di_blog_post

Deep Instinct prevents more advanced threats than any EPP or EDR in the world.

Deep Instinct Blog: Breaking News and Updates

Explore Deep Instinct DSX

Prevent Zero-Day Attacks

Real-Time Malicious Verdicts

Real-Time Explainability

Lower TCO

Ensure Privacy & Compliance

Deep Instinct DSX

Cloud

Applications

Endpoints

Use Cases

Asset Library

Blog

Videos

Events & Webinars

Resources

About Deep Instinct

Our Customers

Newsroom

Careers

Contact Us

Company

Request Demo

Customer Portal

Integrations and Compliance

Training

Quick Links

Discover how our revolutionary deep learning-powered solution prevents and explains unknown, never-before-seen threats.

explore deep instinct dsx

why dsx

Prevent zero-day attacks

Detect and prevent threats in <20ms, faster than the blink of an eye.

real-time malicious verdicts

Gain actionable, AI-driven intelligence on zero-day threats in seconds.

Real-Time Insights & Explainability

Reduce cybersecurity costs with efficient, high-performance threat prevention.

Enhance data protection while meeting stringent privacy and regulatory requirements.

DEPLOYMENT

Secure your multi-cloud or hybrid infrastructure against zero-day threats.

CLOUD

Safeguard critical data on Network-Attached Storage systems from advanced cyber threats.

Defend SaaS and custom applications from zero-day vulnerabilities and threats.

APPLICATIONS

Protect devices and endpoints with AI-driven threat prevention.

ENDPOINTS

EXPLORE 

Threat Research

Voice Of SecOps

COMPARE

Deep Instinct complements Microsoft Defender with advanced threat prevention to stop threats before they enter your environment.

+ Microsoft Defender

Deep Instinct and Tanium deliver prevention-first endpoint security to reduce risk and boost productivity.

+ Tanium

EDR is not enough — enhance existing cybersecurity tools with advanced, real-time threat prevention using deep learning to produce defense in depth.

EXTEND/ENHANCE LEGACY AV

Replace outdated, legacy AV solutions with prevention-first, deep-learning-based protection purpose-built for cybersecurity.

REPLACE LEGACY AV

Faster and more accurate – Deep Instinct safeguards your data and protects your NAS storage better than Trellix.

REPLACE TRELLIX

Leadership Team

Board of Directors

Partners

Login

content_block

Perspective & Findings

<h4>Don’t Let Application File Uploads Become Malware Downloads</h4>

file-upload-security-blog.jpg

Recent Blog Posts

Listing preview

Perspective & Findings

image_media_card

Recent Blog Posts

listing_preview

BPFDoor Malware Evolves – Stealthy Sniffing Backdoor Ups Its Game

Who is the only NEW vendor in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms?

ChatGPT and Malware: Making Your Malicious Wishes Come True

Top-3 Drawbacks of Content Disarm + Reconstruction (CDR) for Malware Prevention

LSASS Memory Dumps are Stealthier than Ever Before

LSASS memory dumps

Trending at Deep Instinct

carousel_cards

221B-blog-2.png

Lance James doesn’t need an introduction. Lance and his world-renowned Unit 221B team are at the forefront of investigations and counterintelligence operations for the private and public sector. They are comprised of unique specialists in the fields of information security, cryptography, forensics, legal, investigations, law enforcement, and intelligence. And we had the great fortune to work with them over the past few months.Unit 221B recently completed a comprehensive analysis of the Deep Instinct Prevention Platform. The team validated the core strengths and capabilities of the platform with a special emphasis on <a href="/zero-day-attacks" target="_self">preventing unknown and zero-day threats</a>.We asked Lance for his insights into the project, his thoughts on some common (mis)perceptions, and his advice for those who work with him and his team.<h2>Q: What was the overall objective in testing the Deep Instinct platform? What methodology did you use in your testing?</h2>A: The project objective was two-fold:1) Unit 221B assessed Deep Instinct’s claims that their <a href="/endpoint-protection-platforms" target="_self">Endpoint Protection Platform (EPP)</a> product can automatically prevent unknown threats by using deep learning to identify patterns indicative of malicious behavior prior to execution on the endpoint. This assessment evaluated the following claims:<ul><li>The platform automatically prevents malware execution with &gt;99% accuracy</li><li>The platform detects malware and attacks with &lt;0.1% false positives</li><li>The platform is adept at recognizing and automatically preventing previously unknown or custom (0-day) attacks</li></ul>Tests were conducted using both unknown and custom techniques and malware. Unknown attacks are techniques or malware that have not been publicly disclosed before the deployment of the tested version of the Deep Instinct “Brain.” Custom attacks are techniques and malware samples created by Unit 221B specifically for this assessment.2) Unit 221B created a test environment to evaluate the Deep Instinct EPP. We then performed a battery of tests designed to measure the ability of Deep Instinct to detect and prevent unknown and custom variants of portable executables, documents, and ransomware.The tools the testing team used were virtual machines to quickly create and restore operating system instances for rapidly conducting tests without introducing additional variables. Once a test had been conducted, the virtual machine could be reset to its initial state, and each test began from the same initial state. A disposable virtual machine was used as the malware sandbox. The sandbox was constructed using VMware ESXI configured with 8 GB of RAM and 120 GB of disk space.To control for variables, Unit 221B restored snapshots of the machine between tests to ensure that they did not interfere with each other. A single snapshot, created once the machine was operational with Standard software, and then was reused as a control group throughout the duration of testing.<h2>Q: We see that you tested using “custom” attack vectors. Can you tell us a bit more about that?</h2>A: Custom attacks were designed by Unit 221B's red team in an attempt to get around Deep Instinct's engine. In many real-time red team scenarios against a target it is a catered or custom exploits and binaries that tends to bypass systems. We've seen this historically with Advanced Persistent Threat (nation-state) attackers, where they use zero-days and customized payloads to accomplish their goal. The customized mode for us is similar and would determine if their claims against zero-day attacks were valid.Deep Instinct successfully defended and prevented against our customized nation-state simulated attacks. You can find details in the Technical Report we wrote after our three-month <a href="/pdf/unit-221b-deep-instinct-product-assessment" target="_self">project product assessment</a>.I have said this before, but our company is composed of professional skeptics and hackers that have a strong track record of bypassing security protocols and prevention systems, and we were happy to fail in this instance. It is through these thorough real-world evaluations like this one that enhance our ability to work together to solve the most challenging problems in cybersecurity. Deep Instinct was able to showcase why deep learning is a revolutionary technology for fighting and predicting the attacks of tomorrow, while maturing your security posture today.<h2>Q: Today’s IT leaders often take the stance of “presume breach” and are relying heavily on post-execution EDR type tools. What are your thoughts on “presume breach?”</h2>A: Given the history of what is going on with breaches this is a healthy mindset. Assuming you're breached will puts you down the path to be reactive and pursuing what needs to be done next. And why do we think this way? Because there isn't a vendor that is successful in stopping ALL threats. And to say there could be is an impractical ask as all environments aren't configured the same. I will caveat this, though - just because you assume a breach doesn't mean you shouldn't make the investment and have the ultimate goal to "prevent the breach." But I don't think either perspective is unrealistic, and I do think they can complement each other.<h2>Q: What is your advice to organizations that ask your team for help? (We realize that this is a very broad question.)</h2>A: Quite a broad question for sure and it varies, but I think the best way I can put this is we don't see the organizations that we work with as clients, but instead as partners. And with that mindset and culture, I can say that it's not about specific advice we give, but that we start out with them with a "let's work together on this problem" mindset. We also encourage a beginner's mindset through partnerships vs. ego and some company telling you what you did wrong or why you are vulnerable. With a partnership there is a level of respect and a shift in boundaries. In that way we become part of your team, not external to it, and that makes a huge difference.For more information, read the full <a href="/pdf/unit-221b-deep-instinct-product-assessment" target="_self">Unit 221B Product Assessment report, </a><a href="/news/unit-221b-report-validates-deep-instinct-99-percent-zero-day-threat-prevention-accuracy" target="_self">Unit 221B Press Release</a>, and <a href="/pdf/idc-compelling-arguments-for-reevaluating-endpoint-protection" target="_self">IDC's recent validation</a>.<h2>Learn More</h2>Watch our on-demand webinar with Lance James, CEO and Founder of Unit 221B, where he discusses his initial expectations, the methodology, and how deep learning is a revolutionary factor for fighting and predicting the problems of tomorrow, while maturing your security posture today.<div class="wistia_responsive_padding" style="padding-top: 56.25%;padding-right: 0px;padding-bottom: 0px;padding-left: 0px;position: relative;"><div class="wistia_responsive_wrapper" style="height: 100%;left: 0px;position: absolute;top: 0px;width: 100%;"><span id="popover_preview_embed" class="wistia_embed wistia_async_skxnb4da6w container=popover_preview_embed popover=true popoverAnimateThumbnail=true videoFoam=true" style="display: inline-block;height: 100%;position: relative;width: 100%;">&nbsp;</div></div>

Q&A with Unit 221B CEO Lance James: Insights into Custom Attack Vectors, Presumed Breach, and Working with Partners

Intl-Women-Day.png

Today, March 8, we celebrate International Women’s Day (IWD). The United Nations announced this <a href="https://www.un.org/en/observances/womens-day">year’s theme</a> as “Gender equality today for a sustainable tomorrow.” Deep Instinct is proud to support IWD as a global celebration of the social, economic, cultural, and political achievements of women. As our company continues to grow, we invest in diversity across the board, and gender diversity is vital to our workplace.Cybersecurity requires diverse perspectivesToday’s threats are increasingly sophisticated and impactful — and attackers are constantly probing to find easier ways to evade detection. Given how regularly these attacks occur and their severe impact on business continuity it has become apparent that a longer time horizon is needed to plan for the threats not only of tomorrow, but also for those that may impact organizations in the years to come.The increase in cybersecurity threats compounds the strain already placed on cyber defenders. With the existing cyber talent gap, we need more diverse professionals than ever to obstruct bad actors. Women make up just 25 percent of the cybersecurity workforce, according to the 2021 (ISC)² report, <a href="https://www.isc2.org/-/media/ISC2/Research/2021/ISC2-Cybersecurity-Workforce-Study-2021.ashx">A Resilient Cybersecurity Profession Charts the Path Forward</a>. Having and investing in a diverse workforce is a tremendous advantage for cyber teams because it brings more diverse experiences, thinking, and world views, which can help overcome biases and missed threat protection opportunities that may occur on teams that lack this.In celebration of the women working to fight cybercrime, we asked several professionals at Deep Instinct about their roles in cybersecurity. Bar Block, Threat Intelligence Researcher, Lara Vafiadis, Regional Sales Manager, and Phanneth Wood, Global Distribution Director, disscuss how they chose their profession and what can be done to have a more diverse workforce.<img asset_uid="blt8f8f690d9b6d92f6" src="https://images.contentstack.io/v3/assets/blt1ec077b6b53d6b3e/blt8f8f690d9b6d92f6/622656ffbca57e4aae954d41/Intl-Women-Day-blog-headshots_(1).jpg" height="auto"/>Q: Did you always know that you wanted to have a career in the tech industry?<ul><li>Bar Block: “I was not interested in the technology field at all until I had an “introduction to computer science” course in middle school. We learned to program using a block-based visual programming language called “Scratch,” and the teacher encouraged us to program apps that interested us, such as games. This made the lessons quite interesting, and as a result, I majored in computer science in high school and even became an active member of the school’s app development club. When I finished high school, I enlisted in the IDF and went through cybersecurity training. When I eventually finished my service, I joined Deep Instinct.”</li><li>Lara Vafiadis: “I didn’t grow up knowing that I wanted to work in tech; in fact, I didn’t even know that it was an option! I started my career in sailing, and by the time I was 21 I had completed my “Yacht Master” certification. After a few years of sailing, I was introduced to the tech industry through a friend, and I was amazed at what was available. I loved the idea of working at the forefront of technology with products that were truly innovative in an ever-changing world. The passion and drive that is prevalent in this industry is truly addictive.”</li><li>Phanneth Wood: “I did not always know that I wanted a career in tech. I started my career post-college thinking I would be a financial advisor and started down the path to earn my Series 6 and Series 7 to be able to put my college degree in finance to use. The tech industry is more than technical roles. I found that I&nbsp;excelled in the areas of leadership, strategic sales, sales ops,&nbsp;and program management in the tech industry, specifically supporting IT Channel distribution and have leveraged&nbsp;relationships and experiences I’ve&nbsp;gained from each of my tech companies to expand and enhance each position I’ve&nbsp;had at Palo Alto Networks, Okta, and now at Deep Instinct.”&nbsp;</li></ul>Q: Do you think the tech industry has improved in its openness to welcome women into job roles?&nbsp;<ul><li>Bar Block: “Although I have only been part of the tech industry for a few years, I do think it has improved in its openness to welcome women, and I think it is continuing to improve. The industry can help its next generation to become more diverse by helping young girls who are interested in tech-related fields to fulfil their potential. This can be done by creating tech-related programs for girls, encouraging them to take part in existing programs, or even just sending women who work in the industry to lecture in schools and show them that they also have a place in this industry.”</li><li>Lara Vafiadis: “Year on year we see more women moving into the technology sector but when speaking to young girls as a part of Learning to Work, a project to connect business professionals with school children and advise on potential careers, there is still so much confusion about what working in tech means. There needs to be a better understanding for young women about what careers are available for them in technology.”</li><li>Phanneth Wood: “With the support of more local and regional women-in-tech groups that encourage younger generations to think broadly about roles in STEM and supporting younger generations to follow their passion for technology, we’re&nbsp;seeing more young women go for tech roles they might have been intimidated to apply for 10-20 years ago. I’m&nbsp;seeing&nbsp;more women move into leadership roles in the IT Channel over the years, too.”&nbsp;</li></ul>Q: What more do you think can be done within the industry to have a more diverse gender workforce?&nbsp;&nbsp;<ul><li>Bar Block: “Those who are looking to enter the field need to know that there is a space for them if it is something that you want to do, then do it. It may be difficult at first, but if you work hard, you will find your way in this industry and may even help in making it more accessible to other women.”</li><li>Lara Vafiadis To those women considering entering the industry, don’t let the fact that women are the minority phase you, be who you are and have the confidence to show that; it can be an advantage! In a room that’s predominately male, being a woman means you have the edge, you have different ways of looking at a problem, and you are unique. Companies are starting to realize that a diverse workforce is a strong workforce we all bring something different to the table.”</li><li>Phanneth Wood: “I’ve&nbsp;been so impressed with the increase in awareness around women in tech roles for the women who are in IT now and for the future generations that are being encouraged to explore IT roles through STEM programs in high schools and colleges. Now we have a more diverse gender talent pool to draw from. I think it’s&nbsp;important for employers to embrace women-in-tech networking groups which help amplify our voices.” &nbsp;</li></ul>The major difference between organizations that do cybersecurity well versus those that do it poorly comes down to having a diverse group of people who work well together.We're always looking for exceptional talent ready to help us re-write the cybersecurity story, tackle challenging projects, and work with a globally distributed team of A-players. Find out how Deep Instinct is disrupting the cybersecurity market with a first-of-its-kind solution to prevent malware and ransomware and learn about open positions at <a href="https://www.deepinstinct.com/careers">https://www.deepinstinct.com/careers</a>.

Celebrating International Women’s Day

Announcing DSX for Cloud - Amazon S3, natively integrated zero-day data security for AWS S3.