New cloud-based threat intelligence web services.

TITANIUMCLOUD™ CLASSIFIES UP-TO-DATE INFORMATION AND PROVIDES POWERFUL ALERT WEB SERVICES ON OVER 1 BILLION MALICIOUS AND NON-MALICIOUS FILES AND THEIR INTERNALS. ReversingLabs, the global leader in automated static malware analysis tools and services, announced today the TitaniumCloud™ (TiCloud™) web service that provides the industry’s most comprehensive source for threat intelligence on unknown files.

The TitaniumCloud database contains information on:

• • 1 billion goodware samples
  • 70 million malware samples with over 100,000 new samples daily
  • 4 billion IP addresses and domains.

“TiCloud allows our customers to quickly classify suspicious files as they arrive in their organizations,” said Mario Vuksan, CEO of ReversingLabs.  “This saves them hours of analysis on files already known to the industry and analyzed by a variety of tools.”

 TiCloud supports powerful queries and alerts.  Queries support advanced searches based on file contents, including: file hash, section hash, certificate information, imports, exports, section names and embedded strings.  Alert services use custom-defined rules to check for conditions that spur notification.  Initially, TiCloud supports three alert services:

• • Brand Notification sends an alert anytime new malware samples contain the customer’s domain name, IP addresses or product names to identify threats targeting their organization.
  • False Negative Detection allows a customer to upload suspicious files and receive alerts when they are detected by any of 25 venders’ anti-virus products in twice daily scans.
  • False Positive Detection allows a customer to upload files of interest and receive alerts when they fail a twice-daily virus scan.  Software vendors can receive immediate notification if any of 25 vendors’ anti-virus products falsely detect components of their products.

TiCloud not only identifies files but also provides rich information about their contents.  Every sample is processed using the ReversingLabs TitaniumCore™ (TiCore™) automated static decomposition engine to extract all contained files and their internal information.  The samples are recursively unpacked, decompressed, decrypted, repaired and de-obfuscated.  The information extracted for the resulting components includes format, format validation, strings, sections and certificate chains.  Samples are also scanned twice daily with 25 anti-virus products and the history is stored in TiCloud.

TiCloud supports automated workflows through a REST or SOAP-based web services interface.   In addition to the cloud service, customers can purchase an on-premise appliance to meet high performance and security requirements. The web services interface enables customers to integrate TiCloud with their applications and workflow.