ExtraHop
ExtraHop’s architecture uses a unique combination of on-premises tech and cloud services to support the full machine-learning process while protecting the confidentiality, integrity, privacy, and anonymity of customer data and activities.
While our machine learning service is based in ExtraHop’s cloud in order to scale effortlessly with your enterprise, only de-identified metadata is sent to the cloud. ExtraHop processes over 1 PB of wire data per day, training our ML on the most objective and comprehensive data source available.
ExtraHop is on a mission to stop advanced threats with security that can’t be undermined, outsmarted, or compromised. Reveal(x) 360 is a dynamic cyber defense platform that uses cloud-scale AI to help enterprises detect and respond to advanced threats before they can compromise your business. With complete visibility from ExtraHop, enterprises can detect intrusions, conduct threat hunting, and investigate incidents with confidence.
Elastic Search
Elasticsearch is an open source, RESTful, distributed search and analysis engine built on Apache Lucene. Since its launch in 2010, Elasticsearch has quickly become the most popular search engine, and is commonly used for log analysis, full text search, security intelligence, business analytics, and operational intelligence use cases.
3 main functions that can be obtained.
1. Search engine
2. Observability (monitoring)
3. Security (SIEM)
Trend Micro
Tackling unknown threats using machine learning with Next-Generation Intrusion Prevention. With machine learning and statistical data modeling become so effective. At a high level, machine learning works by training a machine by extracting “feature vectors” from a dataset of benign and malicious examples in order to compute a mathematical model. This model is evaluated against network traffic and, in the case of the TippingPoint solutions, can make a real-time decision about whether the content appears to be benign or malicious. If the content is determined to be malicious, the TippingPoint solutions block the content from entering the network