MENU

Platform transforms threat intelligence into automated security action

Platform transforms threat intelligence into automated security action

Business news |
By Wisse Hettinga



The platform utilizes unique cyber reconnaissance capabilities and patented data-mining algorithms to continuously scan the surface, deep and dark web to deliver actionable, contextual reconnaissance about potential threats targeting a customers’ particular industry, their operational assets and processes, employees, and digital footprint.

This tailored intelligence, including adversary motive and means, analyzed alongside internal IOCs, community, and open source threat feeds, provides customers a highly customized and comprehensive picture of the risks threatening their business and brand.  Armed with this actionable intelligence, customers can then utilize IntSights automated remediation functionality to orchestrate workflows and update firewalls, proxies, SIEMs and NGAV solutions to more efficiently and effectively eliminate operational vulnerabilities, secure data, and protect resources.

“One benefit of threat intelligence (TI) is that it improves decision making in core security processes, such as incident response and policy enforcement,” says Craig Lawson, Research VP, and Khushbu Pratap, Principal Research Analyst, at Gartner. “Better visibility of the threat landscape helps CISOs justify the need for additional resources and understand the problems they encounter. Technical information, such as internet protocol (IP) reputation or log extracts, is not as useful in isolation, as when other information about the adversary (for example, motive and means) or context (e.g., targeting of specific vertical industries or business processes) can be applied.”


“As the cybercrime ecosystem evolves, cyber attacks are becoming more complex, creative, and tailored to the industries and organizations they target. To do this, attackers must research, prepare and seek out information on their targets prior to an attack,” said Alon Arvatz, Co-founder and Chief Product Officer at IntSights Cyber Intelligence. “Today, the cybersecurity community focuses a great deal on technical elements and indicators of malicious activity to detect threats – and has thus invested heavily in technologically driven solutions.  We believe there is much to be gained from investigating the human factor behind attacks and that in doing so it is possible to uncover actionable warning signs much earlier in the cyber attack chain and to then automate proactive defense to eliminate risk.”

www.intsights.com

If you enjoyed this article, you will like the following ones: don't miss them by subscribing to :    eeNews on Google News

Share:

Linked Articles
10s