Computer & Network Security - Petah Tikva, Center District, Israel
DataFlow is a provider of Application Security Management (ASM) solutions for the Microsoft .NET Framework and JAVA Run-time environment. With its innovative products, DataFlow delivers a complete suite of application cyber security solutions. Most IT data security is based on essentially static, passive approaches. DataFlow is among the first product to have a working, active approach that deals with the source of the majority of security problems, from the code itself. This is called Runtime Application Self Protection (RASP). Software, and especially enterprise software, is built differently than it was when IT security focused on building defenses to outside intrusions be it firewalls, anti-virus, web application firewalls and the like. Most enterprise application software is coded in managed languages such as Java or the .NET platform, and only a small portion of the total code in an application is actually written in-house. Most of it is contributed from third party libraries. With very few exceptions almost no one reviews this code for security holes. Think of the scene in the Batman movie The Dark Knight where Lucius Fox and Bruce Wayne are standing in front of a giant bank of screens, listening in to every cell phone conversation in Gotham. That's a good analogy for what we do. We listen in to every IO conversation the application does and especially look at access to data and other external resources such as Files, External Services We constantly monitor and log every key function that runs in the application. This gives us a lot of data to do behavior analysis as opposed to the heuristic approach used by many other systems.