Four Ways Layered Security Will Improve Your Detection and Response

November 12, 2018 TH Author Business, Deep Discovery Analyzer, Detection and Response, layered security, Security

It’s widely understood by cybersecurity professionals today that it’s no longer a case of if your organization gets attacked online but when. Trend Micro blocked more than 20.4 billion threats in the first half of 2018 alone, and the ready availability of “as-a-service” toolkits will continue to make cybercrime a hugely attractive and profitable venture. If attacks are inevitable, it’s more important than ever to improve your detection and response to help minimize their impact. Most analysts agree: claiming organizations must move away from an unrealistic prevention only mind-set.

Under attack

There’s no doubt that modern IT organizations are under more pressure than they’ve ever been from malicious outsiders. Trend Micro’s own stats from our latest midyear report reveal a 16% rise in reported US breaches from the second half of 2017 to the first six months of this year. Breaches which exposed over one million records saw an even bigger jump over the period, of 67%. That’s not to mention the growing threat from cryptocurrency mining malware, where we saw detections rise 141%. Even ransomware, although slowing down in terms of volume growth (3%), was still detected by our tools over 380,000 times in the first half of 2018.

When faced with these threats, organizations must of course do their best to block them outright. But when that’s not possible there should be tools in place to minimize the length of time key systems and data are exposed for. Current estimates suggest the “dwell time” during which attackers go undetected inside systems stands today at just over 100 days. That’s clearly unacceptable given what’s at stake: major financial losses, reputational damage and possible customer attrition.

The fantastic four

So, what’s the answer? Despite what you might hear, there’s no such thing as a silver bullet. Instead, what’s needed is a blend of threat detection techniques, optimized so the right technique is used at the right time to deal with a particular threat.

Here are four specific ways that layered security can improve detection and response:

Rapid Automated Sharing: From endpoint to email to network security, Trend Micro’s security products become more than the sum of their parts through strong API-driven integration. Potential threats detected by these tools are automatically submitted to the Deep Discovery Analyzer If rated malicious, the update is automatically shared with all other connected security solutions: no human action required. Through automation you can be protected faster
Reduce false positives: Nothing is 100% effective every time. A layered approach is best. Benign files or URLs which are mistaken for threats and then blocked can serious reduce user productivity. Trend Micro minimizes the chance of this happening by ensuring any potential threat, for example spotted at the endpoint or in an email, can be offloaded to Deep Discovery Analyzer for a definitive answer. This improves protection and keeps employees productive.
Improve visibility: Trend Micro will help correlate threat intelligence allowing the customer to connect the dots between network, endpoint, server and network security products. This provides better visibility to threats as they are detected, and lets you look back at how they spread.
Extend value: Deep Discovery Analyzer supports both Trend Micro and third-party security products. That means you can extend the value of existing security investments and even split the cost across multiple departments.

Modern organizations threaten to be overwhelmed by the complexity of today’s threat landscape, and can struggle to drive value from multiple point solutions. Trend Micro’s answer is connected threat defense, a layered security approach that gives you a better way to quickly protect, detect, and respond to new threats while simultaneously improving visibility and streamlining investigation across your organization.

You May Also Like

5 open source security tools too good to ignore

Boeing’s unsecure networks threaten security and safety

How to monitor Windows to prevent credential theft attacks