Darktrace, the enterprise immune system provider, has reported that its artificial intelligence (AI) technology for cyber defense spotted the WannaCry ransomware attack within minutes of it taking hold.
The WannaCry malware attack is unprecedented in scale and has affected over 200,000 devices across 150 countries according to Europol. Spread by a pernicious email attachment and supercharged by a worm, the malware encrypts files, with cyber criminals demanding ransom before users can regain access to their data. Traditional security tools that use rules and signatures to stop cyber-threats at the border fell short in the face of this new and fast-spreading malware.
Darktrace notes that the Enterprise Immune System machine-learning technology can detect and fight back against ‘unknown unknowns’ such as WannaCry automatically and in real time. Modelled after the human immune system, the technology learns the normal ‘pattern of life’ of every user and device on a network. Antigena, its automatic response technology, acts as a digital antibody, taking proportionate, remedial action to neutralise emerging threats. For example, it can slow down or stop a compromised connection or device, but does not impact normal business operations.
Darktrace’s AI technology alerted its affected customers as soon as the first signs of WannaCry emerged on their networks and as the malware was attempting to spread laterally across the respective organisations. The infection was successfully contained before it had inflicted any damage, proving the fundamental power of the Enterprise Immune System, the company said.
“At Darktrace we catch and contain ransomware every week,” commented Nicole Eagan, CEO at Darktrace. “WannaCry bypassed traditional security defenses proving them futile in this new era of cyber warfare. Security teams cannot face this challenge without the right tools in place. Darktrace’s Enterprise Immune System is a true manifestation of AI in action: detecting and stopping threats before the human teams have even had time to notice.”
The WannaCry malware attack is unprecedented in scale and has affected over 200,000 devices across 150 countries according to Europol. Spread by a pernicious email attachment and supercharged by a worm, the malware encrypts files, with cyber criminals demanding ransom before users can regain access to their data. Traditional security tools that use rules and signatures to stop cyber-threats at the border fell short in the face of this new and fast-spreading malware.
Darktrace notes that the Enterprise Immune System machine-learning technology can detect and fight back against ‘unknown unknowns’ such as WannaCry automatically and in real time. Modelled after the human immune system, the technology learns the normal ‘pattern of life’ of every user and device on a network. Antigena, its automatic response technology, acts as a digital antibody, taking proportionate, remedial action to neutralise emerging threats. For example, it can slow down or stop a compromised connection or device, but does not impact normal business operations.
Darktrace’s AI technology alerted its affected customers as soon as the first signs of WannaCry emerged on their networks and as the malware was attempting to spread laterally across the respective organisations. The infection was successfully contained before it had inflicted any damage, proving the fundamental power of the Enterprise Immune System, the company said.
“At Darktrace we catch and contain ransomware every week,” commented Nicole Eagan, CEO at Darktrace. “WannaCry bypassed traditional security defenses proving them futile in this new era of cyber warfare. Security teams cannot face this challenge without the right tools in place. Darktrace’s Enterprise Immune System is a true manifestation of AI in action: detecting and stopping threats before the human teams have even had time to notice.”
posted from Bloggeroid
No comments:
Post a Comment