Government
Government agencies at all levels face pressure to efficiently manage their digital domains while keeping track of every activity and event. This has created the “Big Data” effect where the body of information is so vast that efficiency is severely impacted. Cataphora’s technologies address this issue while extending the reach of analysts and agents to find the unknown – to “see around the bend in the road.”
Insider threats:
presidential executive order
Risk mitigation, specifically as it relates to insider threats, stands out as a clear core mission objective of 2012. The October 2011 Presidential Executive Order 13587, titled “Structural Reforms to Improve the Security of Classified Networks and the Responsible Sharing and Safeguarding of Classified Information”, requires every agency and federal government systems integrator to implement an insider threat detection and prevention program by the end of 2013. Given this new government-wide mandate, it is paramount that government agencies take insider threats seriously. Learn how Cataphora’s insider threat monitoring solutions can help.
What we do
At its core, what we do is data analytics: Cataphora takes group or individual data that is spread across an agency’s information and access control systems, provides flexible intake and rapid processing, and produces meaningful new insight that yields unforeseen opportunity, untold stories, and new ideas. Our solutions:- Process vast volumes of data that simply cannot be managed with traditional DBMS systems and other similar toolsets
- Identify behavior patterns and highlight meaningful behavioral anomalies through analysis of people’s everyday digital footprints, such as emails, instant messages, key card swipes, online calendars, documents and so forth
- Complement other technologies such as DLP (data loss prevention) systems, network forensics, and DPI (deep packet inspection) to reach unprecedented performance levels.
- Help agencies meet their core mission objectives in:
- Intelligence
- Defense
- Homeland Security
- Law Enforcement
- Regulation and Oversight
- Cybersecurity
How we do it
We offer technologies and processes that detect behavioral patterns based on the digital footprints that people leave behind in the course of their normal daily activities. For example:- Deciphering context in communications from across a wide variety of channels based on causal relationships between those communications and relevant events, as an aid to analysis and understanding
- Timelines and sequences of events: Who likely knew what and when; what significant behavior changes occurred and how they correlate with pertinent events
- Actor graphs: Who are the salient players? With whom do they communicate, how, when and about what? Who is central, who is peripheral to an issue?
- Textblocks: What information is being propagated and where, both authorized and unauthorized? Cataphora technology can detect this even in the event of changes to the exact wording of the text.
Applications
Select a tab to read more about a specific application area.
Cataphora’s technologies can help national intelligence agencies perform their mission with greater efficiencies in the areas of:
- Counter-intelligence
- Insider threat detection
- Intelligence collection, processing and analysis
- Network operations and security
- Classified content spillage or theft
- Improper use of data or systems
Cataphora’s technologies are uniquely poised to help Homeland Security initiatives meet their objectives in respect of:
- Counter-terrorism
- Computer Emergency Response Team (CERT)
- Cyber Security
- Insider Threat Determination
- NOC/SOC
Cataphora’s Technologies have been developed to process and analyze very large data volumes and to provide insights into these that far exceed the capabilities of alternative approaches. Analysis of Big Data is a core element in the design and implementation of Cataphora’s technologies, which we have been deploying for more than ten years. We know how to handle the enormous data challenges of finding “the needle in the haystack.”
These capabilities lend themselves to numerous business areas within the defense domain such as:
- Detecting malicious insider activity
- Attributing activity to users
- Providing NETOPS tools to track down anomalies
- Allowing Security Operations to foresee events through continuous monitoring
- Improving Mission Assurance
- Providing new ways to combat cyberthreats
Cataphora platforms are used for analysis of large quantities of forensically acquired data to provide:
- Investigation of credit card, insurance, and other forms of financial fraud
- Social network analysis to identify relationships or covert links among parties that might pose internal fraud or other insider risks
- Attribution of cyber activity to individuals involved in identity theft
- Determination of hot topics and hierarchical relationships between parties
- Identification of possible leads and other actionable intelligence
- Improved investigator capacity and case turnaround time
- Simplified extraction and data normalization of forensics files
Cataphora’s unique technology is the basis for solutions that significantly extend the capabilities of those responsible for oversight of compliance in areas such as FISMA, HIPAA, PCI, SEC, etc. Cataphora Data Intelligence provides new insight into data related to behavior and activity that can impact the overall security and safety of your organization’s data assets.
- FISMA Compliance
Cataphora solutions help flag potential security risks that are undetectable by other means. These solutions are based on Cataphora’s technology for continuous monitoring of individual and organizational behavior, as recorded by their digital footprints – emails, instant messages, key card swipes, online calendars, documents and so forth. - PCI Compliance
Cataphora software provide the ability to see activity hidden in payment card transactions where patterns of fraud, identity theft, attempted theft are developing. - HIPAA Compliance
Protect access to vital information that is bound under HIPAA by determining malicious intent and insider activity that can lead to data spillage. - SEC Compliance
Cyber-related risks are constantly under SEC scrutiny and it is imperative that organizations monitor for potential breaches of 10-K compliance. Seemingly simple actions can mushroom without warning in the absence of solutions that aid in uncovering risks that are otherwise undetectable, including external and internal factors, impropriety, bad actions, cover-ups, anticipated future events, etc.
Cataphora provides actionable cybersecurity intelligence through insights from our advanced analytics and visualizations that create understandable views of complex situations. Cataphora’s analyst-definable ability to monitor for unknown threats provides tremendous power to scan for activity that would otherwise go undetected.
Cataphora cybersecurity intelligence solutions provide analytics of individuals’ “digital footprints” – information about behavior patterns derived from communications such as email, instant messaging, text messaging, phone logs and web activity, as well as system logs such parking gates, building entry/exit, system log on/off, VPN access, DHCP and DNS logs, system access logs and so forth. Cataphora cybersecurity intelligence solutions bring a human face to the equation that other platforms cannot provide. We have ten years of experience of investigations where behavior, tone, power, influence, and numerous other factors can be identified in the electronic record, providing an unparalleled perspective to masses of data that yield high-value leads in cybersecurity matters. With the Cataphora cybersecurity intelligence you can:
- Uncover malicious intent or other forms of risky behavior in what would otherwise seem to be normal activity
- Identify people who attempt to hide or disguise their activities
- Improve security posture for better scoring against public- or private-sector benchmarks
- Minimize false positives for better situational awareness
- Provide uplift in mission assurance
- Monitor changes in behavior over time
- Follow up on specific events that need further investigation
- Correlate actual behavior against policies
- Provide management with reporting to keep them informed about status, investigations, events, etc.
