Solution Review: Deeper Analysis Capability at the Speed of Cyber

Description

Enhanced Network Visualization Environment (ENVE) is a suite of cyber products that offers visualization and automated analysis of passive network data. This unique solution enables deeper and accurate insight of network data while having the capability to be delivered as a full stack or modularized set of products.

Key Features:

• Reverse engineers a network and automatically generates a physical network topology

• Provides real-time situational awareness (SA) of traffic on a network

• Passively fingerprints devices on a network, characterizing nodes with detailed information

• Intuitive interfaces that allow easy understanding of large, complex networks and fast search, retrieval of network artifacts

• Automatically illuminates anomalies on a network, with machine-guided behavioral prediction of network activity

• Aggregates outputs of network analysis into standardized and customizable reporting for dissemination

• Extends capability through integration with other systems, both upstream and downstream

• Delivers as a cloud-ready or deployable hardware solution

• Supports all necessary infrastructure, platform and enterprise service needs to deliver an ATO-ready and hardened solution

ENVE Suite of Products:

FRONT END

• Catalog - Data management tool that enables searching, understanding, and managing network artifacts

• Curator - Reporting tool that aggregates work products in a user-editable form for PDF publishing

• ThunderRidge - Network Visualization user-interface (UI) that facilitates discovery and analysis through network graph topologies

BACK END

• Cartographer - Processing engine that utilizes algorithms to translate network data into detailed representations of networks

• JAM.L - Artificial Intelligence (AI) built to answer questions about network endpoints

• Librarian - Data catalog that indexes disparate network artifacts including network captures and configurations

• Winnow - Processing engine that enables the construction of network artifacts, fingerprints, and protocol reverse engineering

SERVICES

• Enterprise Services - Full Stack of IT Services to satisfy operational needs in a secure environment

• Platform Services - Application scaffolding to enable big data processing, orchestration, and DevSecOps

INFRASTRUCTURE

• Cloud Infrastructure - Secure, distributed infrastructure to support distributed operations

HARDWARE

• Deployable Sensors - Hardware product to support cyber operations

Tracks:

• 
  Solution Reviews