Symantec utilizes security intelligence and experts to deliver Cyber Threat Analysis Program

CTAP provides access to one of the largest commercial repositories of cyber security-focused vulnerability data and cyber threat intelligence combined with Symantec's broad security toolset.

Symantec delivers this access through highly skilled analysts placed at a client's site to strengthen the organization's defensive posture, while increasing their proactive capabilities.

As an addition to Symantec's integrated, proven Security Intelligence Services, CTAP is designed to extend the customer's view of the threat landscape and provide the resources to deliver effective risk mitigation and response efforts on demand.

The program leverages Symantec's extensive Global Intelligence Network and the broad security expertise only Symantec possesses to provide customers with detailed reports and validated intelligence on the attacks, malicious code activity, phishing and spam that organizations experience daily.

Symantec's Internet Security Threat Report Volume XIV, released in April of 2009, demonstrated the extent of today's cyber security threats.

Symantec created more than 1.6 million new malicious code signatures in 2008 and blocked an average of more than 245 million attempted malicious code attacks across the globe each month during 2008.

Furthermore, 90 percent of all threats detected by Symantec during the study period attempted to steal confidential information.

"Organizations today face the significant challenge of managing cyber security threats that arrive more quickly, are more sophisticated and allow for minimal time for proactive defense, combined with the pressure of driving down costs and leveraging past investments more effectively to enhance cyber security posture,"

said Jeff Ogden, senior director, consulting, Symantec.

"The Symantec Cyber Threat Analysis Program mitigates cyber risk with a comprehensive approach to threat identification, intelligence gathering and validation, and delivers timely response by seasoned professionals to protect critical client information, all supported by specialized tools to enact response."

As part of CTAP, Symantec Cyber Threat Analysts fuse client data and public data with CTAP intelligence to quickly identify emerging cyber security threats, determine the true nature of the attacks, develop countermeasures and enact solutions. By leveraging Symantec's global repositories, the analysts give customers access to a depth and breadth of information and tools that are only attainable through this program, including:
- Attack, vulnerability and malicious code intelligence
- Phishing, spam, data leakage, spyware, adware and virus intelligence
- Underground cyber economies and honeypot network intelligence
- Symantec's Cyber Threat Analysis Program analyst community
- Cyber research facilities and support
- Related analysis and cyber specific reports

Symantec provides both on-site and remote experts who customize the analysis, response and actions to meet the design specifications for each client. Deep expertise focuses on four key areas: cyber intelligence, network operations analysis, malicious code analysis and forensics.

CTAP leverages sophisticated tools, including data intelligence repositories with embedded toolsets, along with Symantec internal systems, enabling CTAP analysts to identify emerging Internet security threats, develop defenses and distribute solutions to create a more secure operational environment thereby enhancing organizations' situational awareness and response.

"For most organizations, dealing with today's security threats and vulnerabilities requires significant internal resources to proactively manage risk," said Irida Xheneti, Security Services Research Analyst at IDC.

"Securing corporate assets in an era of extensive technology advancement and rapid proliferation of threats, organizations are looking for comprehensive and proactive security solutions that will enable them to quickly detect vulnerabilities and quickly mitigate them. Through the Symantec Cyber Threat Analysis Program, customers will be able to leverage proactive security intelligence and expertise to improve their organization's risk management posture in a cost effective manner."

Symantec Global Intelligence Network
The Symantec Global Intelligence Network maintains massive databases from data collected around the world to identify emerging threats, develop defenses and distribute solutions.

This network captures worldwide security intelligence data that gives Symantec analysts unparalleled ability to identify, analyze, deliver protection and provide informed commentary on emerging trends in attacks, malicious code activity, phishing and spam. Symantec maintains 11 Security Response Centers and utilizes 240,000 attack sensors to track malicious activity.