Authentic8 Enhances Silo for Enterprise Information Security Researchers

img_2014-10-23_Marketwired

CORPORATE NEWS

MOUNTAIN VIEW, CA--(Marketwired - Oct 23, 2014) - Authentic8, maker of Silo, the cloud-based secure browser for business, has expanded its product capabilities to include resources designed for information security research, incident response, emergency readiness, anti-fraud, and more. Where Silo is designed to control the use of web-based services by executing in a sandbox and implementing data-level policy controls, the new configuration, called Toolbox, brings the same isolation but includes features necessary for researchers to do their jobs more securely.

The One-Time Use Browser and Storage System Adds a Network of Global Internet Exit Nodes for Isolated and Anonymous Data Analysis

An early step in the information security research process is to access web content using the browser. Teams need to connect, download or store content, and perform analysis of malicious web code. And whether the user is a law enforcement agent or a compliance agent at a company, they need to conduct this research without exposing their environment to malware or revealing their identity. Toolbox is designed for this.

  • Toolbox is a browser built on demand at session start and destroyed at session end. This ensures that there is no data residue session over session.
  • The browser executes in a sandbox on Authentic8's servers, creating a perfect insulation layer between target web code and the researcher's network and device.
  • Toolbox includes a temporary file system that allows data to be downloaded within the sandbox to be analyzed, manipulated, or uploaded to other web-based services.
  • Researchers can spoof different browsers and devices in order to analyze various types of web code the target server delivers.
  • Toolbox can be configured to exit to the Internet from different international locations via Authentic8's private global network of exit nodes. This means that a researcher can work safely at their desk, while appearing to be a local computer on the other side of the world.
  • Researchers can run multiple configurations of the Toolbox browser in a single Silo session, meaning that researchers conduct research processes in parallel, rather than a dedicated machine model.

The combination of these functions make Toolbox an ideal on-demand, secure, and anonymous research tool. Using Toolbox frees teams from the current pain of re-imaging dedicated systems, setting up private sub-networks, or implementing costly and dangerous local sandbox solutions.

"Our customers are constantly pulling Silo into new business processes. By moving the browser to the cloud and by extending the environment with a policy and configuration capability, our customers have embraced Silo across industries and roles," says Scott Petry, co-founder and CEO of Authentic8. "These enhancements for infosec researchers are a direct response to the needs of our users. Silo is a platform and we will continue to enhance and extend its capabilities."

"Our team has been using Toolbox for a while. The ability to launch a browser instance, use it, and then throw it away without burdening the local system is key," said Neill Feather, President of SiteLock. "Unlike local sandboxing alternatives, we're able conduct our research without compromising our local environment and without tipping our hand to the bad guys."

"Traditionally, dedicated malware analysis environments have been either very expensive commercial products, or open source environments that require significant time to build and maintain," said Adrian Sanabria, senior security analyst at 451 Research. "Toolbox strikes a compromise between price, functionality, and convenience that is likely to make this product one of the first analysis tools security analysts and incident responders reach for."

Toolbox is available now as a configuration of Silo. Pricing starts at $15 per user, per month. See a video of Toolbox in action at http://go.authentic8.com/toolbox.

Ramesh Rajagopal - Ramesh is Co-Founder and President of Authentic8. Before, he was VP Corporate Development at Postini, heading up strategic planning and business development until its acquisition by Google in 2007.

Topics: Corporate News