Pen Tester Joe McCray speaks on his experience with DB Networks machine learning and behavioral analysis based products. Joe explains how the DB Networks technology was able to identify all of his advanced SQL Injection attacks in real-time after he had successfully bypassed the Web Application Firewall, exploited the application. and was actually attempting to attack the database. DB Networks technology operates non-intrusively from a network tap or span port at the database tier and uses Behavioral Analysis to identify all rogue SQL statements attempting to interact with a database.
Behavioral Analysis is opening up a new era in threat detection and proving to be far superior to signature based black listing technologies.