Eric Thomas, ExtraHop | AWS re:Invent 2017
Channel: SiliconANGLE theCUBE
Date: 2017-11-28

Eric Thomas, Director of Cloud Product, ExtraHop | AWS re:Invent 2017

#reInvent #theCUBE

https://siliconangle.com/2018/01/03/aws-partners-focus-on-continuous-real-time-analytics-for-cloud-security-reinvent/

ExtraHop drives real-time analytics
Another announcement that emerged from the gathering in Las Vegas was a new release from ExtraHop that has been integrated into the AWS platform. ExtraHop, a specialist in real-time analytics, announced that it would provide enhanced visibility for AWS CloudTrail, CloudWatch and VPC Flow log data.

Criminal hackers aren’t slowing down, and ExtraHop has found an engaged audience with AWS and customers who are constantly under attack from ransomware threats and phishing scams. The company recently helped a county hospital in Ohio beat back a ransomware attack by quickly analyzing log data and finding the precise click-through that injected malware into the network. The company’s approach is to find the attack source within seconds.

“Some vendors say real-time means 15 or 10 minutes,” Thomas said. “That’s not really enough to try and find a ransomware infection and stop it.”

ExtraHop has focused extensively on security for wire data, the continuous flow of network and business information across the infrastructure. As microservices and other abstractions become more entrenched in the enterprise application layer, the need for tracking and finding security anomalies becomes even more of a challenge.

“We auto-discover systems and services running across virtual or physical networks, which means you don’t have to configure things ahead of time,” Thomas said. “We see services spin up, spin down, move across availability zones, and we just track all of that as it happens.”