In this blog, you will learn why you should X-ray network data and how to do this. Let’s start by explaining the why with a short example. Everyone who has gone to an airport will have experienced going through a security check. You might be the person who doesn’t fly that much and gets anxious by these security checks or you are one of the frequent flyers who experience it more as an extra delay for which they need to go to the airport early. Whoever you are we all have gone through them at one stage in our lives. The officers that work there are well-trained to spot strange potential bad actors by looking at a person’s posture, personal appearance, and behavior. But experience has taught us that having security offices alone is not enough and hence they introduced X-ray machines for your baggage and body scanners to check if you not bringing any prohibited goods onto your flight.<\/p>\n\n\n\n
You might already see the relation why you would want to x-ray your network data. Some Network Detection and Response vendors will say that you only need security officers to look at network data to spot malicious behavior. My example shows that experience has taught us that that is not enough. Yes, you will still need the security offices to check the baggage and people, but you give them the X-ray machine and body scanner to provide complete visibility for proper checks. These are the capabilities a Network Detection and Response solution will need to have to give you accurate detections.<\/p>\n\n\n\n
How do you provide a Network Detection and Response solution with X-ray and body scanner functionalities? You give it the capability to passively listen to the network traffic and decrypt TLS encrypted traffic and domain-encrypted traffic. Like other\u00a0Network Detection and Response vendors, ExtraHop has security officers in their product to do detections, but ExtraHop is the only Network Detection\u00a0and Response vendor that has given the security officers X-ray and body scanners. This is why ExtraHop can do the same sort of detection as other vendors on encrypted data, but it can also look inside encrypted traffic providing you with more accurate detections and detection for attacks that other NDR vendors will miss.\u00a0<\/p>\n\n\n\n
The next time you go through a security scan at the airport give those security officers some love for the awesome job they do keeping us safe when we take a\u00a0flight. The same love you should give the IT security team in your organization for the awesome job they do trying to fight off all the malicious attacks all day long. Help them by giving them ExtraHop’s Network Detection and Response solution to help them keep the organization safe.<\/p>\n","protected":false},"excerpt":{"rendered":"
In this blog, you will learn why you should X-ray network data and how to do this. Let’s start by explaining the why with a short example. Everyone who has gone to an airport will have experienced going through a security check. You might be the person who doesn’t fly that much and gets anxious by these security […]<\/p>\n","protected":false},"author":2,"featured_media":107,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"_links":{"self":[{"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/posts\/169"}],"collection":[{"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/comments?post=169"}],"version-history":[{"count":1,"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/posts\/169\/revisions"}],"predecessor-version":[{"id":170,"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/posts\/169\/revisions\/170"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/media\/107"}],"wp:attachment":[{"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/media?parent=169"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/categories?post=169"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/192.168.2.202\/wp-json\/wp\/v2\/tags?post=169"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}