Organizations that evolve to hunt can reduce their average time to identify an attack to under 20 days. The industry average is over 200 days and rising.
Thursday, 11 June 2015 – Dubai, UAE:– Arbor Networks Inc., a leading provider of DDoS and advanced threat protection solutions for enterprise and service provider networks, today launched a new tool to help security teams assess their current incident response profile and capabilities versus their peers and state of the art practices. The assessment provides actionable insights to prompt companies to evolve beyond existing detect and respond models that are becoming increasingly ineffective in the current threat environment.
The Arbor Assessment tool is based on a year-long set of in-depth interviews of security officers across multiple industries. Incident Response Profiles that used “proactive” processes and security resources to hunt for attacks and integrate threat intelligence actively into their response function, had found and contained advanced attacks much faster than those in Detect and Respond models. Organizations that had matured their functions to include threat hunting and integrated intelligence processes reported mean dwell and contain times of under 21 days to identify, and less than 5 days to contain a threat. Industry averages are 10 times these metrics.
While defensive security has its place, moving to a more proactive model offers the only realistic alternative for protection against sophisticated and increasing advanced attacks. Evolving to a hunting posture requires adjusting investments and reallocating resources, but most significantly, it requires a change in the focus and organizational structure of security teams. Though the right technology can help, there is no technological “magic bullet.” A transformation in the people and processes will be required to be successful.
There is no better time to get started than right now.
“There is a major shift happening in security today, not by choice, but out of necessity as organizations find themselves lagging behind attackers who are launching extremely targeted, advanced threat attack campaigns,” said Matthew Moynahan, president of Arbor Networks. “The problem is how long it takes to find and identify the attacks, and then validate and contain the threat. It’s a combination of data overload and alert fatigue for many. Organizations are looking at how they can structure and approach security operations and incident functions and teams differently to face-off against the new attack landscape more effectively. We are hopeful that this assessment tool is just one of the ways we can help organizations evolve their practices to close the gap against attackers.”