Story image

AI could be the key to ending cybercrime

Over the last few years, the world has seen a steady and increasing flow of high profile data breaches hitting the headlines. 

Whether the result of unknown web vulnerabilities, DDOS attacks or overall lax corporate data security policies, data breaches are becoming an everyday occurrence. 

In fact, it is generally agreed that no organisation is safe from hackers who are using more and more sophisticated ways of breaching our defences, but they can be stopped before they cause any lasting damage to a business.

With the rise of hyper-connected workplace environments, and the growth of cloud and mobile technologies, organisations can no longer rely solely on network and endpoint protection. 

The attack surface has grown rapidly and businesses that have not bolstered their cyber defences or invested in the right tools will find themselves extremely vulnerable to business risk. 

The rise of low security, internet-connected endpoints and cloud-based applications are a cyber criminal’s dream.

The traditional approach to cybersecurity has been to use a prevention-centric strategy focused on blocking attacks. 

While important, many of today’s advanced and motivated threat actors are circumventing perimeter-based defences with creative, stealthy, targeted, and persistent attacks that often go undetected for significant periods of time. 

In response to the shortcomings of this approach and the challenges of securing an increasingly complex IT environment, organisations need to shift their resources and implement strategies that are centred on rapid threat detection and response.

Artificial Intelligence (AI) and how it can be applied has been widely discussed, with CEOs increasingly looking at ways they can utilise this technology to improve business processes. 

Cybersecurity and data protection has, unsurprisingly, been top of mind during these conversations, however many are unsure how big a role AI will play and how they can implement it effectively.

Ross Brewer, LogRhythm managing director says, “In the past, a common problem has been that cybercriminals have relied on automation when launching their attacks, but organisations have been relatively slow in leveraging the same technology to protect themselves.

“Organisations have always struggled with network visibility, AI, however, has the potential to transform cybersecurity practices by giving companies the ability to detect attacks in their earliest stages or anticipate them before they occur.”

“Indeed, as the threat landscape becomes more complex, the role of AI in cybersecurity will increase substantially to help organisations keep up with cybercriminals’ sophisticated tactics.” 

For example, AI can be used to automatically generate behavioural whitelists of “normal” activity to help identify suspicious behaviour patterns and automatically identify and alert on potential threats and breaches. 

Furthermore, malware can invade and spread through an organisation quickly, exposing data and weakening security faster than administrators can react.

 In many cases, the extent of the damage is unknown. 

AI will become essential as the human eye loses the ability to spot such complex attacks by ensuring these threats are flagged as soon as a network has been compromised.

The modern approach to cybersecurity requires a focus on reducing the mean time to detect (MTTD) and mean time to respond (MTTR) where threats are detected and stopped early in their lifecycle, thereby avoiding downstream consequences and costs.

It is AI that is increasingly helping businesses detect, anticipate, prioritise and neutralise these high-risk intrusions and anomalous behaviour.

With EU General Data Protection Regulation (GDPR) pending, AI will be pushed even further to the forefront of cybersecurity.

It is rapidly becoming invaluable for organisations that are not only looking to protect their data and create a more efficient business but also for those that need to remain compliant in the face of stricter regulations.

Click here to find out more about how AI can protect you.

SecOps: Clear opportunities for powerful collaboration
If there’s one thing security and IT ops professionals should do this year, the words ‘team up’ should be top priority.
Interview: Culture and cloud - the battle for cybersecurity
ESET CTO Juraj Malcho talks about the importance of culture in a cybersecurity strategy and the challenges and benefits of a world in the cloud.
Enterprise cloud deployments being exploited by cybercriminals
A new report has revealed a concerning number of enterprises still believe security is the responsibility of the cloud service provider.
Ping Identity Platform updated with new CX and IT automation
The new versions improve the user and administrative experience, while also aiming to meet enterprise needs to operate quickly and purposefully.
Venafi and nCipher Security partner on machine identity protection
Cryptographic keys serve as machine identities and are the foundation of enterprise information technology systems.
Machine learning is a tool and the bad guys are using it
KPMG NZ’s CIO and ESET’s CTO spoke at a recent cybersecurity conference about how machine learning and data analytics are not to be feared, but used.
Seagate: Data trends, opportunities, and challenges at the edge
The development of edge technology and the rise of big data have brought many opportunities for data infrastructure companies to the fore.
Popular Android apps track users and violate Google's policies
Google has reportedly taken action against some of the violators.