanding the need to make IoT device security a priority, anuview developed FlowSec IoT. Integrated with the Gigamon GigaSECURE Security Delivery Platform, FlowSec IoT delivers s new line of defence via comprehensive infrastructure visibility.
Without the need for probes or agents, the FlowSec IoT platform uses advanced behavioural analytics to monitor every single connected device and provide a continuous and clear picture of what’s normal and acceptable on networks. The solution proactively hunts for and alerts end users to any abnormal activity, helping to protect against zero-day attacks and reduce the time to isolate infected or compromised infrastructure.
Key GigaSECURE Security Delivery Platform features that enhance the value of anuview technology deployments include:
Easy access to traffic from physical, virtual and cloud networks: The GigaSECURE Security Delivery Platform manages and delivers all network traffic – including east-west data center traffic and private and public cloud workloads – to anuview FlowSec, efficiently and in the correct format, to eliminate blind spots and help ensure collective monitoring and analysis of all traffic.
Filtering and send relevant traffic: The GigaSECURE Security Delivery Platform can be configured to send only relevant traffic or sessions to anuview FlowSec to help ensure that only the traffic that presents a security risk is analysed.
Metadata generation: The GigaSECURE Security Delivery Platform generates and sends unsampled NetFlow records for any traffic flow to anuview FlowSec. It also sends extended metadata records – for example, HTTP response codes and DNS queries – to provide highly detailed contextual analysis when looking at network events.