di_blog_post

Deep Instinct prevents more advanced threats than any EPP or EDR in the world.

Deep Instinct Blog: Breaking News and Updates

Explore Deep Instinct DSX

Prevent Zero-Day Attacks

Real-Time Malicious Verdicts

Real-Time Explainability

Lower TCO

Ensure Privacy & Compliance

Deep Instinct DSX

Cloud

Applications

Endpoints

Use Cases

Asset Library

Blog

Videos

Events & Webinars

Resources

About Deep Instinct

Our Customers

Newsroom

Careers

Contact Us

Company

Request Demo

Customer Portal

Integrations and Compliance

Training

Quick Links

Discover how our revolutionary deep learning-powered solution prevents and explains unknown, never-before-seen threats.

explore deep instinct dsx

why dsx

Prevent zero-day attacks

Detect and prevent threats in <20ms, faster than the blink of an eye.

real-time malicious verdicts

Gain actionable, AI-driven intelligence on zero-day threats in seconds.

Real-Time Insights & Explainability

Reduce cybersecurity costs with efficient, high-performance threat prevention.

Enhance data protection while meeting stringent privacy and regulatory requirements.

DEPLOYMENT

Secure your multi-cloud or hybrid infrastructure against zero-day threats.

CLOUD

Safeguard critical data on Network-Attached Storage systems from advanced cyber threats.

Defend SaaS and custom applications from zero-day vulnerabilities and threats.

APPLICATIONS

Protect devices and endpoints with AI-driven threat prevention.

ENDPOINTS

EXPLORE 

Threat Research

Voice Of SecOps

COMPARE

Deep Instinct complements Microsoft Defender with advanced threat prevention to stop threats before they enter your environment.

+ Microsoft Defender

Deep Instinct and Tanium deliver prevention-first endpoint security to reduce risk and boost productivity.

+ Tanium

EDR is not enough — enhance existing cybersecurity tools with advanced, real-time threat prevention using deep learning to produce defense in depth.

EXTEND/ENHANCE LEGACY AV

Replace outdated, legacy AV solutions with prevention-first, deep-learning-based protection purpose-built for cybersecurity.

REPLACE LEGACY AV

Faster and more accurate – Deep Instinct safeguards your data and protects your NAS storage better than Trellix.

REPLACE TRELLIX

Leadership Team

Board of Directors

Partners

Login

content_block

Perspective & Findings

<h4>Don’t Let Application File Uploads Become Malware Downloads</h4>

file-upload-security-blog.jpg

Recent Blog Posts

Listing preview

Perspective & Findings

image_media_card

Recent Blog Posts

listing_preview

BPFDoor Malware Evolves – Stealthy Sniffing Backdoor Ups Its Game

Who is the only NEW vendor in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms?

ChatGPT and Malware: Making Your Malicious Wishes Come True

Top-3 Drawbacks of Content Disarm + Reconstruction (CDR) for Malware Prevention

LSASS Memory Dumps are Stealthier than Ever Before

LSASS memory dumps

Trending at Deep Instinct

carousel_cards

It's that time of year when IT professionals meet with finance to determine their budget for the year ahead. And this year’s planning process appears 

security-budgets.jpg

It's that time of year when IT professionals meet with finance to determine their budget for the year ahead. And this year’s planning process appears to be a gloomy endeavor with the industrywide view that cyberthreats will continue to evolve, both in terms of their destructive capability and their stealth in evading detection. With this constant threat evolution, what features should IT staff be looking for in their security products, and how much should they be expecting to spend?
<h3>Bigger Budgets Have Not Entailed More Security</h3>
Greater spending on <a href="https://www.deepinstinct.com/about-us/">cybersecurity products</a> hasn't entailed a better organizational security posture. Despite the millions of dollars spent by organizations year after year, the average cost of a cyberattack jumped by 50% between 2018 and 2019, hitting $4.6 million per incident. The percentage of cyberattacks that cost $10 million or more nearly doubled to 13% over the same period.
Enterprises are using a diverse array of endpoint agents, including decryption, AV/AM and EDR. The use of multiple security products may, in fact, weaken an organization’s security position, whereby the more agents an endpoint has, the greater the probability it will get breached. This wide deployment makes it difficult to standardize a specific test to measure security and safety without sacrificing speed. Buying more cybersecurity tools tends to plunge enterprises into a costly cycle of spending more time and resources on <a href="https://www.deepinstinct.com/product-overview/">security solutions</a> without experiencing any parallel increase in security.
However, in a mad chicken-and-egg pursuit, this trend of spending more on security products persists due to the rising costs of a security breach. It's no wonder, then, that global spending on cybersecurity is forecasted by Gartner to exceed $124 billion this year.
<h3>How Enterprises Are Allocating Their Cybersecurity Resources</h3>
Deloitte's “2019 future of cyber” survey shares some useful findings on how enterprise-level organizations are spending their time and money on cybersecurity.
The security executives surveyed said three areas get a substantial portion of their time: cyber monitoring and operations, cybersecurity governance, and cyber resilience. Each of these cyber domains gets 12% or 13% of their time, compared to the 7% to 8% of other domains.
The responses asking them to identify their organizations' most challenging aspects of cybersecurity management were also clustered together. The most popular response, at 16%, was data management complexities, and the least popular response, at 12%, was inadequate governance.
These results indicate that CISOs are investing time and resources into security efforts that are cost-intensive, and it creates a vicious cycle that accelerates and perpetuates itself, as the more expensive point solutions demand more of a CISO’s time and focus. These results indicate the need for solutions that are more autonomous and solve security problems at the root cause.
<h3>Strategies To Slim Down Your Security Budget While Increasing Your Cybersecurity</h3>
When researching cybersecurity solutions, here are some cost-efficiency strategies that can be implemented:
• Focus on prevention. Select a solution that stops a cyberattack before execution. A detection-and-response approach costs far more than prevention. Prevention of data breaches or other attacks reduces an organization's financial exposure from all perspectives, paying remediation costs to productivity loss and liability costs.
• Look at the metrics.A cybersecurity vendor should be able to provide metrics that demonstrate its solution achieves high detection rates with low false-positive rates. A high rate of false positives increases labor costs to analyze and assess false alerts and validate programs for inclusion on a whitelist.
• Reduce and minimize security layers. In light of the fact that more agents on an endpoint don’t minimize the likelihood of a breach, try to resist the temptation to implement the many niched products available on the market. A more effective option is to select one platform that provides cover for all devices and operating systems present in an enterprise's ecosystem while also providing the widest possible coverage for the various threat types that are prevalent in your industry.
• Greater automation. There are many sophisticated security tools out there that may provide you with a wealth of data and security information but do very little to actually identify and clean up attacks that have successfully penetrated your organization. This magnifies the risks of alert fatigue in an industry that is already suffering from a cyber skills shortage. Automating more cybersecurity tasks to detect and prevent threats reduces both dependences on human expertise and the risk of human error.
<h3>The Strength In Simplicity</h3>
When CISOs are considering different solutions, each vendor should be able to give them a one-page product sheet that easily defines a broad scope of a solution's quantifiable benefits: the range of environments it provides coverage for, the operating systems it can be applied to and what processes it can automate. The one-pager should also make clear whether the solution takes more of a predict-and-prevent posture or that of detection and response.
The goal should be to find a single agile solution that can check the box on all these strategies, which combine to increase both cost efficiency and enterprise security.
Article originally published in <a href="https://www.forbes.com/sites/forbestechcouncil/2019/11/27/cutting-cybersecurity-budgets-in-a-time-of-growing-threats/#eda9f835e08d" target="_blank" rel="noopener noreferrer">bltc4df6416961c46f7's Forbes Technology Council Profile</a>

Cutting Cybersecurity Budgets in a Time of Growing Threats

See the original article posted in the Forbes Technology Council
It's that time of year when IT professionals meet with finance to determine their bu

Forbes_budget.jpg

See the original article posted in the <a href="https://www.forbes.com/sites/forbestechcouncil/2019/11/27/cutting-cybersecurity-budgets-in-a-time-of-growing-threats/#ac092a05e08d" target="_blank" rel="noopener noreferrer">Forbes Technology Council</a>
It's that time of year when IT professionals meet with finance to determine their budget for the year ahead. And this year’s planning process appears to be a gloomy endeavor with the industrywide view that cyberthreats will continue to evolve, both in terms of their destructive capability and their stealth in evading detection. With this constant threat evolution, what features should IT staff be looking for in their security products, and how much should they be expecting to spend?
Bigger Budgets Have Not Entailed More Security
Greater spending on cybersecurity products hasn't entailed a better organizational security posture. Despite the millions of dollars spent by organizations year after year, the average cost of a cyberattack <a href="https://www.darkreading.com/perimeter/cost-per-cyberattack-jumps-to-%2446m-in-2019/d/d-id/1335008" target="_blank" rel="nofollow noopener noreferrer" data-ga-track="ExternalLink:https://www.darkreading.com/perimeter/cost-per-cyberattack-jumps-to-%2446m-in-2019/d/d-id/1335008">jumped</a> by 50% between 2018 and 2019, hitting $4.6 million per incident. The percentage of cyberattacks that cost $10 million or more nearly doubled to 13% over the same period.
Enterprises are using a diverse array of endpoint agents, including decryption, AV/AM and EDR. The use of multiple security products may, in fact, weaken an organization’s security position, whereby the more agents an endpoint has, <a href="https://www.forbes.com/sites/louiscolumbus/2019/09/08/5-key-insights-from-absolutes-2019-endpoint-security-trends-report/#7579fc7b3b7c" target="_self" rel="noopener noreferrer" data-ga-track="InternalLink:https://www.forbes.com/sites/louiscolumbus/2019/09/08/5-key-insights-from-absolutes-2019-endpoint-security-trends-report/#7579fc7b3b7c">the greater the probability it will get breached</a>. This wide deployment makes it difficult to standardize a specific test to measure security and safety without sacrificing speed. Buying more cybersecurity tools tends to plunge enterprises into a costly cycle of spending more time and resources on security solutions without experiencing any parallel increase in security.
However, in a mad chicken-and-egg pursuit, this trend of spending more on security products persists due to the rising costs of a security breach. It's no wonder, then, that global spending on cybersecurity is <a href="https://www.forbes.com/sites/rogeraitken/2018/08/19/global-information-security-spending-to-exceed-124b-in-2019-privacy-concerns-driving-demand/#145b8f797112" target="_self" rel="noopener noreferrer" data-ga-track="InternalLink:https://www.forbes.com/sites/rogeraitken/2018/08/19/global-information-security-spending-to-exceed-124b-in-2019-privacy-concerns-driving-demand/#145b8f797112">forecasted</a> by Gartner to exceed $124 billion this year.
How Enterprises Are Allocating Their Cybersecurity Resources
<a href="https://www2.deloitte.com/us/en/pages/advisory/articles/future-of-cyber-survey.html" target="_blank" rel="nofollow noopener noreferrer" data-ga-track="ExternalLink:https://www2.deloitte.com/us/en/pages/advisory/articles/future-of-cyber-survey.html">Deloitte's “2019 future of cyber” survey</a> shares some useful findings on how enterprise-level organizations are spending their time and money on cybersecurity.
<div class="vestpocket">
The security executives surveyed said three areas get a substantial portion of their time: cyber monitoring and operations, cybersecurity governance, and cyber resilience. Each of these cyber domains gets 12% or 13% of their time, compared to the 7% to 8% of other domains.
</div>
The responses asking them to identify their organizations' most challenging aspects of cybersecurity management were also clustered together. The most popular response, at 16%, was data management complexities, and the least popular response, at 12%, was inadequate governance.
These results indicate that CISOs are investing time and resources into security efforts that are cost-intensive, and it creates a vicious cycle that accelerates and perpetuates itself, as the more expensive point solutions demand more of a CISO’s time and focus. These results indicate the need for solutions that are more autonomous and solve security problems at the root cause.
Strategies To Slim Down Your Security Budget While Increasing Your Cybersecurity
When researching cybersecurity solutions, here are some cost-efficiency strategies that can be implemented:
• Focus on prevention. Select a solution that stops a cyberattack before execution. A detection-and-response approach <a href="https://www.darkreading.com/threat-intelligence/beating-the-bullet-from-detection-to-prevention/d/d-id/1335908?utm_campaign=Dark%20Reading%20-%20Guy%27s%20byline%20Prevention&amp;utm_content=102445377&amp;utm_medium=social&amp;utm_source=linkedin&amp;hss_channel=lcp-12904445" target="_blank" rel="nofollow noopener noreferrer" data-ga-track="ExternalLink:https://www.darkreading.com/threat-intelligence/beating-the-bullet-from-detection-to-prevention/d/d-id/1335908?utm_campaign=Dark%20Reading%20-%20Guy%27s%20byline%20Prevention&amp;utm_content=102445377&amp;utm_medium=social&amp;utm_source=linkedin&amp;hss_channel=lcp-12904445">costs far more than prevention</a>. Prevention of data breaches or other attacks reduces an organization's financial exposure from all perspectives, paying remediation costs to productivity loss and liability costs.
• Look at the metrics. A cybersecurity vendor should be able to provide metrics that demonstrate its solution <a href="https://www.businesswire.com/news/home/20150116005014/en/New-Ponemon-Report-Reveals-High-Cost-Dealing" target="_blank" rel="nofollow noopener noreferrer" data-ga-track="ExternalLink:https://www.businesswire.com/news/home/20150116005014/en/New-Ponemon-Report-Reveals-High-Cost-Dealing">achieves high detection rates with low false-positive rates</a>. A high rate of false positives increases labor costs to analyze and assess false alerts and validate programs for inclusion on a whitelist.
• Reduce and minimize security layers. In light of the fact that more agents on an endpoint don’t minimize the likelihood of a breach, try to resist the temptation to implement the many niched products available on the market. A more effective option is to select one platform that provides cover for all devices and operating systems present in an enterprise's ecosystem while also providing the widest possible coverage for the various threat types that are prevalent in your industry.
• Greater automation. There are many sophisticated security tools out there that may provide you with a wealth of data and security information but do very little to actually identify and clean up attacks that have successfully penetrated your organization. This magnifies the risks of alert fatigue in an industry that is already suffering from a <a href="https://www.darkreading.com/careers-and-people/the-cybersecurity-skill-shortage-epidemic-/d/d-id/1335986" target="_blank" rel="nofollow noopener noreferrer" data-ga-track="ExternalLink:https://www.darkreading.com/careers-and-people/the-cybersecurity-skill-shortage-epidemic-/d/d-id/1335986">cyber skills shortage</a>. Automating more cybersecurity tasks to detect and prevent threats reduces both dependences on human expertise and the risk of human error.
The Strength In Simplicity
When CISOs are considering different solutions, each vendor should be able to give them a one-page product sheet that easily defines a broad scope of a solution's quantifiable benefits: the range of environments it provides coverage for, the operating systems it can be applied to and what processes it can automate. The one-pager should also make clear whether the solution takes more of a predict-and-prevent posture or that of detection and response.
The goal should be to find a single agile solution that can check the box on all these strategies, which combine to increase both cost efficiency and enterprise security.

Cutting Cybersecurity Budgets In A Time of Growing Threats

The cybersecurity industry is currently experiencing an epidemic. No, I’m not referring to the complex and sophisticated malware that is being generat

shortage.jpg

The <a href="https://www.deepinstinct.com/deep-instinct-for-mssps/">cybersecurity industry</a> is currently experiencing an epidemic. No, I’m not referring to the complex and sophisticated <a href="https://www.deepinstinct.com/2018/07/10/why-deep-learning-is-the-only-option-for-stopping-unknown-malware-2/">malware</a> that is being generated in increasing numbers every day, but the availability of skilled personnel, available to prevent or remediate them.
In 2018-2019, 53 percent of organizations reported a “problematic shortage” of cybersecurity skills according to<a href="https://www.csoonline.com/article/3331983/the-cybersecurity-skills-shortage-is-getting-worse.html" target="_blank" rel="noopener noreferrer"> CSO Online</a>. Cybersecurity Ventures predicts there will be 3.5 million cybersecurity job opening by 2021. A <a href="https://www.cio.com.au/article/606319/australia-hardest-hit-globally-by-cyber-security-skills-shortage-report/" target="_blank" rel="noopener noreferrer">report</a> coming out of Australia found that 88 percent of IT decision-makers believe there is a shortage of cybersecurity skills, within their own organization, but also nationally.
This alarming trend is seriously disadvantaging security efforts. At <a href="http://www.deepinstinct.com" target="_blank" rel="noopener noreferrer">Deep Instinct</a>, we’ve seen for a while now that security talent isn’t where it needs to be to help curb the cybercrime epidemic and until this is rectified, the industry continues to be outpaced by malicious actors.
To stem this development, organizations need to adopt the mindset of malicious actors. This is not a mindset that can easily be transitioned into by occupational cyber experts or engineers. It draws on the skill set of those who have experience in cyber warfare, understand the objectives of an attacker and can identify the product architecture that’s required to undermine their efforts.
Unfortunately, the reality is that this gap between the threat capability of modern-day attacks and the skilled personnel able to mitigate them, is perpetually widening. Responsibility no longer just lies with CISOs, but all IT professionals need to be proficient in an organization’s cybersecurity policies and procedures. They need to be involved with protecting and defending all types of endpoints, apps, data, infrastructure, and people. Thus, the job market figures, as alarming as they are, belie the extent of the epidemic shortage.
There are a number of fundamental shifts that need to happen in order to rectify the situation both on a national level and within organizations: 
• There needs to be national-level leadership on the issue. Governments need to pursue this issue to the extent of appointing a Minister for Cybersecurity, who would be responsible for establishing metrics, driving programs and reporting on national progress. 
• A more thorough partnership between the public and private enterprises where national governments adopt a more focused effort on working with the cybersecurity technology community. 
• An integrated industry effort between technology and cybersecurity leaders, to ensure that organizations adopt technology tools that work to resolve this issue, rather than amplify it.
On the enterprise level there are several strategies that are also being pursued:
• Continuous training of cybersecurity staff where personnel is encouraged to be part of professional organizations.
• The role of the MSSP will become more significant in closing in on this skills gap. To their advantage, they have a greater ability to pool knowledge, resources, and expertise and spread the cost amongst their customers. This more profitable economy of scale enables MSSPs to use optimal solutions that support multiple small to medium businesses, and which would normally be well beyond their reach.
However, organizations need to be aware that selecting the right vendor can be a challenge. In the necessity to say ahead of the threat landscape, organizations should take the time to rigorously test the available offerings. In an environment where MSSPs and SOCs need to continually evolve their practices to keep up, SMBs need to ensure that whichever the third party they have selected, they have the technological advantage over any potential threat. This may entail taking a portfolio management approach to cybersecurity workloads, where fewer security professionals are required to instead manage and oversee outsourced tasks.
Organizations should also be looking towards the cybersecurity products to make sure that the solutions they purchase minimize the pressure on security personnel, rather than exacerbate it. The incorporation of NextGen cyber technology, such as Deep Instinct, the first platform to apply deep learning to cybersecurity, reduces dependency on security experts in a few different ways:
• As an automated prevention tool, it reduces the range of tasks normally carried out by a cybersecurity team. From finding-the-needle-in-the-haystack to post-infection analysis and remediation, all these tasks are dramatically reduced, if not removed. The reduced human involvement needed to predict and prevent threats frees up cyber experts to focus on more strategic operations.
• The solution operates in a pre-execution stage, where attacks are prevented pre-emptively, rather than in a post-execution stage which requires a lot of remediation activity by an expert.
• The deep learning prediction model also produces a far lower level of false positives. The combination of high detection and minimal false positives means that fewer people are needed to investigate and identify attacks.
• The deep learning model doesn’t require feature extraction. Unlike <a href="https://www.deepinstinct.com/machine-learning-vs-deep-learning/" target="_blank" rel="noopener noreferrer">machine learning models and other AI</a> cybersecurity solutions that rely on cybersecurity professionals to formulate an algorithm, deep learning does not require this expertise. Rather it is designed to automatically identify the relevant features of a malicious file or vector. An important factor for solution providers, it means that they are not competing for the same talent pool as their competitors.
While the cybersecurity shortage is a well-known problem, the industry, government, and enterprise have historically been slow to react. However as the shortage has been more recently reaching epidemic levels, organizations have started to pivot in their response. While some have supported training programs amongst their IT staff, many others have been focused on putting in the necessary infrastructure and solutions that minimize the number of CISOs that they need to ensure ongoing security.
<a href="https://info.deepinstinct.com/deep-learning-for-dummies" target="_blank" rel="noopener noreferrer">Learn more</a> about how deep learning has been applied to cybersecurity, and the autonomous capabilities it provides to minimize the impact of the cybersecurity skills shortage.
<a href="https://info.deepinstinct.com/deep-learning-for-dummies" target="_blank" rel="noopener noreferrer"><img class="alignnone wp-image-3003" src="https://www.deepinstinct.com/wp-content/uploads/2018/07/dummies-blog-banner-450x113.png" alt="" width="549" height="139" /></a>

The Cybersecurity Skill Shortage Epidemic

A core evaluation of AI in cybersecurity indicates that AI is at the precipice of overhauling the threat landscape. The growing awareness and knowledg

bullet.jpg

A core evaluation of AI in cybersecurity indicates that AI is at the precipice of overhauling the threat landscape. The growing awareness and knowledge of AI, combined with the ongoing development of new attack vectors and evasion techniques, means that the days of AI in the attack domain are undoubtedly approaching.
Organizations need to be ready for this next wave of attack. The reality on the ground makes it very difficult for the cybersecurity eco-system to adequately prepare themselves. CISO’s and their staff are often overloaded and overwhelmed with the amount of work that’s thrown at them, leaving them with very little time to broaden their knowledge and understanding of what is happening in the threat landscape. On the one hand, security and IT experts are slow with implementing new products because it takes a long time and it’s hard to ascertain the efficacy pre-emptively. Yet on the other hand, they are all too aware of the gaps with their current solutions. The result is that many enterprises are taking a reactive - detection and remediation-based - approach, where they are overloaded with so many events occurring in their current system, that they don’t have the time or the mindset to switch to a proactive approach.
<h3>The Legacy Anti-Virus Era</h3>
In the period after the widespread adoption of AV solutions the cybersecurity market became rapidly disillusioned with the ongoing stream of breaches that appeared to seamlessly bypass solutions. Blacklists, signatures and heuristics were routinely being bypassed by attack vectors that continued in their merry paths of destruction.  This era was eventually replaced by the current approach based mostly on a combination of AI, <a href="https://www.deepinstinct.com/2019/04/17/end-point-security-evaluation/" target="_blank" rel="noopener noreferrer">detection and response</a>. However, the constant pursuit of threat hunting and analysis, couples with FP and alert fatigue is causing many to once again lose confidence. Companies are finding that they are losing the technological upper-hand against an attack landscape that is increasingly sophisticated, and where advanced attacks are easily evading modern detection and response-based solutions.
Not surprisingly, CISO’s and company boards are growing incredibly weary of spending a lot of money on a raft of security products, only to later spend much more in the aftermath of a breach which inevitably occurs. This comes at an enormous cost, where <a href="https://www.deepinstinct.com/2019/10/03/the-cybersecurity-skill-shortage-epidemic/" target="_blank" rel="noopener noreferrer">time and resources are occupied in remediating the breach</a>, rather than being able to focus their efforts on developing revenue streams. The frequency of this scenario has prompted some industry leaders to a pursue a new frontier of prevention, with an approach that it is now possible to pre-emptively stop an attack before any damage can be done.
<h3>Beating the Bullet: The Preventative Approach</h3>
Many question the possibility. “Is a preventative approach realistic?” The answer from <a href="http://www.deepinstinct.com">Deep Instinct</a>, is a resounding, Yes! There is a false sense of security in the wealth of data and analytics that a <a href="https://www.deepinstinct.com/endpoint-protection/">detection solution</a> provides, but real, effective security is the difference between detection and prevention.
For both networks and endpoints, there is a widening gap between the capability of threat actors and the efficacy of detection solutions, making it harder to adequately protect a device. In the <a href="https://www.deepinstinct.com/2018/11/25/reinventing-prevention-with-deep-learning/" target="_blank" rel="noopener noreferrer">detection and response approach</a>, an attack or the steps taken to carry it out are analyzed post-execution, as only once it’s been executed does the SOC team go into granular detailed analysis, as the malicious activity unfolds, creating additional artifacts. However, this effectively puts the security solution and the attack in a race condition, where the solution is pursuing the attack by running behind the threat actor. This reactive approach means that you have all the data you could possibly care to have on a breach, with little to nothing being done to actually stop it, relying mostly on the human factor identify, contain and remediate damage
This common approach of detection and response, which is intended to reduce risk, but actually exacerbates it, highlights the business case for a pre-emptive cybersecurity solution. CISO’s shouldn’t resign themselves to solutions that operate post-execution but should demand a solution that acts pre-emptively to keep them protected.
By definition, <a href="https://www.deepinstinct.com/product-overview/" target="_blank" rel="noopener noreferrer">a zero-time preventative solution</a> must incorporate five elements that distinguish it from a detection and response-based solution, or other supposedly preventative tools. These include:
<ol>
<li>Pre-execution – The solution is designed to be triggered before any malicious business logic takes place. For example, as soon as a file is accessed, downloaded on to a device, or malicious code injection is fully executed.</li>
<li>Autonomous – Once the solution is activated, it autonomously analyses and makes decisions on prevention and alerts, regardless of human involvement and internet connectivity. If a human is involved it’s not a real-time solution.</li>
<li>Zero-time – Any new data artifact or file must be analyzed in a matter of milliseconds, prior to being executed, opened or causing compromise, effectively providing a zero-time response.</li>
<li>All threats – The solution’s design should cover a broad range of cyber-attack vectors and surfaces, both known and yet unknown threats.</li>
<li>All environments – the solution should protect a wide range of environments and OSs, be it networks, endpoints, mobile devices or servers and to all major operating systems from a single unified platform.</li>
</ol>
Currently, <a href="https://www.deepinstinct.com/what-is-deep-learning/">deep learning</a> is the only technology available that is able to deliver these five elements to provide a real prevention-oriented solution. The <a href="https://www.deepinstinct.com/deep-learning-cybersecurity/">adaptation and application of deep learning</a> make it possible to harness its innate advantages of fast inference and high accuracy to provide prevention. The rigorous analysis of deep learning also provides a remarkably low false-positive rate, despite the higher rates of detected files.
<h3>Consolidate solutions</h3>
CIOs and CISOs do not need an endless suite of products sitting in their systems in order to ensure protection, they can and should work to consolidate their solutions. If they have a solution running in their environment for two or three years, they should consider a replacement. Not necessarily to replace current solutions, but they should consider the real value that they are getting. Likewise, vendors should also be keen to ensure their solutions on offer provide real value if they want to retain their customers.
<h3>Advanced AI</h3>
CIOs and CISOs need to also be aware that while there are many machine learning-based solutions available on the market that have proven to provide reasonable protection against human authored malware, AI-based malware is altogether another ball game. <a href="https://www.bankinfosecurity.com/researchers-trick-cylance-into-giving-malware-pass-a-12798">Recent</a> <a href="https://www.bankinfosecurity.com/researchers-trick-cylance-into-giving-malware-pass-a-12798">events</a> have shown that <a href="https://www.deepinstinct.com/deep-learning-cybersecurity/">AI solutions</a> are not immune to being bypassed and attacked. An attack that incorporates AI in its business logic, can be designed to evade machine learning solutions. It is the vendor’s responsibility to provide users with a sophisticated solution that realistically holds a chance of beating off AI-based attacks. To stand a chance at defeating the most advanced <a href="https://www.deepinstinct.com/product-overview/">threat types</a>, any security solution’s algorithm must be regularly challenged against sophisticated malicious algorithms to ensure that it is sufficiently robust and able to remediate any type of threat. Ready for whatever the future may bring.
<h3>The Takeaway</h3>
As a security professional there are three important things to realize. The first is that we should not be afraid of AI. AI technology is only going to become more prolific in our lives and the best way to ensure protection is by having an advanced AI solution that is adequately up to the challenge.
The second factor is to look for a solution that has a focus on prevention, rather than detection and response. A security solution with strong predictive capabilities is able to analyze a file with a high level of accuracy, doing so in pre-execution, where no damaged can be wrought. As opposed to a solution that is designed to operate post-execution, where the threat is given the chance to materialize.
Finally, any decision that you make as a CISO, should not be a bet. Selecting a solution should be based on an educated decision that involves testing the latest technologies after implementing them.  It is clear to vendors that the deployment process needs to be quick and easy, so it’s on them to work with you to address this need.
&nbsp;
To learn more about the evolution of cybersecurity solutions towards a preventative approach, read the whitepaper <a href="https://info.deepinstinct.com/whitepaper-reinventing-prevention-with-deep-learning" target="_blank" rel="noopener noreferrer">Reinventing Cybersecurity Prevention with Deep Learning</a>
<a href="https://info.deepinstinct.com/whitepaper-reinventing-prevention-with-deep-learning" target="_blank" rel="noopener noreferrer"><img class="alignnone wp-image-4303" src="https://www.deepinstinct.com/wp-content/uploads/2019/02/reinventing-prevention-inner-banner-450x113.png" alt="" width="592" height="150" /></a>

Discover how Deep Instinct DSX protects your NAS storage more effectively than Trellix.

Guy Caspi

From Guy Caspi.