Technology Overview

Vision, Innovation, Technology

Nucleon has a vision of secured networks where people can focus on their life and business instead of worrying about cybersecurity.

Hendrik Antoon Lorentz was a famous Dutch physicist who discovered the factor by which time, length and mass change for an object moving at speed. He showed that it is possible for objects to become smaller as they reach faster speeds. This is the origin of Nucleon’s innovations in cybersecurity. Nucleon recognizes that cyberspace is not a static constant place but an ever-changing dynamic environment that can look different from different places. We believe that’s how security should be approached when dealing with the cyber world. Download our free white paper for more details.


Technology spotlight

Polymorphic Sensors

Nucleon operates hundreds of globally distributed polymorphic sensors to monitor the internet and detect and learn from known and unknown attacks. Nucleon’s polymorphic sensors might best be thought of as the natural evolution of advanced honeypots. Each polymorphic sensor is crafted to look and feel exactly like the real thing, whether it mimics a bank, municipality or airport. A polymorphic sensor is designed to look like a real network with vulnerabilities waiting to be exploited. The polymorphic technology allows each sensor to change or replace its location as well as the type of network it mimics, protecting its real identity from being revealed.

AI – Deep Learning

All the data collected by the sensors is transferred into the main system, also known as Brain. Brain is a sophisticated cloud that was developed by Nucleon, and advanced machine-learning technologies are used for further in-depth analysis and verification of attacks and malware. All analyzed data collected autonomously by the polymorphic sensors is forwarded and saved to the Brain, automatically and in real time. The data is stored in multiple databases and cross-referenced in different ways using different algorithms, to search for possibly hidden relationships between attacks and actors. This is all done completely autonomously, resulting in a list of live indicators of cyber threats.

Hybrid Intelligence

Nucleon has developed the innovative ability to monitor attacks that are being spread and targeted using SMS and messenger apps. Nucleon is actively tracking threats on the internet and outside. Whether it’s a mobile phone running Android, iOS or other operating systems, Nucleon can monitor threats that use non-cyber methods to attack and spread. For more information, download the Hybrid Intelligence white paper.

Brain

The Brain uses the data collected from the polymorphic sensors, and aggregates, processes and analyzes it in order to understand where the threats are really coming from . The Nucleon Brain utilizes advanced artificial intelligence to perform in-depth analysis, verification, and reporting of threat actors, attacks, and malware.

HOW IT WORKS

1

Intelligence Gathering

In order to generate cyber intelligence, information about cyber attacks needs to be gathered. This is done using dedicated proprietary cyber sensors of different types that constantly gather information about cyber attacks around the internet. These sensors are sophisticated decoy systems that emulate different networks and services.

2

Basic Analysis

In order to remove and eliminate irrelevant results, analysis is performed about each of the cyber attacks recorded by the sensors. Each cyber attack is analyzed in order to classify and categorize the attack data according to defined parameters.

3

Deep Analysis

Nucleon’s analysis technology, known as Brain, uses advanced AI and machine-learning functions in order to predict and issue early warnings about upcoming attacks. Each threat contains information about the context of the cyber attack that can be used by threat intelligence teams to investigate without needing to make additional API calls.

4

Prioritization, Context and Delivery

The processed intelligence is delivered by APIs available 24/7, including precise information about botnets, APTs, DDoS, attack sources and malicious URLs/IPs, hash files and more. Nucleon’s intelligence feeds complement your security measures and can be fully integrated with your SIEM and other existing security and defense systems, enabling organizations to utilize intelligence as if they had their own additional dedicated team for threat intelligence.

The cornerstones of Nucleon’s framework

Unleash the power of Nucleon. Instead of having to search for the cyber threats that are relevant to you, with Nucleon you can focus on dealing with the threats specific to your network.

Download the white paper now!

Get an overview and in-depth explanations about the technology behind Nucleon.