Multicloud networking vendor Aviatrix rolled security analytics capabilities into its ThreatIQ with ThreatGuard platform today.

The security functionality is part of Aviatrix’s cloud networking platform, a cloud-native abstraction layer between virtual private clouds running in the major public cloud provider’s networks and on premises.

The vendor’s newly announced Network Behavior Analytics technology takes advantage of the platform's broad visibility to establish a baseline for what normal network traffic looks like. This, according to Bryan Ashley, VP of product marketing at Aviatrix, enables the platform to automate anomaly detection and alerting, while reducing the number of false alarms.

“What we don't want to do is contribute to alert fatigue,” he said. “That's a really big problem in the industry right now.”

It works a little like credit card fraud prevention, Ashley explained. If a charge is detected thousands of miles away, but five minutes earlier you filled up at a local gas station, it becomes obvious the account is compromised and you’re notified of potential fraud.

Likewise, with Network Behavior Analytics, if suspicious traffic patterns are detected on the network — for example data exfiltration common with ransomware attacks — the service can automatically alert network and security operations teams of a potential attack.

Aviatrix hasn’t, however, ventured beyond alerting with this release, Ashley said. “We're not taking remediation into account here.”

Aviatrix plans to expand its security stack over the next few releases as it looks to address its customer’s multicloud migraines.

Today’s announcement builds on Aviatrix’s previously announced threat inspection and policy-based enforcement capabilities introduced late last year. The service inspects traffic in real time for known threat signatures that might otherwise go unchecked by traditional security appliances like firewalls.

Aviatrix isn’t the only multicloud vendor wading into the security waters either. Alkira last year announced a series of security partnerships with leading cloud firewall vendors, including Palo Alto Networks and Check Point in a bid to address many of the same security concerns.

These kinds of integrations could be in Aviatrix's future, according to Ashley. “It's definitely something that we're looking at... . We haven't made any decisions there yet.”