
Darktrace Expands Autonomous Response to Enforce Normal Behavior on Endpoints
According to cyber security statistics, cyber-attacks are increasing every day. AI cybersecurity can supplement cybersecurity experts by offloading some of their workloads.
By
CIO Applications Europe | Monday, February 01, 2021

Fremont, CA: According to cyber security statistics, cyber-attacks are increasing every day. AI cybersecurity can supplement cybersecurity experts by offloading some of their workloads. Machines excel at rapidly processing large amounts of data and identifying unusual or interesting information for humans to investigate.
Darktrace, a global leader in cyber security AI, has declared that its Autonomous Response technology now takes action on the endpoint – rounding out the Darktrace Antigena product family, which already includes coverage for SaaS applications email, cloud, network, and Operational Technology (OT).
Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.
Endpoints have moved further away from traditional infrastructure and have begun to house more sensitive data. Consequently, CISOs and security professionals are grappling with the complexities of protecting their organisations and dynamic workers in the aftermath of flexible work arrangements and the dawn of the 'Great Resignation.'
A novel approach to this problem could be to augment security teams with AI that learns on the job how this adaptable, dynamic workforce operates. Endpoint activity irregularity can be continuously re-evaluated, and subtle, imperceptible actions can be taken to enable productive work to continue while halting only threatening activity.
Antigena Endpoint accomplishes this. It detects unusual activity and intelligently makes micro-decisions based on it, such as unusual initial file downloads and data exfiltration attempts, command and control traffic, or lateral movement that could indicate a cyber-threat. It employs a variety of techniques to thwart attacks on Mac, Windows, and Linux devices, such as ransomware, data leaks, and insider threats.
Contextual awareness gained from other parts of the digital estate can also help stop endpoint attacks. In the case of Antigena Email and Antigena Endpoint deployed together, for instance, the precision of response is improved by a more nuanced understanding of new and expected senders across all endpoint and email activity. A brand-new sender attempting to persuade an employee to conduct a bank transaction on their own may be grounds for action. However, the additional information that the website has no prior relevance to the organisation would strengthen the case and change the system's response.
"Antigena Endpoint is the evolution of Darktrace's platform that I have anticipated and been excited about most. It truly is a game-changer and gets straight to the heart of what our customers need right now," stated Mike Beck, Darktrace's Global Chief Information Security Officer. "The reassurance that Darktrace can not only detect the early signs of attacks but now also take action on all employee endpoints is more important than ever before."
More in News
Weekly Brief
I agree We use cookies on this website to enhance your user experience. By clicking any link on this page you are giving your consent for us to set cookies. More info
Be first to read the latest tech news, Industry Leader's Insights, and CIO interviews of medium and large enterprises exclusively from CIO Applications Europe
THANK YOU FOR SUBSCRIBING


