Trellix Forms Advanced Research Center To Boost Intelligence And Product Capabilities – CRN

Security News Jay Fitzgerald September 28, 2022, 02:37 PM EDT

One of the most important things that we can help our customers with is just bringing them the right intelligence, the right content, says CEO Bryan Palma.

Introducing a new partner program and product initiatives arent the only things Trellix has been unveiling of late.

The cybersecurity giant announced just prior to this weeks Trellix Expand 2022 conference that it was creating a new advanced research center within the company to enhance its global threat intelligence capabilities.

One of the most important things that we can help our customers with is just bringing them the right intelligence, the right content, said Bryan Palma, chief executive of the San Jose, Calif.-based Trellix, the major provider of XDR offerings.

[RELATED STORY: Trellix Channel Chief Shares How to Build a Services Practice with XDR]

Palma told CRN that creating the new center entailed pulling together units from the old FireEye and McAfee Enterprise entities that were combined earlier this year to create Trellix, which is owned by private equity firm Symphony Technology Group.

Weve got some of the most talented researchers and investigators in the business, Palma said. With the amount of installed technology we have, we see a lot of telemetry which helps us create the necessary intelligence to power our systems and specifically to power our XDR platform.

The Advanced Research Center is the coming together of multiple research and product research capabilities within Trellix, Aparna Rayasan, chief products officer at Trellix, told CRN.

She said the new center, which employs nearly 300 employees, is built on five pillars of focus: product research and development, threat intelligence, adversarial resilience and advocacy, research engineering, and data science.

Each pillar contributes to better intelligence gathering and analysis, as well as better products and services in general, she said.

It is creating efficiencies, she said. Its creating the differentiator in our products. And its also helping us mine vast data. Its definitely covering much more surface areas than we would have otherwise.

Rayasan, who is currently conducting a search for a permanent director of the new center, said she absolutely sees the center expanding in the future.

In particular, she praised the threat-intelligence unit and said its actively hiring highly experienced personnel. She noted that many of Trellixs threat-intel employees hail from previous positions within the U.S. military and government agencies.

The center has already identified one cybersecurity threat thats garnered some attention over the past week a 15-year-old vulnerability in the open source Python programming language thats still lurking in existing codes and that theoretically puts at risk 350,000 open-source coding projects.

Douglas McKee, director of vulnerability research at Trellix, said his team found no recent malicious use of the Python vulnerability. But the vulnerability, if left unpatched, could still be used to launch supply-side attacks, even if it was created in 2007, he said.

McKee, whose team is now part of Trellixs new advanced research center, said hes hoping and expecting further intelligence

Im really excited to see Trellix put together this advanced threat center, he said. (It) helps combine a bunch of elite researchers towards a common goal. I think its really going to be a positive impact for the company and the industry moving forward.

Jay Fitzgerald is a senior editor covering cybersecurity for CRN.Jay previously freelanced for the Boston Globe, Boston Business Journal, Boston magazine, Banker & Tradesman, MassterList.com, Harvard Business Schools Working Knowledge, the National Bureau of Economic Research and other entities. He can be reached at jfitzgerald@thechannelcompany.com.

Read more:
Trellix Forms Advanced Research Center To Boost Intelligence And Product Capabilities - CRN