AbuseSA - Codenomicon

AbuseSA
Automated Abuse Situation Awareness
Signature-based defenses are not enough:
Advanced attacks are designed to bypass them. To reduce the
impact of cyber attacks you need to detect attacks asap; the
longer attackers have access to a system, the more damage they
can cause.
Use public information to detect attacks earlier:
Several organizations publicly report information on Internet
abuse, like malware, botnets and defacements. Everbody has
access to this information. The problem is that it comes in a
variety of formats and it is time-consuming to manually shift
through emails, website postings etc.
Improve your abuse situation awareness automatically:
With AbuseSA you can automatically collect, process, report and
visualize abuse information. It is format-independent. Stay
up-to-date on the latest threats without expensive sensor-based
systems and stop malicious behaviour, before attackers can build
extensive botnets or exfiltrate sensitive data.
FOR CERTs: By automating their abuse handling CERT-
FI was able to increase the amount of cases it handled
annually from 1000 in 2005 to 200 000 in 2011.
FOR ISPs and IT ORGANIZATIONS: Outbound spam
can cause blocking or blacklisting. Legitimate customers
cannot utilize their accounts. With AbuseSA you can
detect abuse earlier from your network and avoid
blacklisting and costs related to it, such as increased
helpdesk costs.
AbuseSA Features
• Automated data collection: From both internal and external sources
in all formats, e.g. XML and email.
• Automated data analysis: Remove duplicate, false and outdated
information and add details from other sources.
• Automated actionable reporting: Automatically generate reports
according to your specifications: format, language, time etc.
• Realtime interactive visualizations: Spot incidents quickly from
high-level visualization and drill-down to more detailed information
to investigate further.
• Enhanced collaboration: As a format- and source-independent tool,
AbuseSA is ideal for sharing information with partners and
stakeholders.
AbuseSA Benefits
• Scale your security expertise: Actively monitor all possible sources
of abuse information. Gain global state-of-the-art abuse situation
awareness.
• Speed up attack detection: Be among the first to know, if someone
reports abuse in your network.
• Concentrate on the analysis: From manual copy-pasting to
automated abuse handling.
• Improve remediation: Faster identification and troubleshooting.
Share real-time situation awareness: Send automated reports, share
visualizations.
• Make better informed decisions faster: See all the information you
need in one browser-based view.

One browser-based view:
Scroll from one interconnected view to another
List view:
See the details according to your specifications
Map view: Drill down to see more details
Trends view
Automated reports:
Realtime actionable reports according to
your specifications
Timeline view:
Easy troubleshooting
CODENOMICON LTD | INFO@CODENOMICON.COM | WWW.CODENOMICON.COM
Global and EMEA Headquarters | Tutkijantie 4E FIN-90590 OULU FINLAND | Tel. +358 424 7431
USA Headquarters | 12930 Saratoga Avenue, Suite B-1 Saratoga, CA 95070 UNITED STATES | Tel. +1 408-414-7650
APAC Headquarters | 46B Tras Street Singapore 078985 Singapore | Tel. +65 9188 1502
Codenomicon Software (I) Pvt. Ltd. | Regus 15th Floor, Eros Corporate Tower, Nehru Place 110019, New Delhi, India