I recently discovered a real-time cyber attack monitoring system, brought to us by Norse.
It uses honeypots to determine the attack origins, the targets, type of attacks in real-time and shows them in a very cool looking interactive map. It is really fun to look at this and a little bit scary I must say.
Every second, Norse collects and analyzes live threat intelligence from darknets in hundreds of locations in over 40 countries. The attacks shown are based on a small subset of live flows against the Norse honeypot infrastructure, representing actual worldwide cyber attacks by bad actors. At a glance, one can see which countries are aggressors or targets at the moment, using which type of attacks.
Hovering over the ATTACK ORIGINS, ATTACK TARGETS, or ATTACK TYPES will highlight just the attacks emanating from that country or over that service-port respectively. Hovering over any bubble on the map, will highlight only the attacks from that location and type.
Norse exposes its threat intelligence via high-performance, machine-readable APIs in a variety of forms. Norse also provides products and solutions that assist organizations in protecting and mitigating cyber attacks.
I quote the following from their website, which is definitely worth a look.
We believe you have to be at least as aggressive and entrepreneurial as your digital adversaries in order to defeat them. Chasing the known threats is easy. It’s the unknown that’s hard. That means we can’t just react – we have to pre-empt. We have to smash the attack chain before it gets built.
WE’RE LOOKING FOR TROUBLE
We believe in taking the hits so our customers don’t have to. That’s why we wander the worst neighborhoods of the Internet, looking for trouble, just asking to be attacked. That’s why we’ve built the biggest dedicated threat detection network in the world, and populated it with millions of honeypots, agents, sensors and crawlers.
WE’RE KIND OF SPOOKY
A bunch of our folks cut their teeth at one or another of those three-letter government agencies, or proudly served in the armed forces. We know this business, from the front-lines application of human counterintel, to signals intelligence to the vanguard of cyber intelligence collection from the darkest corners of the Internet.
Norse is dedicated to delivering live, accurate and unique attack intelligence that helps our customers block attacks, uncover hidden breaches and track threats emerging around the globe. Norse offerings leverage a continuously updated torrent of telemetry from the world’s largest network of dedicated threat intelligence sensors. Norse is focused on dramatically improving the performance, catch-rate and return-on-investment for enterprise security infrastructures.
Please let me know (through the comments section below) if alternatives as cool as this one exists.