EMC Acquires Security Automation Vendor NetWitness

By Chris Preimesberger  |  Posted 2011-04-04 Print this article Print

The timing of the acquisition is uncanny; EMC and RSA could have used this extra protection against a major hacker assault in March.

Rumors that circulated recently about EMC buying another data security-related company turned out to be true after all.

The storage and data security giant announced April 4 that it has acquired Virginia-based NetWitness, a provider of network security monitoring and analysis software, and had closed the deal on April 1. Terms of the transaction were not disclosed.

NetWitness will operate as a part of RSA, the security division of EMC. The transaction is not expected to have a material impact to revenue or EPS for the full 2011 fiscal year, EMC said.

eWEEK and other publications had been tipped off on March 24 in emails about the impending deal, but nothing factual was made available for publication at that time.

NetWitness provides what it describes as "pervasive" network visibility with its networking monitoring package. This enables security teams to detect and remediate advanced threats in real time as the automated software handles the background investigation process. 

Timing of Deal Uncanny

The timing of this acquisition is uncanny; EMC and RSA could have used this extra protection against a major hacker assault in March.

Only three weeks ago, on March 17, RSA revealed that it had been hit by an "extremely sophisticated" attack and that information related to its SecurID two-factor authentication products had been stolen.

Intruders succeeded in breaching RSA networks recently as part of an Advanced Persistent Threat attack, RSA Chairman Art Coviello wrote in an open letter to customers on the division Website on March 17. Attackers stole information specific to RSA's SecurID two-factor authentication products, Coviello said.

Coviello on April 1 told security analysts in a conference call that the attack that breached RSA's defenses appears to have begun as a phishing attack. RSA on April 4 was still in the midst of its investigation.

"With NetWitness, RSA gains a well-reputed security analysis and visualization platform that has become popular with investigative security professionals who value more than just insight into a more complete context of threat activity," EMA security analyst Scott Crawford wrote in his blog.

"Adding to NetWitness's edge in its space are the company's impressive analytic and visualization capabilities, which have recently expanded with malware analysis and insight that better informs security management."

Becomes Core Element in New Security Package

NetWitness' frontline product will become a core element of RSA's Advanced Security Management Solutions by providing real-time visibility into network activity and adding efficiency to incident investigations and workflow, EMC said.

Last month at the RSA 2011 Conference in San Francisco, NetWitness unveiled Spectrum, a new product that replicates the knowledge, process and workflow of malware analysts. When informed by data collected through RSA's FraudAction and CyberCrime Intelligence services, Spectrum can perform a key role in addressing evolving threats.

RCA will combine the NetWitness network monitoring and analysis package with its own enVision platform, RSA Data Loss Prevention Suite and RSA CyberCrime Intelligence service to provide more options for users.

Chris Preimesberger Chris Preimesberger was named Editor-in-Chief of Features & Analysis at eWEEK in November 2011. Previously he served eWEEK as Senior Writer, covering a range of IT sectors that include data center systems, cloud computing, storage, virtualization, green IT, e-discovery and IT governance. His blog, Storage Station, is considered a go-to information source. Chris won a national Folio Award for magazine writing in November 2011 for a cover story on Salesforce.com and CEO-founder Marc Benioff, and he has served as a judge for the SIIA Codie Awards since 2005. In previous IT journalism, Chris was a founding editor of both IT Manager's Journal and DevX.com and was managing editor of Software Development magazine. His diverse resume also includes: sportswriter for the Los Angeles Daily News, covering NCAA and NBA basketball, television critic for the Palo Alto Times Tribune, and Sports Information Director at Stanford University. He has served as a correspondent for The Associated Press, covering Stanford and NCAA tournament basketball, since 1983. He has covered a number of major events, including the 1984 Democratic National Convention, a Presidential press conference at the White House in 1993, the Emmy Awards (three times), two Rose Bowls, the Fiesta Bowl, several NCAA men's and women's basketball tournaments, a Formula One Grand Prix auto race, a heavyweight boxing championship bout (Ali vs. Spinks, 1978), and the 1985 Super Bowl. A 1975 graduate of Pepperdine University in Malibu, Calif., Chris has won more than a dozen regional and national awards for his work. He and his wife, Rebecca, have four children and reside in Redwood City, Calif.Follow on Twitter: editingwhiz

Submit a Comment

Loading Comments...
Manage your Newsletters: Login   Register My Newsletters

Rocket Fuel