Intrusion Inc. Debuts Savant, a New Class of Data Mining and Network Analysis Devices

RICHARDSON, Texas, March 2 /PRNewswire-FirstCall/ -- Intrusion Inc. (OTC Bulletin Board: INTZ) ("Intrusion") announced today Savant™, a new class of data mining and network analysis devices.  Savant defines the next generation of network traffic flow analysis and data mining tools. Current devices simply roll packets into sessions and data flows, but go no further.  This leaves users inundated with large amounts of interesting data, and limited answers.  Whether it is a 100Mbps or 10Gbps network, Savant encompasses all the traditional network performance monitoring, security surveillance and forensic analysis while adding truly unique functions.

In an industry where 20Gbps performance is frequently an exaggeration, Savant's 20Gbps patent pending technology simultaneously provides protocol decodes, detailed data analysis and near 100% packet captures.  Savant's ability to warehouse and logically index hundreds of millions of items per second ensures accurate and meaningful analysis of high-speed networks.  No more guess work or reliance on statistical sampling.  Savant covers near 100% of the basics at faster speeds, but adds unique new capabilities previously unavailable.  "Savant truly represents ground-breaking technology in multi-threaded deep packet analysis and recording.  It is far superior on networks ranging from 100Mbps to 10Gbps because it can capture data deep inside of the flows that have previously been inaccessible at line rates.  No other product on the market today can match Savant's real-time extraction performance at full-duplex 10Gbps speeds," stated Daris Nevil, Savant Engineering Manager.  

Savant Covers the Basics but adds critical new capabilities:

Savant Adds:

• Social Networks and bot network mapping;
• Content and context analysis of content flows;
• History and nature of relationships;
• Communications based relationships;
• Mapping protocol specific personal IDs to humans and their machines – emails, phone numbers, chat IDs, etc;
• Communicants – humans/code/bots.

Savant Improves:

• Flows --- Savant extends well beyond NetFlow, sflow and J-flow, by adding full details beyond mere IP connections and counts;
• Protocols --- Selected data element extraction – get only the data you are interested in;
• Sessions --- TCP sessions to humans and machines;
• Packets --- Augment packet decoding with statistical information including counts, first time seen, last time seen, time-based histograms and more.

Savant's Uniqueness:

Savant integrates knowledge of flows and communicants observed over days, months, and years – without dropping or ignoring a single communication, communicant, or anomaly. Savant's Accumulator™ supports data accretion rates of 400 million items per second and uses a new and innovative approach to "captured" data and database storage.  With Savant, you'll no longer have to imagine what could be possible if you were able to track everything that goes on across your networks – Savant makes significant strides in network understanding.  Whether you use Savant for detecting botnet infections, hidden compromises, measuring customer services response times, discovering criminal behavior, or a myriad of other possibilities previously impossible, Savant is a generational step beyond the current offerings.  Savant gives you full tracking and instrumentation of email, chat, DNS, VoIP, socket API calls, SQL, or any collation on protocols.  Savant does not use simple statistics, but gives you the ability to instrument items you might want to understand about what is flowing across a network trunk or backbone. Using Savant, a user can collate by conversations within higher layer protocols such as giving traffic flow history by email address, chat ID, server name, VoIP phone number, service API, database, or anything that is based on a decoded protocol.

An old proverb says, "Wisdom is knowing what to ignore and what to pay attention to."  Savant is a tool that is built to make a wise user far more productive - and provides pre-cooked analysis to solve hard challenges in minutes rather than weeks.  "I've done network analysis since the early days of SNMP, RMON, and Netflow. Savant was what I really wanted all the time. We developed Savant out of a sense of disappointment with other tools – and the idea that doing it right would be helpful to many network experts," stated Joe Head, Sr. Vice President and co-founder of Intrusion.

One of Intrusion's partners is launching a service that leverages Savant's content capture and storage ability to instrument social network discovery and intramessage linguistic analysis.  This captured data is used to discover pockets of employee strengths in building indices of knowledge, skills, abilities, motivation, and talent inside large workforces.  In this instance, Savant is unbiased to the nature of the structure or perceived internal hierarchy of the organization.  Ben A. Bittle, Intrusion's VP of Marketing and Product Development stated, "Savant's ability to capture approximately 100% of the content of a given application and seamlessly import the collected content into a plurality of third-party applications has led to many eye-opening discoveries.  Social networking relationships that would have been previously overlooked or unknown are now easily displayed and understood by the organization."  In other applications, Savant is used to discover infected hosts on DoD contractor networks and to discover other illegal activities previously unknown to the analyst.

Savant is not another simple incremental improvement of old traffic analysis captures, but a better way of capturing and collating network forensics for a variety of applications. Savant has been under development for the past four years and is shipping now.  Pricing is available for 100Mbps, 1Gbps and 10Gbps units and can be obtained by contacting [email protected] or 972.301.3627.

About Intrusion Inc.

Intrusion Inc. is a global provider of entity identification systems, high speed data mining, regulated information compliance, data leak prevention and data privacy protection, and network intrusion prevention and detection products.  Intrusion's product families include TraceCop™ for entity identification, Savant™ for network data mining, Compliance Commander™ for regulated information compliance, data leak prevention and data privacy protection, and SecureNet™ for network intrusion prevention and detection.  Intrusion's products help protect critical information assets by quickly detecting, protecting, analyzing and reporting attacks or misuse of classified, private and regulated information for government and enterprise networks.  For more information, please visit www.intrusion.com.

This release contains certain forward-looking statements, which reflect management's expectations regarding future events and operating performance and speak only as of the date hereof.  These forward-looking statements involve a number of risks and uncertainties.  Such statements include, without limitations, statements regarding future revenue growth and profitability, as well as other statements.  These statements are made under the "safe harbor" provisions of the Private Securities Litigation Reform Act of 1995 and involve risks and uncertainties which could cause actual results to differ materially from those in the forward-looking statements.  The factors that could cause actual results to differ materially from expectations are detailed in the Company's most recent reports on Form 10-K and Form 10-Q, particularly under the heading "Risk Factors."

SOURCE Intrusion Inc.