Brivo Announces New Cyber Defenses for its Onair Security Platform

BETHESDA, MD. DECEMBER 19, 2017

Brivo, the global leader in cloud-based physical security solutions, announced today that the company has added new cyber security defenses to its Brivo Onair platform to protect customers from certain malware threats. Newly developed cyber security components that detect malicious “bots” as well as DDoS (Distributed Denial of Service) attacks have been embedded in Brivo’s Onair cloud service and associated on-premise controllers. As the rise of IoT has underscored the need for rigorous cyber defenses at the device level, Brivo has provided its customers with ongoing system updates that address the unique needs of commercial security platforms.

“Given the growing prevalence of exploits of IoT devices like controllers and cameras, we believe that frequent cyber defense updates are more important than ever,” says Steve Van Till, President and CEO of Brivo. “As both the cloud application provider and the device manufacturer, we are in a unique position to simultaneously update both pieces and provide coordinated, end-to-end defenses.”

Bots are a type of malicious software that attempt to take over a computer or microprocessor system. The new bot detection in the Brivo’s controller firmware defends against these malicious agents by detecting the anomalous communications patterns they produce. The new firmware also detects and limits abnormally high transmission rates that are the characteristic signature of DDoS attacks. After detection, Brivo’s Onair cloud then provides customers with alerts that allow them to begin to take corrective action.

The encryption used in Brivo’s newest door controllers, the ACS6000 and ACS300, supports the latest standards and longer key lengths: TLS1.2+ with AES256 encryption and a SHA256 certificate with a 4096-bit key. “Brivo has been focused on delivering the best cyber protection available to its customers for years, and these new features continue in that tradition,” says Steve Van Till.

Brivo maintains a continuous regimen of product vulnerability testing and publication of security updates to address new threats. Brivo Onair has been validated with more than a decade of information security audits, has achieved the Cloud Security Alliance STAR designation and Privacy Shield certification from the U.S. Department of Commerce. Brivo’s annual SOC 2 audits are conducted by an independent service auditor.

About Brivo
Brivo is a SaaS company offering a complete suite of physical security products and services for commercial buildings, including access control, video surveillance, and mobile credentials. Currently serving over ten million users, Brivo provides a scalable and centralized security management system to its customers. Brivo is unique in offering both access control and video management in a single cloud-based platform that is available via web browser or mobile applications for anywhere, anytime management and control. Headquartered in Bethesda, MD, Brivo was founded in 1999.