Intelligent CIO North America Issue 01 | Page 21

LATEST INTELLIGENCE indiscriminate ‘drive by’ campaigns against thousands of organizations, or as crafted, ‘spear phishing’ attacks that are customized to a particular recipient or business. To defend against phishing campaigns, traditional defenses typically analyze emails in light of an understanding of historical attacks, blacklists, and signatures. Yet cyber-criminals understand this reactive approach better than anyone, and they have every incentive to leverage novel tactics and techniques that evade legacy defenses by design. However, while these attacks have never been seen before and will therefore evade traditional defenses at the border, this means that at some level of description they will be highly anomalous for the targeted user or business – at least if the ‘patterns of life’ for the individual and their wider peer group are taken into account. This basic truth is precisely why a dynamic analysis that takes into account hundreds of metrics based on user and group behaviors is so critical. Powered by cyber AI, Antigena Email can analyze links, attachments, domains, content, and other elements of an email alongside ‘patterns of life’ across the organization, correlating a rich constellation of data points that reveal seemingly benign emails to be unmistakably malicious. Unlike any other solution, Antigena Email understands the human behind email interactions, identifying anomalous sending patterns, whether the location of a link in an email is strange, the topics of discussion and content are unusual, or even whether patterns in the URL pathway are suspicious. This unique approach means that Darktrace can take highly proportionate and targeted actions to neutralize phishing attacks within seconds. • Download whitepapers free from www.intelligentcio.com/north-america/whitepapers/ www.intelligentcio.com INTELLIGENTCIO 21