HPE TippingPoint DVLabs Digital Vaccine

Stop malware and protect sensitive data with ThreatDV

HPE TippingPoint ThreatDV is a subscription service that enables organizations to prevent and disrupt malware activity. The combination of reputation feeds and malware filters allow customers to leverage ThreatDV to protect their sensitive data and optimize network performance. The malware filters are designed to detect infiltration, exfiltration, phone-home, and command- and-control traffic. The malware filters are delivered through an Auxiliary Digital Vaccine (DV) package, updated weekly to keep customers protected from the latest advanced threats. ThreatDV also includes an intelligence feed that is a global database of malicious or undesirable IPv4, IPv6, and Domain Name System (DNS) names. The reputation database collects data from HPE TippingPoint ThreatLinQ global intelligence network, DVLabs malware repository and honeypot network, third-party commercial sources, and open source black lists.

ThreatDV highlights

Block drive-by downloads of malware from known malware depots. Disrupt malware activity and prevent its goals such as ransomware, data exfiltration, espionage, click fraud, etc. Detect command and control activity such as configuration download, version checking, remote access, instructions, etc. Block targeted phishing attacks from compromising users' systems. Block zero-day exploits from known attackers before signatures are available. Block sites that use fast-fluxing IP addresses by blocking DNS host names.

Create custom filters with HPE TippingPoint DVToolkit

DVToolkit is a downloadable application from the HPE TippingPoint Threat Management Center that enables HPE TippingPoint customers to create custom filters to extend threat coverage. Using analysis and development techniques from DVLabs, users can quickly develop and implement filters to block events on their network. DVToolkit also supports the use of regular expressions, which are frequently used in the industry when crafting customer filters. DVToolkit enables customers to expedite time to market for a particular filter if they are under constant attack.

DVToolkit highlights

Broad protection with custom filters for proprietary or user-developed applications. Convert open source filters into HPE TippingPoint Digital Vaccines. Create custom filters in IPv4 and IPv6 environments. Single point of deployment and management for custom-developed and DVLabs Digital Vaccines.

Prerequisites

Digital Vaccine packages, ThreatDV, and DVToolkit require an HPE TippingPoint next-generation network security device and an HPE TippingPoint Security Management System (SMS) with access to the HPE TippingPoint Threat Management Center (TMC) website. ThreatDV requires a separate subscription to be enabled on your network security device. SMS is optional for downloading DV packages and for using DVToolkit. It is only required for downloading and distributing ThreatDV.

• Stop malware and protect sensitive data with ThreatDV
• ThreatDV highlights
• Create custom filters with HPE TippingPoint DVToolkit
• DVToolkit highlights
• Prerequisites

MPN: JC887AAE