I queried the Trace appliance for all of the stored packets between the Ubuntu workstation and the unknown peer device for the previous few days and found a large number of outbound websocket connections over a nonstandard port-6332. It isn't unusual for an employee's workstation to communicate with a peer at a cloud provider as part of normal internet browsing, but the direct IP connection was unusual. A search through the American Registry for Internet Numbers (ARIN) revealed that the peer IP address belonged to a droplet in the DigitalOcean cloud infrastructure. I checked our internal applications and learned that the affected device was an Ubuntu workstation for one of our employees. I began my standard investigation process with measured expectations. Reducing false positives plays a big part in creating accurate detectors, so I wasn't overly alarmed.
Less than a day after I expanded our command-and-control detector to include web socket connections, I was rewarded with the following detection: a potential malware infection. Our internal network is well equipped with ExtraHop Reveal(x) Ultra: a Discover appliance, which captures wire data from the network for metric analysis, a connected Explore appliance, which indexes and stores transaction records, and a connected Trace appliance, which indexes and stores packets.īy leveraging these network traffic analysis capabilities, I was able to take moderately suspicious behavior and dig into the details of an exfiltration attack that would have been otherwise impossible to find. In addition to today’s funding, the company is adding new members to its board of directors, including Jason Mendelson and Brad Feld of Foundry Group, Manu Kumar of K9 Ventures and Gary Bradski of Willow Garage.In early November, while refining our anomaly-detection service, I found a data leak on our network. Occipital added cloud-based processing to 360 Panorama in May, and Reddy said that will also show up in future products.īoulder, CO based Occipital was founded in 2008 by Reddy and Jeff Powers. In 360, we’re not only doing computer vision on devices, but we’re wrapping it into an experience everyone can understand.” “360 Panorama has been an awesome beta test for us, and will continue to evolve rapidly. The company has learned quite a bit since it launched 360 Panorama, Reddy said, and there’s still more to come for fans of the app.
Reddy said that Occipital has more applications in the wings that will take advantage of its new platform, but he couldn’t offer up any details just yet.
It’s something far too time consuming and costly for 99.9 percent of the developers out there to tackle, so we’re taking it on in a big way.” The technical challenge in making AR ‘just work’ is one of the hardest problems in computer science right now. “That’s why we focus more on computer vision than AR when we explain our focus. “We’re wholeheartedly approaching augmented reality as a computer vision problem,” Occipital co-founder Vikas Reddy told VentureBeat in an email. In the mobile app world, that most often refers to augmented reality offerings like Google Goggles or Yelp’s Monocle feature. The notion of computer vision refers to the ability for computers to extract data from images or video.
“We’re using computer vision to make real world environments computationally interactive and fun, thereby extending the computational reach of your device into the visual space around you,” Occipital wrote in a blog post today.
0 kommentar(er)
