{"id":14864,"date":"2019-04-24T12:29:05","date_gmt":"2019-04-24T12:29:05","guid":{"rendered":"https:\/\/rsoftsolution.com\/blog\/vdoo-secures-32m-for-a-platform-that-uses-ai-to-detect-and-fix-vulnerabilities-on-iot-devices.html"},"modified":"2019-04-24T12:29:05","modified_gmt":"2019-04-24T12:29:05","slug":"vdoo-secures-32m-for-a-platform-that-uses-ai-to-detect-and-fix-vulnerabilities-on-iot-devices","status":"publish","type":"post","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/vdoo-secures-32m-for-a-platform-that-uses-ai-to-detect-and-fix-vulnerabilities-on-iot-devices.html","title":{"rendered":"VDOO secures $32M for a platform that uses AI to detect and fix vulnerabilities on IoT devices"},"content":{"rendered":"

Our universe of connected things is expanding by the day: the number of objects with embedded processors now exceeds the number of smartphones globally and is\u00a0projected to reach some 18 billion devices by 2022<\/a>. But just as that number is growing, so are the opportunities for malicious hackers to use these embedded devices to crack into networks, disrupting how these objects work and stealing information, a problem that analysts estimate will cost $18.3 billion to address by 2023<\/a>. Now, an Israeli startup called VDOO<\/a> has raised $32 million to address this, with a platform that identifies and fixes security vulnerabilities in IoT devices, and then tests to make sure that the fixes work.<\/p>\n

The funding is being led by\u00a0WRVI Capital and GGV Capital and also includes strategic investments from NTT DOCOMO (which works with VDOO), MSAD Ventures (the venture arm of the global cyber insurance firm), and Avigdor Willenz (who founded both Galileo Technologies and Annapurna Labs, respectively acquired by Marvell and Amazon). 83North, Dell Technology Capital and David Strohm, who backed VDOO in its previous round of $13 million in January 2018<\/a>, also participated, bringing the total raised by VDOO now to $45 million.<\/p>\n

VDOO \u2014 a reference to the Hebrew word that sounds like \u201cvee-doo\u201d and means \u201cmaking sure\u201d \u2014 was cofounded by\u00a0Netanel Davidi (co-CEO), Uri Alter (also co-CEO) and Asaf Karas (CTO). Davidi and Alter previously co-founded Cyvera<\/a>, a pioneer in endpoint security that was acquired by Palo Alto Networks<\/a> and became the basis for its own endpoint security product; Karas meanwhile has extensive experience coming to VDOO of working, among other places, for the Israeli Defense Forces.<\/p>\n

In an interview, Davidi noted that the company was created out of one of the biggest shortfalls of IoT.<\/p>\n

\u201cMany embedded systems have a low threshold for security because they were not created with security in mind,\u201d he said, noting that this is partly due to concerns of how typical security fixes might impact performance, and the fact that this has typically not been a core competency for hardware makers, but something that is considered after devices are in the market. At the same time, a lot of security solutions today in the IoT space have focused on monitoring, but not fixing, he added. \u201cMost companies have good solutions for the visibility of their systems, and are able to identify vulnerabilities on the network, but are not sufficient at protecting devices themselves.\u201d<\/p>\n

The sheer number of devices on the market and their spread across a range of deployments from manufacturing and other industrial scenarios, through to in-home systems that can be vulnerable even when not connected to the internet, also makes for a complicated and uneven landscape.<\/p>\n

VDOO\u2019s approach was to conceive of a very lightweight implementation that sits on a small group of devices \u2014 \u201csmall\u201d is relative here: the set was 16,000 objects \u2014 applying machine learning to \u201clearn\u201d how different security vulnerabilities might behave to discover adjacent hacks that hadn\u2019t yet been identified.<\/p>\n

\u201cFor any kind of vulnerability, using deep binary analysis capabilities, we try to understand the broader idea, to figure out how a similar vulnerability can emerge,\u201d he said.<\/p>\n

Part of the approach is to pare down security requirements and solutions to those pertinent to the device in question, and providing clear guidance to vendors for how to best avoid problems in the first place at the development stage. VDOO then also generates specific \u201ctailor-made on-device micro-agents\u201d to continue the detection and repair process. (Davidi likened it to a modern approach to some cancer care: preventive measures such as periodic monitoring checks; followed by a \u201ctailored immunotherapy\u201d based on prior analysis of DNA.)<\/p>\n

It currently supports Linux- and Android-based operating systems, as well as\u00a0FreeRTOS and support for more systems coming soon, Davidi said. It sells its services primarily to device makers, who can make over the air updates to their devices after they have been purchased and implemented to keep them up to date with the latest fixes. Typical devices currently secured with VDOO tech include safety and security devices such as surveillance cameras, NVRs DVRs, fire alarm systems, access controls, routers, switches and access points, Davidi said.<\/p>\n

It\u2019s the focus on providing security services for hardware makers, in fact, that helps VDOO stand out from the others in the field.<\/p>\n

\u201cAmong all startups for embedded systems, VDOO is the first to introduce a unique, holistic approach focusing on the device vendors which are the focal enabler in truly securing devices,\u201d said Lip-Bu Tan, founding partner of WRVI Capital. \u201cWe are delighted to back VDOO\u2019s technology, and the exceptional team that has created advanced tools to allow vendors to secure devices as much as possible without in-house security know-how, for the first time in many decades, I see a clear demand for security, as being raised constantly in many meetings with leading OEMs worldwide, as well as software giants.\u201d<\/p>\n

Over the last 18 months, as VDOO has continued to expand its own reach, it has picked up customers along the way<\/a>\u00a0after identifying vulnerabilities in their devices. Its dataset covers some 70 million embedded systems\u2019 binaries and more than 16,000 versions of embedded systems, and it has worked with customers to identify and address 150 zero-day vulnerabilities and 100,000 security issues that would have potentially impacted 1.5 billion devices.<\/p>\n

Interestingly, while VDOO is building its own IP, it is also working with a number of vendors to provide many of the fixes. Davidi says that VDOO and those vendors go through fairly rigorous screening processes before integrating, and the hope is that down the line there will more automation brought in for the \u201cfixing\u201d element using third-party solutions.<\/p>\n

\u201cVDOO brings a unique end-to-end security platform, answering the global connectivity trend and the emerging threats targeting embedded devices, to provide security as an essential enabler of extensive connected devices adoption. With its differentiated capabilities, VDOO has succeeded in acquiring global customers, including many top-tier brands. Moreover, VDOO\u2019s ability to uncover and mitigate weaknesses created by external suppliers fits perfectly into our Supply Chain Security investment strategy,\u201d said Glenn Solomon, managing partner at GGV Capital, in a statement. \u201cThis funding, together with the company\u2019s great technology, skilled entrepreneurs and one of the best teams we have seen, will allow VDOO to maintain its leadership position in IoT security and expand geographies while continuing to develop its state-of-the-art technology.\u201d<\/p>\n

Valuation is currently not being disclosed.<\/p>\n

Article source: http:\/\/feedproxy.google.com\/~r\/techcrunchIt\/~3\/QO5YAL2hhQI\/<\/p>","protected":false},"excerpt":{"rendered":"

Our universe of connected things is expanding by the day: the number of objects with embedded processors now exceeds the number of smartphones globally and is\u00a0projected to reach some 18 <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[19],"tags":[25],"class_list":["post-14864","post","type-post","status-publish","format-standard","hentry","category-enterprise-software","tag-enterprise"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t