Alphabet Launches Cybersecurity Tools

An already frenzied pool of cybersecurity vendors just witnessed a whale enter the waters: Google owner Alphabet today launching a cybersecurity offering built by the team who have designed and run Google’s own internal security infrastructure.
Alphabet subsidiary Chronicle – born in 2016 as a project within X, Alphabet’s moonshot factory – says it will offer three cybersecurity products: “Backstory”, “Uppercase” and “Virustotal” (a malware tracing tool Google bought in 2012).
It is Backstory – an “infinitely elastic” browser-based threat analysis application that runs on purpose-built core Google infrastructure – that stands out for impact: not least its likely ability to displace existing Security Information and Event Management (SIEM) tools in a cybersecurity market estimated to be worth $177 billion by 2025.
Backstory is essentially a “Google” of the threat landscape, capable of ingesting, retaining, and crunching high volumes of threat data for instant analysis. (Chronicle CEO Stephen Gillett described it in a Medium blog as “the first global security telemetry platform designed for a world that thinks in petabytes.”)
Gillett said: “Chronicle built a new layer over core Google infrastructure where you can upload your security telemetry, including high-volume data such as DNS traffic, netflow, endpoint logs, proxy logs, etc., so that it can be indexed and automatically analyzed by our analytics engine.” (Yes, so do many SIEMS. The difference here is scalability.)
Alphabet Cybersecurity Offering May Displace SIEMs
As an accompanying whitepaper [pdf] notes, SIEM platforms often buckle under large data volumes. Moreover, high-volume telemetry from endpoint detection and response (EDR) systems (i.e. your average antivirus product) are rarely fed into a SIEM and where/when it ingested, is typically only retained for a few weeks.
“Threat intelligence feeds are supposed to add more context, but are often too noisy or redundant and cause more static than they eliminate. Outsourcing to an MSSP simply turns capex into opex and shifts the problem elsewhere,” Chronicle says.
Backstory lets enterprises could privately retain, analyse and search the massive amounts of security and network telemetry they generate, with the tool indexing, correlating, and analysing the data — against its own data sets and against any third party and/or curated threat signals a given customer wants to feed into it.
Chronicle described it as an “infinitely elastic container for storing your enterprise security telemetry” with fixed pricing that won’t be based on telemetry volumes.
“Because we don’t charge based on data volume, you can afford to keep every bit of security data you generate”, the company said without offering further price details.
“[A user] would know, in milliseconds, every device in the company that communicated with any of domains or IP addresses [associated with a threat anywhere in Backstory’s huge data pool], ever – even if this required searching through dozens of petabytes of telemetry. Put differently, when this company’s CEO asked “could our bank have been hit by the same attack as the DNC?” the analyst could immediately answer “no, we’re safe” or “yes, we’d better take action… None of this required a single query to be written, and all can be performed with a single console.”
Backstory can ingest a variety of telemetry types, through a variety of methods, Chronicle said. The most common is the Backstory Forwarder, a lightweight software container, deployed in the customer’s network, that supports syslog, packet capture, and existing log management / SIEM solutions.
“Customers can also send telemetry via a secure API directly to the Backstory platform. Backstory can also pull telemetry from other cloud services such as Amazon S3. For example, Crowdstrike’s EDR solution pushes its endpoint logs to S3, and a joint Backstory-Crowdstrike customer can configure Backstory to pull from S3. In contrast, Carbon Black’s EDR uses an event forwarder to push endpoint telemetry directly to Backstory. Simply put, there are many ways for customers to upload their telemetry.”
source cbronline
Industry: Cyber Security News

Latest Jobs
-
- Network Security Engineer
- Germany
- €550 a day
-
German- based contract opportunity This is an onsite based position, we would need the Network Security engineer to be able to work on the client site 5 days a week Seeking an experienced Network Security Engineer for a leading technology company. Strong expertise in firewall/IPS solutions, proxy solutions, and certificate management is required. Good hands-on experience in networking and web-related technologies necessary. Strong problem-solving skills and the ability to work under pressure are essential. we are looking for a Network Security Engineer with the following experience: · Expertise in Administration, Management & Troubleshooting of Firewall / IPS solutions / Proxy solutions/Certificate Management Solutions · Good Hands-on Experience on security devices (PaloAlto/ /McAfee Proxy/CISCO ISE/Certificate Management) · Good Hands-on Experience in Networking with skills of switching, routing & wireless Technologies · Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocol · Configuration of NAT / PAT, firewall policies, profiling, objects, AD-Integration, backup – restore · Knowledge of Subnetting TCP/IP Communication, VLSM Configuration of VLAN VTP · Configuration of Routing Protocols e.g. RIPv1 & v2, OSPF, EIGRP, BGP Knowledge of standard and extended ACL 12 month contract
-
- IAM Consultant
- N/A
- Upto £110,000 depending on level of position
-
Identity Access Management (IAM) Consultant Location: Germany We are seeking an experienced IAM consultants in Germany. we are looking for people from consultant through to Architect, The ideal candidate will have previous IAM deployment experience and be fluent in German. Key responsibilities: Design and implement IAM solutions for clients Provide expertise on industry best practices and standards Troubleshoot and resolve IAM-related issues Work closely with clients to understand their business requirements and provide solutions to meet those needs Qualifications: Previous deployment experience with IAM solutions Fluency in German Strong understanding of IAM technologies and principles Excellent communication and project management skills If you are an experienced IAM consultant with a strong track record of delivering successful projects, please apply today.
-
- ForgeRock Consultant
- Spain
- Upto €85000 plus benefits
-
ForgeRock deployment consultant is needed for this expanding IT Services business within Spain, to act as their ForgeRock technical lead, Responsibilities include: High level and low level design, Scoping the techical needs of the project design, configure, develop and test the forgeRock deployment. We are looking for a strong IAM consultant ideally with ForgeRock experience, Must have strong Oauth 2.0, SAML and API experience
-
- IAM Consultant
- France
- Upto €85000 plus benefits
-
An Identity & Access Management Consultant is needed for an expanding IT Security consultancy, based in France. (Remote role with monthly office meet-ups) The Identity & Access Management Consultant will be responsible for the technical design and implementation of Identity & Access Management/IAM products for a wide variety of clients. Deliver bespoke end-to-end consultancy service to our clients, from gathering requirements through to implementation. Work in a close team designing, developing, and implementing first-class IAM solutions. Manage client relationships, working closely with key stakeholders to continually evaluate business requirements and ensure the highest quality solution delivery. If you are interested we are looking for an individual with Previous experience working within the IAM or CIAM field is essential, Strong knowledge with SAML and Oauth and ideally OpenID Previous experience from any of these technologies: One Identity, SailPoint, Saviynt, Ubisecure, Ping Identity, would be advantageous