Network administrators and security specialists have long had tools and software for analyzing the streams of traffic that course through company systems, but now a Marlborough, Massachusetts, startup wants to make the process a lot easier.
Dejavu Technologies recently released TrafficScape, an appliance that grabs network packets and converts them into XML documents, which are then pulled into a database that is searchable through a simple, Google-like toolbar.
The company is aiming the software at average investigators who may have the instincts needed to make smart searches through reams of data, but who lack specialized technical training, according to CEO John Ricketson.
"When it gets to dealing with networks, there are a lot of low-level engineering skills required. We're trying to get tools that domain experts can use," he said. Such individuals need to "have the tool get out of [their] way."
TrafficScape can capture a wide range of protocols and document types, including email, VoIP calls, instant messages, PDFs, Internet searches, and various other forms of data, according to the company. Searches can be done in "near real time" or against a stored data set.
Users can employ simple keyword searches or construct more granular Boolean queries, such as for all network documents containing the words "aluminum," "shipment" and "Dejavu," according to a demonstration.
The tool also allows searches that employ network attributes -- information such as IP addresses and user IDs that are tied to a given conversation. Therefore, one could search for all exchanges between two particular users, in which a certain keyword or words crop up.
Conversations with many network transmissions, such as an instant messaging session, are captured and organized as a group within a single document. Even the buddy lists associated with a chat get captured, giving investigators a potentially broader view into a target's identity and associations.
Beyond ease of use, to differentiate TrafficScape in the market, Dejavu is planning to home in on Web 2.0 data, such as the various information streams that flow to and from complex social networking sites like Facebook, Ricketson said.
The next version of the product will also add automatic text transcription of VoIP calls and video streams, which will be indexed and searchable.
While Dejavu may have a couple of new twists on the formula, a range of other companies, such as PacketMotion, have been selling various types of network traffic analysis tools for some time.
Therefore, TrafficScape has to make the right strategic moves as it enters the fray, according to Forrester Research security analyst John Kindervag.
"If they are priced cheaply enough, they could get some play," he said. "I would think this type of technology is a nice to have, not a need to have. Startups tend to overestimate their value to the enterprise and price themselves out of markets from the beginning. It takes a few quarters of abject failure before they align their prices to the market."
TrafficScape is sold either as a package that includes the data-capture appliance and a hosted database that stores captured files, or as a tool that pushes the information into another search engine, chosen by the user.
Pricing is dependent on the scale of a particular customer's needs, said Ricketson, who declined to provide specifics.
Dejavu is initially focusing on government clients as well as ISPs, who could sell it as a value-add for their customers, according to Ricketson.
Many ISPs are subject to court orders to capture network traffic, but don't make any money off of it, he said. "This is a way for them to provide service back to customers and have it be a revenue generator."
References
Latest on Authentication & Access Control
- Law enforcement push for stricter domain name rules
- More than 100 companies targeted by Google hackers
- UK registry to implement DNS security protocol
- VeriSign rolls out new Web site verification service
- Chinese schools deny role in Google hack
- Criminal hacker 'Iceman' gets 13 years
- Twitter application Grader.com hacked
- Australian parliament Web site attacked
- CA brings SOA security to open source JBoss
- Indian pleads guilty in overseas stock hacking scheme
Security Essentials
- Good security in recessionary times
- Security ROI: Fact or Fiction?
- NetWitness releases free version of security software
- Study: critical infrastructure often under cyberattack
- Crooks can make $5M a year shilling fake security software
- Sun exec: IT security should follow business needs
- Clumsy staff more dangerous than hackers: survey
- When the watchdog is the underdog
- Mafiaboy grows up; a hacker seeks redemption
- Ouch! Security pros' worst mistakes
- VBA/Excel/C#/VB.NET Developer20/03/2010
Other
I.T. & T
VBA/Excel/C#/VB.NET Developer - Business Analyst - Risk Management20/03/2010
Other
I.T. & T
Business Analyst - Risk Management - Senior Solaris Systems Administrator20/03/2010
Other
I.T. & T
Senior Solaris Systems Administrator - Senior Business Analyst - Equity Trading Systems20/03/2010
Other
I.T. & T
Senior Business Analyst - Equity Trading Systems - Application Support Analyst - Investment Banking - Java Applications20/03/2010
Other
I.T. & T
Application Support Analyst - Investment Banking - Java Applications - Application Support Analyst - .NET Applications20/03/2010
Other
I.T. & T
Application Support Analyst - .NET Applications - Support Engineer20/03/2010
Other
I.T. & T
Support Engineer
Whitepapers
-
Making the move to Ethernet | A DECISION GUIDE -
Operational Responsiveness | An Executive Guide -
Computerworld On-Demand Webcast | Winning and retaining customers through better web application performance -
Keeping your SQL Server Going 24x7 -
PRESCRIPTIVE GUIDE | Information Security and Multi-Compliance: Avoiding Audit Fatigue with a Single IT Compliance Strategy
TechWorld Blogs
Recent blog posts
- Tim Bray joins Google, slams iPhone ecosystem
- Following social networking privacy
- All aboard the Avatar Economy
- Facebook, PayPal tie up ad payments
- Google goes for more markets: too much too quickly?
- Talk about mobile computing
- iPad arrives: can Apple crack the tablet?
- Linux.conf.au 2010 kicks off in New Zealand
- VMware jumps further into SaaS with Zimbra
- Amarok 2.2.2 released – rock on!
Recent comments
- Good Day to You all,
I am
1 day 1 hour ago - Play on reliable sites
1 day 1 hour ago - ipad preorder sells
1 day 2 hours ago - Ajax is the more powerful
1 day 4 hours ago - I can see that whole seconds of research were lavished on this.
1 day 12 hours ago - Andorid phone are one that runs google android opereting system
1 day 13 hours ago - Other apps not available
2 days 4 hours ago - To be honest I think I might
2 days 8 hours ago - How much is Microsoft paying you?
2 days 9 hours ago - Free to be Fools Vs Forced to be Fools
2 days 10 hours ago - pointless
2 days 11 hours ago - hp: a lack of customer service. learn from Apple.
2 days 13 hours ago - Touch Screen
2 days 19 hours ago - Kindle and the iPad
3 days 12 hours ago - Asset Management Software
4 days 2 hours ago - 3D TV with glasses set to fail !
5 days 12 min ago - govt a bunch of wowsers
5 days 11 hours ago - Best way to block these idiotic initatives
6 days 3 hours ago - not for us
1 week 1 day ago - Any related jobs
1 week 1 day ago





Comments
Post new comment