Intelligent Tech Channels Issue 39 | Page 40

Kaspersky launches Machine Learningdriven MDR for SMBs

Cybersecurity vendor , Kaspersky , has launched Machine Learning-driven Managed Detection Response ( MDR ) for small and medium businesses ( SMBs ) and has split B2B offering into frameworks based on customers ’ IT security maturity .

The new Kaspersky Managed Detection and Response ( MDR ) service ensures continuous Machine Learning-driven 24 by 7 protection while saving IT security teams ’ resources for threat analysis , investigation and response . Thanks to two product tiers , Kaspersky MDR is now available not only for large enterprises , but for medium-sized businesses with different levels of IT security maturity and needs . Along with the MDR launch Kaspersky has also updated its approach to product portfolios with cybersecurity frameworks . Different frameworks combine various sets of security solutions and services to enable protection from diverse types of threats .

Detecting and responding to sophisticated attacks requires specific expertise , while internal training or hiring additional experts may not always fit into the cybersecurity budget . A lack of resources can lead to untimely responses to incidents and as a result , increase the losses of the organisation .
According to a Kaspersky report , for enterprises , the average cost of a data breach rises by more than US $ 400,000 depending on whether a breach is discovered almost instantly or beyond seven days .
Targeted towards such organisations , Kaspersky Managed Detection and Response provides major benefits of an outsourced
Effective threat protection is always a set of measures that must be well coordinated with each other , easy to manage and meet the needs of customers . Frameworks work just like that .
security operations centre ( SOC ) and does not require specialised threat hunting and incident analysis skills from internal teams , which can be especially relevant for mid-size businesses . The service is complemented by detection technologies as well as extensive expertise in threat hunting and incident response from professional units including the Global Research and Analysis Team ( GReAT ) IT security experts can see the protection status of all assets and threat detections in real time , receive ready-made response recommendations or authorise managed response scenarios .
The service integrates several components . Since alerts are collected from all endpoints , this allows the system to detect links of one attack chain on various machines . All detections are further validated and prioritised by Kaspersky ’ s threat hunting team to ensure a timely response . After investigation , customers receive incident alerts and a comprehensive guide to incident response in the dedicated MDR portal . Response options can then be initiated through an endpoint detection and response ( EDR ) agent .
The Kaspersky MDR Optimum tier enables turnkey protection while Kaspersky MDR Expert allows access to the vendor ’ s SOC analysts certified and trained with OSCP , GCTI , SANS SEC560 , SANS SEC660 for consultation , access to the Kaspersky Threat Intelligence Portal and an API for integration with existing security workflows .
With this launch , Kaspersky has also introduced new frameworks to address companies ’ needs in terms of threat defence and IT security maturity level .
Kaspersky MDR powers each framework enabling an instantly matured IT security function while allowing mature IT security teams to focus on responding to the critical outcomes delivered .
“ Effective threat protection is always a set of measures that must be well co-ordinated with each other , easy to manage and meet the needs of customers . Frameworks work just like that . Another advantage is that , unlike one specific solution , they offer a cybersecurity roadmap for the company , assuring the transition from one IT security maturity level to another when the time comes . Thus , in the case of MDR , at a more basic level of information security development , a company can receive a fully automated service . And when the expertise of its specialists grows , switch to the expert level and get involved in the threat hunting and investigation ,” explained Dmitry Aleshin , VP , Product Marketing , Kaspersky . •
40