Network Situational Awareness
The ProQueSys NetSAW (network situational awareness) engine is a complete security solution for detecting malicious behaviors and covert communications channels. It consists of a scalable deep-packet inspector and a comprehensive suite of network protocol analyzers.
NetSAW's protocol analyzers can organize and catalog browsed webpages, entered search terms, instant messenger conversations, email traffic, file transfers, and a number of other protocols.
Beginning with captured packets (either from PCAP files or a live network), NetSAW re-assembles IP fragments and serializes TCP retransmissions in order to obtain a clean application-level byte-stream. This stream can either be stored for later processing or analyzed by a variety of protocol analyzers in multiple concurrent compute threads. A perl-style regular expression parser is available for creating powerful queries for custom threat detection.
Please contact us for more information about deploying NetSAW technology in your organization.