ReversingLabs: Serving File Reputation for Twenty Billion Files

ReversingLabs, a company specializing in threat intelligence, has developed the Titanium platform to handle the rapidly evolving landscape of cybersecurity threats by automating processes and utilizing scalable solutions. At the ScyllaDB Summit 2019, ReversingLabs software architect Goran Cvijanovic discussed the integration of ScyllaDB into their platform to manage file reputation and optimize storage through compression. Their TitaniumCloud platform maintains a vast database of over 20 billion files, categorizing them as benign, malign, suspicious, or unclassified, using static and dynamic analysis methods. To enhance its capabilities, ReversingLabs aggregates data from over 40 antivirus partners and stores metadata and reputation analyses in a highly available database system, handling more than a billion malware-infected files across five petabytes of storage. The company has implemented a custom distributed key-value store to manage storage efficiently, and performance tests demonstrated ScyllaDB's ability to handle high traffic with low latency, leading to its adoption in ReversingLabs' production systems.