The Perception system was developed for the UK Government in 2011, and declassified for commercial sale in 2013. The commercial variant was completed in 2015 and has been in constant development ever since.

Perception is a dedicated cyber security tool designed to find malicious activity or configuration vulnerabilities on a network regardless of source or exploit.  It analyses all network traffic at a network core, or multiple cores, and identifies types of behaviour of that traffic.  It then carries out anomaly detection, and then carries out deeper analysis on the more unusual traffic through the network.  The data collected by Perception includes everything an analyst could need to discover malicious activity, possible network vulnerabilities, or network misconfigurations.  This data is presented to the analyst in the most simple format possible, so they can rapidly triage each behaviour, and with packet captures collected, they're able to see exactly what was travelling through the network if anything looks suspicious.  We believe Perception can increase the efficiency of any analysis team by an order of magnitude, why don't you contact us for a free trial to see for yourself?

 
 

The Perception sensor is a 1U high blade server that plugs into a SPAN port or utilises a network tap. Completely invisible to the network, it has no effect on speed or network performance whilst it monitors.  Multiple sensors can be used on the same network if multiple network cores are present, and they all send behavioural information back to a Central Correlation Server (CCS).


ForensicAI

Introduced in our version 2.0 software update, ForensicAI is a feature built into the Perception CCS that is designed to generate alerts from the behaviours that Perception sensors generate.  We spent a long time monitoring how our analysts identify vulnerabilities and malicious activity on a customer network, and built an artificial intelligence to mimic this task.  

ForensicAI monitors all behaviours generated from the sensors and constantly correlates them with one another.  As a result, the system can identify suspicious behaviour from a series of seemingly unconnected and benign individual activities over an extended period of time.  ForensicAI allows Perception to generate alerts with extremely low false alarm rates and incredible detection rates.

Our SOC or yours?

 

Perception is available as  a managed service, which means all alerts head back to our Security Operations Centre (SOC), where industry-leading analysts and researchers can provide all the monitoring capability you'll need. Alternatively, you can self monitor the Perception system from your own site or that of your preferred MSSP.

 

 

Serviced

The data Perception gathers gives the analysts at the SOC everything they need to know to categorise malicious activity. The output of this analysis is fed back to your network security department and includes information about:

  • Authentic but anomalous activity
  • Discovered malware and remediation activity
  • Most likely threat vectors into the network
  • Policy breaches or dangerous network behaviour from users

Our SOC is located at Chemring Technology Solutions' site at Roke Manor, where some of the highest level cyber research in the world is conducted. Perception benefits from this partnership by utilising the same talent that conducts work for government-level security departments worldwide to feed into product development and analysis. No other business is as close to the cyber security threat landscape as Perception.

Using this information, not only do you know where the danger is and how to solve it, you will understand where the risks in the network are, and what actions to take to protect the network for the future.

Self-Monitored

As a self-monitored system, you retain all of the data Perception produces on your own network.  Your selected IT professional is then able to rapidly identify all network traffic that could potentially be malicious.  Using Perception's bio-inspired techniques, the analyst is able to see how unusual and threat-like all network traffic is.  This process can increase the efficiency of a standard SOC team by an order of magnitude, as they can quickly focus on what's important and start investigating, rather than being flooded by a series of false-alarms.

All of our self-monitored customers have access to the Chemring Technology Solutions research team at Roke Manor.  Due to the flexibility within the system, our engineers can create specific algorithms to provide a greater level of detail on the behaviour you're most interested in, or immediately alert you if specific activities occur within your network.

Always Up To Date

 

Perception is constantly evolving to match emerging threats. New intelligence is added to improve the product to suit the ever changing threat landscape. We push regular free updates on average once every three weeks, meaning that all our customers are as protected as possible, without incurring expensive upgrade fees.  You can read about the latest updates by looking at the 'updates' posts on our blog.


Advancements to Perception come from four different sources, which ensures we are providing useful updates:

 

Internal Development Team

Typically providing efficiency improvements, our internal development team have a key role in deciding the upgrades to include with each update to Perception.

 

Internal Analysis Team

The same analysts that monitor Perception data have a direct influence on how the system is developed. This ensures they are always provided with the right data to diagnose potential threats or vulnerabilities.

 

Our Customers

Our customer base has a direct link to the development team and can suggest specific threats or behaviours they’re concerned about and updates added accordingly.

 

Expert Cyber Researchers

Working closely with government departments and Roke Manor Research ensures Perception is able to detect tomorrow’s threats before they arrive.

 

Team Members

Dan has been growing small businesses within the Chemring Group for 5 years, and joined the Perception team in 2015. He lives in Surrey with his wife Beth and their cat, Buttons.

Dan has been growing small businesses within the Chemring Group for 5 years, and joined the Perception team in 2015. He lives in Surrey with his wife Beth and their cat, Buttons.

Dan Driver
Head of Perception

Phil has been with Chemring since 2004, joining Perception in 2014.  Phil lives in Southampton with his wife and cat and enjoys being active.  Phil also enjoys cars and bikes but spends more time polishing them than driving them.

Phil has been with Chemring since 2004, joining Perception in 2014.  Phil lives in Southampton with his wife and cat and enjoys being active.  Phil also enjoys cars and bikes but spends more time polishing them than driving them.

Phil Andreotti
Head of Perception Service

Todd joined CTS in 2014 to head up commercial sales of in-house developed security products. He lives in Bournemouth;  married with two girls and is often found hiding in his shed with the dogs.

Todd joined CTS in 2014 to head up commercial sales of in-house developed security products. He lives in Bournemouth;  married with two girls and is often found hiding in his shed with the dogs.

Todd Sothcott
Regional Business Manager - Security

 
Simon has worked in the high performance networking field for over 10 years and has been directly involved in Cyber Security for the last 5 years. He works with the Developers, Analysts, and Users to ensure that Perception is the best network behavioural detection platform.

Simon has worked in the high performance networking field for over 10 years and has been directly involved in Cyber Security for the last 5 years. He works with the Developers, Analysts, and Users to ensure that Perception is the best network behavioural detection platform.

Simon Miles
Senior System Architect

Stuart has over 15 years’ experience working in high speed networking, including 3 years working on lawful interception. He is now combining this domain expertise with over 20 years of software experience to develop Perception into a world leading product.

Stuart has over 15 years’ experience working in high speed networking, including 3 years working on lawful interception. He is now combining this domain expertise with over 20 years of software experience to develop Perception into a world leading product.

Stuart Websper
Senior Developer