Bright House Networks Threat Detection System

Threats to your network security are not as easy to spot as they once were.  Malicious software is often designed to be undetectable.  Even with a traditional firewall or anti-virus, not all threats can be stopped.  On any given day, a single firewall may handle thousands of events.  It becomes nearly impossible for an IT administrator without special tools and training to be able to detect a problem.  And even if they do, for most IT administrators, security isn't their only job.  Today, they may have no time to investigate.

Each day, our Threat Detection System examines millions of event records from firewalls all over the country.  Our automated systems sift through the records that result from normal Internet usage and search for events that indicate a problem.  Some times the only indication of a problem is a simple change in the behavior of a computer from one day to the next.  For example, if a computer that never sends any email suddenly starts sending a large quantity of emails, it is mostly likely infected with malicious software and will trigger an event in our systems.  There are dozens of tests we perform every few minutes and every hour to determine if there are threats to your network.

Once our systems determine there is a potential problem, all of the related information is combined and presented to a security analyst whose job it is to investigate the event and determine if there really is a threat.   Once we investigate the incident and determine there is a problem, we immediately contact you or your IT administrator to resolve the issue.