14 DAY TRIAL // Live threat intelligence solutions provider Norse has launched Norse Darklist, a service that enterprises can integrate into SIEM or other security solutions in order to protect their networks against cyber threats.
Darklist provides a list of around 3 million high-risk IP addresses that can be utilized to determine if an organization is targeted by advanced persistent threats (APTs). The list of IPs is continually updated.
“Security professionals know their organizations are under constant attack from high-risk IPs. Unfortunately, they lack the intelligence needed to provide maximum defense against them,” explained Tommy Stiansen, CTO at Norse.
“With Norse Darklist, they have access to unprecedented intelligence that allows them to ensure an effective defense against the Internet's highest-risk IPs, significantly reducing bad actors' ability to breach networks.”
Darklist is powered by Norse’s IPViking live threat intelligence platform, which is capable of identifying malicious IP addresses based on various methods, including anonymous proxy usage, millions of honeypots and custom crawlers.
When a malicious IP is identified, the platform assigns it a risk score between 0 and 100, depending on its history of malicious activity. The IP addresses that are catalogued as high risk are immediately added to Darklist.
The company says the service is not just another block list. The information it contains is live, accurate and contextual.
“The number of attackers and their sophistication is constantly growing, and traditional IP black-lists with only tens or hundreds of bad IPs don't scratch the surface,” noted Richard Stiennon, chief research analyst at IT Harvest.
“Norse's Darklist of millions of continuously updated high-risk IPs has real potential to help customers proactively identify threats within their networks and prevent serious breaches.”
The service is available via a manual or automated REST API query. Additional details on Norse Darklist are available on the company’s website.