海角大神

For years, Lockheed Martin defended its cyber frontiers from sophisticated attacks with an innovative system for cracking open and inspecting incoming data.听

Now they鈥檙e giving that system, called Laika BOSS, away. 聽

鈥淲e鈥檝e built an incredible amount of our tools on top of existing open source frameworks,鈥� says Adam Zollman, a network defender at Lockheed who demonstrated the Laika BOSS system at the Black Hat cybersecurity conference in Las Vegas last week.

鈥淣ow, we鈥檙e able to contribute back, to share in-kind, because that鈥檚 what the security community is built on, this sharing and crowdsourcing of our defenses,鈥� he says. 鈥淲e say cyber is a team sport. This is our recognition that we want to be 鈥� and are 鈥� a part of that team.鈥澛�

The news of Lockheed releasing Laika BOSS .听

The Laika BOSS system was developed and used internally at Lockheed and then rolled out to commercial clients. Lockheed works with private sector firms in sectors ranging from healthcare and financial services to energy and utilities in addition to government clients.听

What makes Laika BOSS unique is its ability to strip away the layers of 鈥渙bfuscation and obstruction,鈥� as Lockheed cyber intel analyst Matthew Arnao put it in Lockheed鈥檚 Black Hat presentation, that hackers and malware purveyors use to slip past cyber defenses.听

By drilling down to the individual file level, Mr. Arnao says the system allows analysts to find 鈥渂adness no matter how many layers you have to go through. Bad guys always find new and interesting ways to hide their malware.鈥澛�

While there are many malware analysis tools and reverse engineering resources available to analyze malicious code, most work best in one-off, isolated conditions and are not capable of real-time processing, as . 聽As a result, most security teams have to manage a disparate set of analysis tools with different capabilities. This inefficient solution presents a frustration for many defenders: being able to detect malware in a lab, but not able to scale that approach to successfully detect malware and defend an enterprise.

Because Laika BOSS can detect malware in the wild and not just in a controlled setting, it empowers security analysts to focus on analyzing and defeating threats rather than just identifying them, says Mr. Zollman. 聽

鈥淲e have human adversaries, and that means we need human defenders. There are no shortage of security tools that are black boxes with lights that go 鈥榖ing鈥� and we all have enough of those and they are of somewhat dubious value,鈥� he says. 鈥淲e also have network defenders, and network defenders are great -- but the problem is they don鈥檛 work at machine speed. Our goal is to enable analysts by providing the power and flexibility at machine speed to actually defeat malware.鈥�

The system, , can be used by any organization with a security team. It scales up across hundreds of powerful computers but can also run on a tiny processor like a , commonly used for small connected devices.听

While Laika BOSS helps defenders defeat threats at the outset, it also helps analysts learn from past security errors. Its model of 鈥渆xploding鈥� digital objects to look inside them creates reams of metadata, which analysts can use after a digital intrusion to do forensic analysis and see where problems emerged.

By open-sourcing their technology, moreover, Lockheed believes that its internal defenders and clients will benefit from innovations built by outside security researchers and analysts.听

鈥淲e can all take advantage of crowdsourcing our defenses,鈥� says Zollman. 鈥淥ur hope is that [Laika BOSS] becomes an integral part of security. It鈥檚 key that it鈥檚 an enabler for analysts. If you鈥檙e looking for set it and forget it security, Laika BOSS isn鈥檛 for you. But if you鈥檙e looking for flexibility and power in analysis, we think anybody can take advantage of it.鈥�

Read more about .