UDV Group has launched UDV NTA 2.0, an updated network traffic analysis system. The new version features an AI assistant designed to interpret network data within the specific business context of an organization, such as asset criticality and internal regulations.
The AI assistant helps security teams prioritize incident investigations and provides recommendations for response. This functionality aims to reduce the volume of irrelevant alerts and minimize the workload on security analysts.
The update introduces traffic verification against reputation lists, including IP addresses, domain names, URLs, and file hashes. Signature analysis now accounts for node positioning relative to the network perimeter, and DNS tunneling detection logic has been improved.
The system architecture was redesigned to enhance performance. On high-load installations, session list loading is now tens of times faster, session filtering is 20% faster, and memory consumption during threat hunting has been cut in half.
UDV NTA 2.0 expands protocol support, now including Modbus RTU over TCP, Regul, SSDP, mDNS, LLMNR, RTSP, PTP, and Zabbix agent and trapper. Additionally, the system now supports partial domain name matching to detect malicious activity.
