Broadcom highlights core security engineering in Symantec and Carbon Black

Broadcom highlighted three engineering efforts that underpin parts of its Symantec and Carbon Black security portfolio: CP3, EMDI and LC. The projects address common pressure points for defenders, including running complex detection logic safely on customer machines, identifying sensitive data on endpoints and searching security telemetry at cloud scale.

CP3, short for C++ Protected, was developed by Broadcom engineer Costin Ionescu to use the compiler as the basis for a controlled execution environment. The technology supports use cases across Symantec and Carbon Black Cloud, including anti-malware and scripting emulators, AI/ML inference scanners, command line scanning and AMSI scanning. It also informs Adaptive Isolation, which restricts suspicious but not yet confirmed malicious activity from modifying critical endpoint resources.

Distinguished Engineer Yuval Tarsi’s EMDI made Exact Data Matching practical on laptops and endpoint devices, extending Symantec DLP protections to resource-constrained systems where sensitive data often resides. Carbon Black architect Davor Roglic and his team built LC after existing systems could not ingest tens of millions of security events per second while storing and searching across tens of petabytes of telemetry. Broadcom said LC became the backbone of Carbon Black Cloud, which now runs on Google Cloud and supports millions of endpoints generating petabytes of telemetry.

Broadcom tied the work to continued investment, saying that in fiscal 2025, it invested $11 billion in R&D overall, more than $20,920 every minute. The company also positioned Symantec CBX as a unified, attack-trained XDR platform combining Carbon Black EDR with Symantec prevention and data security technologies.