These trust ratings are provided by the Carbon Black Software Reputation Service-reputedly the world’s largest hash database of software. In 2016, the company was rebranded to Carbon Black.Ĭarbon Black’s trust-based security model revolves heavily around its central whitelist database: a registry of trusted, known good software and their classifications/ratings. The merging of the two effectively combines Bit9’s signature-less, whitelist-based threat protection with Carbon Black’s continuous monitoring and incident response capabilities. Bit9’s agent-based platform architecture allows the enforcement of whitelist policies on every endpoint, while Carbon Black enables endpoint file behavior monitoring and real-time threat detection through endpoint-installed sensors and data recorders. Though founded back in 2002, Bit9 came into its own in 2014 with the acquisition of Carbon Black. Let’s take a look at how the platform compares with security veteran Symantec’s Endpoint Protection offering.

One such upstart-Carbon Black-takes a different approach to security that utilizes signature-less threat prevention and application whitelisting. Attack methods are increasingly sophisticated and require novel approaches for detection and remediation-since very little is understood about the next generation of threats, opportunities abound for both incumbent leaders and upstarts alike. And with targeted attacks and advanced persistent threats (APT) on the rise, newer players with innovative approaches to security are seeing ample opportunities for supplanting longstanding market leaders and their aging security products. The information security (infosec) space is for the most part divided into two camps: established players using a combination of old/new tactics for combating cybercrime, and market entrants attempting to rethink security from the ground up.

Symantec endpoint