SANDS Lab 推出供隔離網絡使用的 CTX

The CTX threat intelligence interface for isolated networks. (Photo: SANDS Lab)

SANDS Lab said on Nov. 5 that it has launched CTX, a cyber threat intelligence (CTI) service designed for use in isolated network environments.

Threat intelligence refers to information that helps organizations identify and respond to potential cyberattacks in advance. Such services typically operate through web or cloud platforms, limiting their use in environments where internal business networks are separated from the public internet.

For example, analyzing a file suspected of containing malware may require transferring data from an internal network to an external analysis service. This creates a risk that personal information or internal documents contained in the file could be exposed.

Files submitted to external analysis services may also be stored on the provider's servers or shared with other users, depending on the service's policies.

The air-gapped version of CTX incorporates an AI model trained on 3.3 billion threat records collected and analyzed by SANDS Lab. When a security administrator uploads a suspicious file, the AI assesses whether it is malicious and evaluates its risk level. Because the model runs within the internal network, there is no need to access external AI services or transmit analysis data to outside servers.

The service also supports a separate update mechanism to incorporate the latest threat intelligence. Threat data and AI model updates can be imported daily or monthly using external storage devices such as USB drives or an organization's network interconnection solution.

"Isolated networks are among the environments that need threat intelligence most, yet they face restrictions in accessing the latest threat information," said Kim Ki-hong, CEO of SANDS Lab. "We aim to help organizations respond to emerging threats by making our accumulated threat data and AI analysis technology available within isolated networks."