- Unusual Inbound/Outbound Network Traffic
- User Account Activity Anomalies
- Geographical Anomalies
- Authentication Anomalies
- Anomalies Specific to Backend Applications
- Web Traffic Anomalies
- Malware File Checking
Comodo's cWATCH Cloud is a managed cloud security service that provides application and network security for different deployment scenarios, on-premises, cloud or hybrid. cWATCH Cloud is a fully managed offering that is designed to protect any cloud based assets and data that you have. It eliminates the necessity of security expertise to protect your valuable assets, wherever your data is.
Capabilities
Dynamic Analysis with Machine Learning
Comodo cWATCH team provides service using in-house built state of the art tools that not only detect threats in real time but also help to prevent from zero day attacks and emerging threats using Dynamic Analysis and Machine Learning Techniques. Comodo's worldwide R&D team continuously develops new content and algorithms an pioneer new techniques to fight against cybercrime.
Application Profiling and Traffic Behavior Analysis
Behavior analysis and anomaly detection is an effective and robust way to detect malicious activity in web, network or client environment. The fast changing threat environment of today makes anomaly detection a requirement rather than an option for cybersecurity. In order to detect anomalies, you have to define what normal is. And the definition of normal changes from environment to environment, from application to application even from configuration to configuration. Top level engineers at Comodo constantly deal with these challenges and produce best of breed solutions for application profiling and traffic behavior analysis to detect and mitigate zero day attacks and emerging threats.
Security Intelligence
Security Intelligence is nowadays is a core item for any proactive security assurance operations. By the help of Comodo Threat Center and Comodo AVLab, Comodo cWATCH team monitors current credible threat information, including known exploits and attack patterns, test (and retest) continuously to assess changing infrastructure against the latest threats and benchmarks security posture, tracks and demonstrates security standing over time. By combining threat intelligence, statistical techniques, machine learning and profiling to assure highest quality of intelligence at our analysts' fingertips. This results in highly efficient security services that strengthens all of our customers' security posture.
Compliance
cWATCH Cloud is a complete security solution for diverse environments that satisfy many compliance mandates such as HIPAA and PCI DSS almost immediately after subscription. cWATCH Cloud ensures a secure IT environment for you and provides extensive set of reports that are required by compliance authorities.
Log management, network threat detection and application security management features of cWATCH Cloud, combined with top level security expertise, result in easy compliance to the regulations for IT security published by almost all of the authorities.
Real time correlation and alerting
With automated correlation and alerting, timely alerts are generated for malicious events, user or network behavior. These real time alerts are then analyzed manually by security experts for escalation process and customers are informed due to incident handling and response procedures. There are dedicated experts at Comodo SOC who are committed to creating new static and anomaly based correlation rules and Comodo R&D engineers are continuously researching new ways of automatically detecting threats with advanced computing techniques like machine learning.
Intrusion Detection
Our cloud based intrusion detection system is fully monitored and managed by Comodo Security Operations Center and provides network intrusion detection for diverse deployment options. Comodo SOC has dedicated experts that are committed to keeping our intrusion detection system up-to-date for newly emerging threats. We have a comprehensive set of rules with very low false positive rates, analytics engine with threat intelligence that reduces false positives even more, and top level experts that analyze each alert for escalation.
24x7x365 Monitoring, Incident Handling and Response
No security solution is complete without human interaction. There are many advanced techniques that try to reduce false positives and generate meaningful alerts bu nothing beats an expert human eye when it comes to identification and classification.
Comodo cWATCH Web Security brings top level security experts at your service so that you can be sure about the significance of the event when you are contacted. We eliminate all other events and escalate only the required ones with well-defined automated and manual procedures to ensure your valuable time is spent in the right place.
Predictive and Actionable Security Service
IoC Based Monitoring and Alerting
An Indicator of Compromise (IoC) is any piece of forensic data,such as found in system log entries or files, that helps identify potentially malicious activity on a system or network. Indicators of Compromise are also used to exchange threat information among the greater security community, leading to strong efforts for their standardization.
Security analysts at Comodo Security Operations Center are committed to recognizing and publishing new compromise indicators, and to developing new queries, dashboards, reports, correlation rules and IDS signatures. Malware developers don't stand still, so why should your security solution? By investing time and resources to understand new attack vectors and develop new indicators, Comodo ensures that threat center offers highest level of protection today and will anticipate and prevent threats as they emerge in future. Our security analysts are committed to continuously monitoring Indicators of Compromise including but not limited to the below list.
- Port-Application Traffic Anomalies
- Suspicious Registry Or System File Changes
- DNS Request Anomalies
- Mobile User Profile Anomalies
- Signs Of DDoS Activity
- Long-Term Trending
- Detection of Autonomous System Behavior
Business Benefits
Reduce your costs
You do not have to employ and maintain expensive, highly skilled security professionals in order to keep your business safe! We offer a more effective way called security as a service that will keep you on top of every cyber threat without the cost of running an IT security center. Let our experts do their best for your cybersecurity while you do your best in business for your customers without distraction.
Security as a service model
Our cloud based software as a service model is designed to eliminate the hassle of complex configurations, time consuming deployments that disrupts businesses and loads of money to keep everything in shape. Simply subscribe and let us deal with everything else.
Security expertise
There is a growing human resources gap in cybersecurity skills that results in expensive staff or low skill set. Our experts at Comodo cWATCH will close this gap and improve your security posture by monitoring your environment, and providing one to one extended help for fast recovery from breaches or compromises.
