Advanced Multilayer Cybersecurity Investigation for Bluefield

Cyber defenders face new challenges due to the recently growing number and sophistication of cyber attacks, including:
• Increased false positive notifications about security events, resulting in wasted time and effort.
• Shortage of talent capable of handling security events.
• Lack of reliable information extracted during sophisticated attacks due to the adoption of various evasion and anti-analysis techniques.
A joint solution by NVIDIA and Custodio Technologies addresses these challenges by extracting useful information from a host’s volatile memory using a security agent residing on an NVIDIA DPU card in an out-of-band and reliable manner. This information is then analyzed by Custodio’s cyber investigation product (CyVestiGO), which automatically “correlates and pivots” events of interest to produce an intuitive graph highlighting indicators of compromise and tactics, techniques, and procedures. This graph includes link and timeline based analysis, easing and accelerating the identification of the root cause and scope of an incident.