DEVOPSdigest

Enea launched the Enea Qosmos Threat Detection SDK.

The Qosmos Threat Detection SDK enables the integration of Enea's flagship deep packet inspection (DPI) engine, Qosmos ixEngine, with core IDS capabilities drawn from Suricata, the widely trusted open-source Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) solution, significantly enhancing performance and scaling for large, multifunction cloud-based platforms.

The Qosmos Threat Detection SDK facilitates easy integration into third-party software developed by cybersecurity solution vendors, large organizations, and managed service providers, and enables the creation of custom rules tailored to unique network environments. The Qosmos Threat Detection SDK is fully scalable, ensuring customers benefit from simplified licensing, improved accessibility, and optimized operating costs.

By drawing on the DPI-based traffic visibility of Qosmos ixEngine and combining it with core IDS functionalities, Qosmos Threat Detection SDK delivers cybersecurity performance improvements up to twofold from traditional IDS/IPS systems. It leverages a single network traffic visibility function, eliminating the need for dual packet processing, and ensures highly efficient network traffic data processing at scale without compromising speed.

The integration with Enea's Qosmos ixEngine delivers superior traffic visibility. In particular, the software development kit enables improved visibility into encrypted and evasive traffic, which, in turn, greatly boosts overall malware and threat detection, and it significantly reduces false positives through improved parsing. Customers can further use this enhanced visibility to improve security performance by creating custom rules tailored to their environments.

Jean-Pierre Coury, Vice President of Enea Traffic Intelligence, commented, "Faced with the performance and scale requirements of today's cloud-centric, multifunction IT platforms, traditional IDS/IPS systems are falling behind. Enea Qosmos Threat Detection SDK meets these challenges with a threat detection engine delivered in the format of a software development kit capable of tight integration with third-party solutions, easy customization, and radically improved cybersecurity performance."