Thank you for Subscribing to CIO Applications Weekly Brief

ThreatX Delivers First Cloud-Native Solution to Detect & Block Runtime Threats to APIs and Applications
By
CIO Applications | Friday, April 21, 2023

Patent-Pending Capability Leverages eBPF to Extend Protection to Egress, “East/West” Traffic; Supports Transition from Legacy to Cloud Environments
BOSTON: ThreatX, the leading API and application protection platform, today announced ThreatX Runtime API & Application Protection (RAAP). This patent-pending capability goes beyond basic observability to extend threat detection, tracking and blocking to customers’ runtime environments, without slowing developers or requiring expertise in cloud-native applications.
As organizations transition apps and workloads to the cloud, often across multi-cloud environments, attackers seek new ways to access sensitive data. While the Log4Shell vulnerability served as a wake-up call to runtime threats, shoring up these gaps is easier said than done. With ThreatX RAAP, organizations can greatly extend protections beyond the edge and address a myriad of risks to runtime environments, including insider threats, malware, web shells, remote access software, code injections and modifications, and malicious rootkits.
“The CISOs I meet with make it clear: they need fewer standalone tools and a better ability to protect their APIs and applications across both legacy and cloud-native environments,” said Gene Fay, chief executive officer at ThreatX. "We are excited to make these new capabilities possible and give our customers the means to confidently block attacks in real time – from the edge to runtime.”
The ThreatX RAAP solution is easily deployed as a sidecar container within a Kubernetes environment. Leveraging extended Berkeley Packet Filter (eBPF) technology, ThreatX RAAP enables deep network flow and system call inspection, process context tracing, and advanced data collection, profiling & analytics. With eBPF, ThreatX RAAP inspects network traffic anywhere on a host or node without requiring an in-line deployment.
ThreatX RAAP may be deployed as a standalone solution to address runtime environments or coupled with the ThreatX API & Application Protection – Edge solution. When used in tandem, these capabilities provide a 360-degree ability to detect, track and block threats to APIs and applications.
Other benefits of the ThreatX RAAP solution include:
• Block high risk transactions, such as data exfiltration attempts and excessive data exposure
• Protect transactions within a corporate network (i.e., east-west traffic), including virtual networks and subnets
• Prevent malware hidden within encrypted data via transparent TLS inspection – without disrupting confidentiality or integration of communications
• Reduce massive alert fatigue associated with other security tools through ThreatX’s risk-based blocking capability
“As we explored ways to extend our ability to block, it was important we enable customers to cover runtime environments, and to do so in a way that was painless for both security and developers,” said Andrius Useckas, co-founder and chief technology officer at ThreatX. “eBPF allows us to offer all of this, and more. We believe this cloud-native capability will greatly improve companies’ API and application protection today, and offer many other benefits down the road.
ThreatX will be demonstrating the new Runtime API & Application Protection capabilities at RSA Conference 2023 (booth 4103 – Moscone Center South) April 24 – 27 in San Francisco, CA.
BOSTON: ThreatX, the leading API and application protection platform, today announced ThreatX Runtime API & Application Protection (RAAP). This patent-pending capability goes beyond basic observability to extend threat detection, tracking and blocking to customers’ runtime environments, without slowing developers or requiring expertise in cloud-native applications.
As organizations transition apps and workloads to the cloud, often across multi-cloud environments, attackers seek new ways to access sensitive data. While the Log4Shell vulnerability served as a wake-up call to runtime threats, shoring up these gaps is easier said than done. With ThreatX RAAP, organizations can greatly extend protections beyond the edge and address a myriad of risks to runtime environments, including insider threats, malware, web shells, remote access software, code injections and modifications, and malicious rootkits.
“The CISOs I meet with make it clear: they need fewer standalone tools and a better ability to protect their APIs and applications across both legacy and cloud-native environments,” said Gene Fay, chief executive officer at ThreatX. "We are excited to make these new capabilities possible and give our customers the means to confidently block attacks in real time – from the edge to runtime.”
The ThreatX RAAP solution is easily deployed as a sidecar container within a Kubernetes environment. Leveraging extended Berkeley Packet Filter (eBPF) technology, ThreatX RAAP enables deep network flow and system call inspection, process context tracing, and advanced data collection, profiling & analytics. With eBPF, ThreatX RAAP inspects network traffic anywhere on a host or node without requiring an in-line deployment.
ThreatX RAAP may be deployed as a standalone solution to address runtime environments or coupled with the ThreatX API & Application Protection – Edge solution. When used in tandem, these capabilities provide a 360-degree ability to detect, track and block threats to APIs and applications.
Other benefits of the ThreatX RAAP solution include:
• Block high risk transactions, such as data exfiltration attempts and excessive data exposure
• Protect transactions within a corporate network (i.e., east-west traffic), including virtual networks and subnets
• Prevent malware hidden within encrypted data via transparent TLS inspection – without disrupting confidentiality or integration of communications
• Reduce massive alert fatigue associated with other security tools through ThreatX’s risk-based blocking capability
“As we explored ways to extend our ability to block, it was important we enable customers to cover runtime environments, and to do so in a way that was painless for both security and developers,” said Andrius Useckas, co-founder and chief technology officer at ThreatX. “eBPF allows us to offer all of this, and more. We believe this cloud-native capability will greatly improve companies’ API and application protection today, and offer many other benefits down the road.
ThreatX will be demonstrating the new Runtime API & Application Protection capabilities at RSA Conference 2023 (booth 4103 – Moscone Center South) April 24 – 27 in San Francisco, CA.
More in News
Companies' competitiveness in the logistics industry is greatly increased by efficient supply networks. According to research, supply chain management helps businesses grow by giving them a competitive advantage over their rivals. Supply chains are now more effective thanks to recent developments in automation and data analytics.
New technologies foster innovation in supply chains across multiple industries, benefiting companies, employees, and consumers. Currently, transformative technologies are gaining traction, aiming to bolster the resilience and robustness of operations in our increasingly interconnected digital landscape.
The future remains inherently uncertain, but it appears more unpredictable now than at any previous time. A global pandemic has disrupted the supply chain industry while highlighting its importance and giving rise to new goals and perspectives for the near future.
Best Supply Chain Technology Trends & Innovations
Internet of Things:
The Internet of Things (IoT) links physical devices, facilitating the autonomous monitoring and transmission of data. Implementing IoT in logistics enhances the efficiency of inventory management by providing greater visibility throughout the supply chain.
The Internet of Things (IoT) has significantly revolutionized supply chain management (SCM). Notable advancements have been made in tracking product locations, understanding storage conditions, and predicting arrival times at specific destinations.
Sensors can forecast equipment deterioration, allowing for proactive replacement part ordering. The Internet of Things (IoT) enhances visibility within the supply chain.
The Internet of Things (IoT) is approaching maturity. Its appeal is evident, particularly in its applicability across the entire supply chain. The results it yields empower organizations to enhance productivity, minimize downtime, anticipate customer demands, and increase overall return on investment (ROI).
Artificial Intelligence:
Over the past decade, automation has emerged as a significant trend across nearly all sectors. The remarkable success observed in the previous year indicates that this trend will likely persist. Notably, the ascent of artificial intelligence (AI) has become a pivotal element in supply-chain automation.
Integrating AI algorithms with machine learning empowers organizations to proactively adapt to demand fluctuations. For example, managers can leverage AI-driven forecasting tools to optimize supply chain activities and uncover opportunities for cost reduction.
These technologies offer real-time reporting, interactive data visualization, and enhanced analytical capabilities, all integral to contemporary business applications.
Augmented Data Intelligence:
Effective management of supply chains necessitates ongoing decision-making, yet many organizations need more knowledge to navigate this complexity.
Consequently, businesses require solutions that enhance their comprehension of supply chain dynamics and its activities, enabling decisions based on timely and precise data. The amalgamation of various technologies is called enhanced data intelligence (EDI). This integration accelerates complex data processing and yields valuable insights, forecasts, and recommendations. ...Read more
Today, every firm strives to boost operational efficiency while decreasing IT expenses. Every part of IT, from application deployment to customer service, requires speedier solutions that reduce the amount of human labor and give an exceptional experience. Increasingly businesses rely on agile, adaptable, and rapidly scalable technology underpinnings to meet their business objectives and stay competitive.
Here, IT infrastructure automation comes into play. Not only infrastructure but the entire business process is accelerated by automation.
Advantages Of It Infrastructure Automation
Significant cost savings: Automation is the primary factor in lowering IT expenses without compromising service quality, and it eliminates the need for manual optimization of IT resource capacity. Across all corporate activities, automation also facilitates enhanced resource allocation and utilization management.
Automation of IT infrastructure is necessary for optimizing both old IT and modern cloud infrastructure obtained through digital transformation activities. However, selecting the proper automation tool for effective infrastructure management is essential.
Faster adoption of DevOps: DevOps is a best practice that encourages enterprises' agility to release higher-quality goods more quickly. Moreover, automation is crucial to DevOps.
Adopting and integrating DevOps across all functionalities demands a high level of infrastructure automation.
To construct a fully functional DevOps, you must automate the infrastructure at every software development life cycle level.
Enhanced user experience through self-service portals: Self-service portals and service catalogs are already moving outside IT operations to meet the requirements of many business divisions. Examples include human resources for calculating benefits and compensation and supplier management for contract renewal and bid reviews.
Self-service solutions boost service delivery and productivity. Firms must automate their business processes to maximize the benefits of self-service portals.
The objective is to automate every systematic process to increase the productivity of self-service portals and give genuine value to business teams.
Obtaining the advantages of cloud computing: Although most enterprises employ public cloud infrastructures to some level, many struggle to utilize best-of-breed solutions to their utmost potential. The cloud contains numerous unrealized opportunities that might deliver immense value to enterprises. Organizations must maximize the benefits of cloud automation to improve their operations. Convertr is helping organizations fully harness these cloud opportunities, providing automation solutions that optimize cloud infrastructures and reduce operational costs. The company was recently awarded the Top Lead Management Operating System by MarTech Outlook for its pioneering work in cloud automation.
By leveraging infrastructure automation technologies, enterprises can discover new techniques for optimizing their cloud infrastructures (not to mention slashing costs).
Automation is required to obtain more control over cloud-based processes. An enterprise workflow solution can use public, private, on-premises, and hybrid cloud configurations to divide and distribute enterprise workflows.
Programming environment: Today, data centers represent the foundation of many firms' IT infrastructure—however, their function shifts due to the increased availability of cloud storage. Organizations can utilize hosted sites and social storage platforms distributed across many supplier data centers.
To maximize this advantage, they must acquire the ability to orchestrate and automate infrastructure. Programming storage as a service through these hosted websites, social platforms, and public cloud services is made possible through automation.
Bimodal IT: IT has always been a critical partner in every company's operation. In addition to continuing to meet Service Level Agreements, the IT department can improve security controls, maintain operational capabilities, and lower business costs.
Bimodal IT is the administration of two distinct modes of IT delivery. While one emphasizes stability, the other emphasizes mobility.
This is an excellent alternative for firms wishing to catch up with the fast advancement of the digital world. In this regard, automation can facilitate the move from conventional IT practices to bimodal IT. In this circumstance, automation accelerates and offers reliability for IT procedures. ...Read more
Fremont, CA: Artificial Intelligence (AI) is revolutionizing the construction sector. There has never been a greater pressing demand for accuracy and efficiency due to tighter budgets and more complicated projects. Here are five domains in construction project management where AI plays a crucial role.
Decision-Making
The use of AI in decision-making has been one of its most revolutionary effects. Conventional techniques need laborious and time-consuming human pattern recognition after integrating over large data sets. Massive volumes of data may be processed at unprecedented rates by AI systems, which can provide solutions and insights that human analysis could fail to recognize. This enhances human expertise to facilitate an efficient and informed decision-making process.
Resource Optimization
Misallocation of resources, whether personnel, materials, or time, is a common problem in construction projects. Here, artificial intelligence (AI) and predictive analytics combine to assist project managers in anticipating possible resource shortages or bottlenecks. Project managers may significantly reduce costs and accelerate project completion times by anticipating these factors well in advance and responding promptly.
Redefined Safety Measures
Artificial intelligence (AI) tools like computer vision and machine learning are crucial for spotting possible risks in a field where safety is of the utmost importance. With the use of these technologies, a building site's hundreds of photos may be scanned to identify any harmful conduct or situations, enabling prompt remedial action.
Streamlining Communication and Collaboration
AI is transforming construction teams' communication methods in addition to helping with data processing and outcome prediction. Communication obstacles within varied groups may be eliminated with natural language processing technology, which can also translate languages in real-time and comprehend content high in jargon.
Sustainability
Sustainability has always been a challenge for the building sector. Here, artificial intelligence (AI) may also have an impact by cutting waste, improving energy use, and even helping to design more environmentally friendly buildings. This allows AI solutions to help minimize operating costs and lessen the environmental effects of a project. ...Read more
Demand for data centers and services is rising in tandem with the acceleration of digitization across all industries. Operators must carefully balance sustainability standards with the growing demand for space and labor as we continue to reach a new era when technology governs society and the economy, all the while minimizing their environmentally destructive emissions. Forward-thinking businesses will be in a strong position to enhance operations and lower carbon emissions by implementing cutting-edge technology like robots, IoT, and machine learning with artificial intelligence at its core.
Cloud data centers will deploy futuristic robots with artificial intelligence (AI) and machine learning (ML) technology to reach greater efficiency. Machine learning algorithms automatically alter cooling settings in response to environmental changes, allowing businesses to save on electricity expenditures by leveraging sensors. Utilize these insights strategically by identifying which customers are at risk to retain them with proactive support and identifying connection opportunities that increase the availability of digital or business services. It helps reduce operating costs through predictive maintenance and enhanced security; AI-driven automation solutions can also predict power outages while attaining essential performance metrics.
Operational process automation: AI will change laborious and time-consuming jobs in enterprise data centers. Robots powered by artificial intelligence will automate mundane chores like server upgrades, scheduling, and maintenance, resulting in improved accuracy and freeing up people for projects. Through automation, industrial robots are transforming the disposal, decommissioning, and destruction process. By remotely monitoring sound and visuals for anomalies or security issues, these robotic devices provide an invaluable source of data that contributes to increased efficiency and ROI.
Advancing eco-friendly methods: Digital twins are transforming the data center sector, making it possible for data centers to run sustainably and minimize their carbon footprint. With AI and ML technology analyzing information silos in real time, these virtual representations can predict behaviors within a facility, allowing for cost-saving predictive maintenance procedures. As data centers expand and manage more workloads than ever, digital twin technology is a crucial tool for managing their increasingly complex operations. Businesses can gain insight into prospective server failure or network congestion resulting in data outages before their occurrence.
Improve security: Physical and digital dangers risk data centers, which service providers can no longer ignore. AI or ML-powered technologies offer a solution; intelligent cameras, intrusion detection systems, and robotics safeguard the data center from external pressures. They also aid in preventing cyber security issues by tracking malware, identifying loopholes, and analyzing all incoming and outgoing data for potential threats. Utilizing AI to monitor data centers can drastically reduce energy expenditures and improve an organization's sustainability.
Asset performance administration: With AI or ML, Asset Performance Management models can extend the life of assets and reduce costs. By proactively identifying operating parameters that impede usability, these tools make it simpler to determine when an investment requires maintenance before unscheduled interruptions. Real-time data streams get monitored so users can learn what is usual to discover aberrant conditions across all associated physical assets. ...Read more

