{"id":343,"date":"2020-06-04T10:49:40","date_gmt":"2020-06-04T09:49:40","guid":{"rendered":"http:\/\/www.intelligentcio.com\/north-america\/?p=343"},"modified":"2020-06-04T10:50:05","modified_gmt":"2020-06-04T09:50:05","slug":"deploying-darktrace-ai-for-real-time-threat-detection-and-autonomous-response-in-the-las-vegas","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/north-america\/2020\/06\/04\/deploying-darktrace-ai-for-real-time-threat-detection-and-autonomous-response-in-the-las-vegas\/","title":{"rendered":"Deploying Darktrace AI for real time threat detection and autonomous response in Las Vegas"},"content":{"rendered":"\n

Background<\/strong><\/p>\n\n\n\n

In recent years, Las Vegas has become a prototypical Smart City. As riders glide down the Strip aboard the first completely autonomous shuttle ever deployed on a public roadway, they are unlikely to notice much trash on the sidewalk – the city\u2019s surveillance cameras stream to an AI service that directs clean-up crews toward concentrations of litter. And when rush hour approaches, its passengers can rest assured that an array of connected sensors are helping officials anticipate gridlock at busy intersections.
But while smart infrastructure enables Las Vegas to achieve new heights of efficiency, conventional security tools are largely ill-equipped to defend the hybrid cloud and industrial networks that power this infrastructure. These diverse environments are increasingly attracting sophisticated cyber-criminals, who seek to disrupt public services or exfiltrate sensitive data. With a highly complex network to defend, the forward-thinking City of Las Vegas recognised the need for equally innovative cyber defences.<\/p>\n\n\n\n

Challenge<\/strong><\/p>\n\n\n\n

When undertaking its Smart City initiatives, the City of Las Vegas aimed to embrace innovation without compromising the security of its 650,000 residents and 42 million annual tourists. However, local governments know that Internet-connected infrastructure is often vulnerable to targeted online assaults, which continue to blur the line between digital and physical threats. Today\u2019s automated malware often strikes at machine speed, rendering city officials justifiably concerned that an attack – even one that breached just a single smart device – could move laterally to encrypt or hijack its entire network in minutes.<\/p>\n\n\n\n

In addition to the external attacks confronting Las Vegas\u2019 critical infrastructure, the city was also imperiled by insider threats to its private data and taxpayer information. Nearly three-quarters of global cybersecurity incidents are the product of either malicious or negligent employees, and with the city\u2019s security team relying on legacy tools that provided no visibility into internal network traffic, it had no way to detect these threats. Indeed, due to personnel limitations, the security team was ill-equipped to counter any kind of fast-acting cyberattack in real time – before its damage was done.<\/p>\n\n\n\n

Yet the greatest defensive challenge that Las Vegas faced was never-before-seen attacks, which cyber-criminals now launch on a daily basis. Traditional security tools work by using fixed rules and signatures to predefine what a threat looks like, preventing them from spotting threats that look unlike anything seen before. From spear phishing emails meant to deceive the city\u2019s employees by posing as trusted contacts, to novel attacks that attempt to infiltrate via the city\u2019s multi-cloud environment, Las Vegas sought a fundamentally unique security tool capable of keeping pace with an ever-evolving threat landscape.<\/p>\n\n\n\n

Solution<\/strong><\/p>\n\n\n\n

The city\u2019s search for such an adaptive security solution led it to deploy Darktrace AI across its enterprise, cloud, and industrial networks. Powered by world-leading Artificial Intelligence, Darktrace immediately began to self-learn a unique \u2018pattern of life\u2019 for each Las Vegas employee and device. Crucially, Darktrace AI does not predefine what constitutes a threat to the city; rather, it detects the subtle behavioural anomalies associated with any attack – whether known or unknown. To fight back against automated attacks in real time, the city also deployed Darktrace Antigena, the first cyber AI response tool that autonomously neutralises threats by taking intelligent, surgical actions.<\/p>\n\n\n\n

Antigena works by confining infected devices to their typical \u2018pattern of life\u2019 within two seconds, containing significant threats without disrupting core municipal operations. These operations today rely heavily on Las Vegas\u2019 multi-cloud architecture, which includes Amazon Web Services, Microsoft Azure, and Office 365. Whereas the conventional, stove-pipe approach to securing these services lacks vital context, Darktrace analyses data flows from across the city\u2019s entire digital infrastructure, enabling Antigena\u2019s cyber AI response to neutralise attacks wherever they originate.<\/p>\n\n\n\n

Benefits<\/strong><\/p>\n\n\n\n

Darktrace has already detected and responded to numerous attacks against the City of Las Vegas, including a targeted spear phishing campaign that bypassed the city\u2019s native email controls. The sophisticated attackers, who had obtained the city\u2019s address book, were emailing recipients alphabetically, from \u201cA\u201d to \u201cZ,\u201d with ostensibly harmless emails that contained a malicious payload. Despite the well-disguised nature of this attack, Antigena immediately flagged the domain linked in the emails as anomalous for Las Vegas\u2019 employees, an action only possible with the evolving understanding of \u2018self\u2019 that Darktrace AI learns.
Antigena was deployed in \u2018Passive Mode\u2019 at the time, a starter mode that restricts the AI to communicating what it would have done in response to the threat, without actually taking action. Interestingly enough, this served to demonstrate its ability to stop attacks that conventional tools miss. Whereas Darktrace detected the campaign at the letter \u201cA,\u201d the city\u2019s array of legacy tools finally woke up to the threat at \u201cR.\u201d In \u2018Active Mode\u2019, Antigena would have neutralised the attack before it reached a single user. Darktrace\u2019s AI has fundamentally transformed the city\u2019s defensive posture, affording its leaders the confidence to adopt smart technologies and cloud services alike.<\/p>\n","protected":false},"excerpt":{"rendered":"

Background In recent years, Las Vegas has become a prototypical Smart City. As riders glide down the Strip aboard the first completely autonomous shuttle ever deployed on a public roadway, they are unlikely to notice much trash on the sidewalk – the city\u2019s surveillance cameras stream to an AI service that directs clean-up crews toward […]<\/p>\n","protected":false},"author":36,"featured_media":345,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[9,17,21,43,49],"tags":[226,229,224,228,227],"class_list":["post-343","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-case-studies","category-enterprise-security","category-government","category-top-stories","category-west-coast","tag-ai","tag-antigena","tag-las-vegas","tag-phishing-emails","tag-smart-city"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/users\/36"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/comments?post=343"}],"version-history":[{"count":2,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/343\/revisions"}],"predecessor-version":[{"id":347,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/343\/revisions\/347"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/media\/345"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/media?parent=343"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/categories?post=343"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/tags?post=343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}