Lancope

Lancope, Inc. operated as a network security firm specializing in network visibility, behavioral analytics, and threat intelligence. The company was founded in 2000 by Dr. John A. Copeland, a professor at the Georgia Institute of Technology's School of Electrical and Computer Engineering. Dr. Copeland's venture into cybersecurity was reportedly sparked in 1999 when he identified unusual data bursts on his home computer, leading him to develop a method of "Flow-based Analysis" to detect malicious activity by analyzing packet headers. This approach laid the groundwork for Lancope's core technology.

The company's primary offering was the StealthWatch system, a platform designed to provide network behavior analysis and anomaly detection. StealthWatch functioned by collecting and analyzing flow data, such as NetFlow, IPFIX, and sFlow, from network infrastructure to identify a wide array of security threats. These threats included advanced persistent threats (APTs), distributed denial-of-service (DDoS) attacks, zero-day malware, and insider threats. The system provided deep network visibility and actionable security intelligence, allowing organizations to turn their existing network into a distributed sensor grid. This capability enabled clients to detect suspicious activity that might have bypassed traditional perimeter defenses, accelerate incident response, and conduct detailed forensic investigations.

Lancope's business model was centered on providing these advanced security solutions to large enterprise clients and government agencies. Its customer base spanned various sectors, including finance, healthcare, and higher education. A significant milestone in the company's history was its acquisition by Cisco Systems in December 2015 for approximately $452.5 million. Prior to the acquisition, Lancope already had a strong commercial relationship with Cisco, and its StealthWatch system was a component of Cisco's Cyber Threat Defense Solution. Following the acquisition, the Lancope team was integrated into the Cisco Security Business Group, and StealthWatch became a key part of Cisco's 'Security Everywhere' strategy, enhancing its capabilities in providing advanced threat protection.

Keywords: network security, threat detection, network behavior analytics, security intelligence, NetFlow analysis, Cisco Stealthwatch, cybersecurity, insider threat detection, DDoS mitigation, network visibility, security analytics, incident response, forensic analysis, advanced persistent threat, flow-based monitoring, enterprise security, John A. Copeland, network monitoring, security acquisitions, information security