{"id":30433,"date":"2019-11-27T12:17:07","date_gmt":"2019-11-27T12:17:07","guid":{"rendered":"https:\/\/www.intelligentcio.com\/africa\/?p=30433"},"modified":"2019-11-27T12:21:47","modified_gmt":"2019-11-27T12:21:47","slug":"understanding-xdr-in-practice","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/africa\/2019\/11\/27\/understanding-xdr-in-practice\/","title":{"rendered":"Understanding XDR in practice"},"content":{"rendered":"\n<p><strong>The XDR detection and response approach connects the virtual dots in cybersecurity. Indi Siriniwasa, Vice President Sub-Saharan Africa at Trend Micro, tells us more.<\/strong><\/p>\n\n\n\n<p>Having broader visibility into the cyber risks facing the organisational network enables executives to better safeguard their data as well as manage the business more effectively in a digitally-driven environment. <\/p>\n\n\n\n<p>Through sophisticated\ndata analysis that integrates all endpoints and link seemingly minor (and\nunrelated) events, it reflects today\u2019s growing sophisticated threat landscape\nthat is continually evolving.<\/p>\n\n\n\n<p>Instead of relying on\ntraditional endpoint protection which puts cybersecurity in several silos (each\ndedicated to its own endpoint or solution), XDR provides the business with a\ncomprehensive overview of where potential gaps on its network exist. Research\nshows that some companies only effectively protect 10% of all endpoints on\ntheir networks. While financial service providers might be able to get that\nfigure up to 98% thanks to the massive budgets at their disposal, there is\nstill opportunity for hackers to get in.<\/p>\n\n\n\n<p>Bridging this security\ngap can be considered the Holy Grail when it comes to shoring up defences in\nthe always on business landscape. Certainly, endpoint solutions can protect the\ncompany, but they only work on the systems they are installed on. So, an\nunsecured endpoint can give a malicious user free reign into the network.<\/p>\n\n\n\n<p><strong>Hacker journey<\/strong><\/p>\n\n\n\n<p>Once a hacker enters\nthe company network, they can move laterally and determine other weak points in\nthe defensive systems. Given the regulatory environment and fines for data loss\nor compromise, companies can find themselves staring down significant financial\nfines and reputational penalties when these hacks come to light. But perhaps\nmore concerning is the attack or compromise that is never discovered.\nEssentially, this creates an open link between the hacker and company data that\nwill likely not get secured in the foreseeable future.<\/p>\n\n\n\n<p>Imagine the\nrepercussions of a competitor knowing exactly what the company strategy is,\nhaving access to its sales leads, product development cycle, and so on. XDR\nchanges this by introducing email, endpoint and network intelligence to the\nbroader company system and linking that to other data points. This provides for\nmore advanced detection capabilities that correlate security data throughout\nthe organisation to identify events that might previously have gone unnoticed.<\/p>\n\n\n\n<p>XDR can therefore\ncounter the risk of lateral attacks by keep a repository of information to\npro-actively protect endpoints based on artificial intelligence (AI), machine\nlearning, and data analysis.<\/p>\n\n\n\n<p><strong>Advanced protection<\/strong><\/p>\n\n\n\n<p>Unlike traditional\nendpoint protection, XDR takes data about events related to endpoints and feeds\nthat back into the security system. And because XDR is a hosted solution, this\ndata can be analysed through AI with protection being automated to be cognisant\nof attack patterns.<\/p>\n\n\n\n<p>Just like any business\nrelies on its data to deliver a competitive advantage to the market, so too\ndoes XDR need security data to deliver insights and provide alerts previously\nnot possible. Of course, XDR does not replace the human factor and still\nrequires in-house security response teams to act accordingly and decide which\nalerts must be acted on.<\/p>\n\n\n\n<p>However, XDR does represent an important evolution in the continuing war against cyberattacks. Data analysis from a cybersecurity perspective providing insights into the overall corporate network and integrate it into a centralised value proposition will help companies significantly improve their defences.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The XDR detection and response approach connects the virtual dots in cybersecurity. Indi Siriniwasa, Vice President Sub-Saharan Africa at Trend Micro, tells us more. Having broader visibility into the cyber risks facing the organisational network enables executives to better safeguard their data as well as manage the business more effectively in a digitally-driven environment. Through [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":30434,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4950,5,399],"tags":[496,859,388,4072,6369,409,10573],"class_list":["post-30433","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-analysis","category-enterprise-security","category-more-news","tag-ai","tag-cyberattacks","tag-cybersecurity","tag-endpoint-protection","tag-indi-siriniwasa","tag-trend-micro","tag-xdr"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/30433","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=30433"}],"version-history":[{"count":2,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/30433\/revisions"}],"predecessor-version":[{"id":30436,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/30433\/revisions\/30436"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/30434"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=30433"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=30433"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=30433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}