Cyber deception and attacker lateral movement threat detection platform provider Attivo Networks has been identified as a Sample Vendor in the Gartner Hype Cycle for Security Operations, 2020, in the Deception Platforms category.

The report states that “Deception platforms offer high-fidelity artefacts (e.g., decoys, lures or honeytokens) that look real and useful, but are fake and created only for attackers to touch and engage with. These artefacts should not be interacted with — hence almost zero false positives — but attackers are statistically bound to trigger one as they perform lateral movements in organisations."

Sample vendors are those with a solution that exemplifies the innovation highlighted in the Hype Cycle report.

"Security and risk management leaders who want to develop a threat detection initiative can invest in deception platforms as a low-cost and high-impact complement (or more rarely as a replacement) for SIEM, EDR and NDR tools offering high-fidelity sensors. Forward-leaning and mature clients can also benefit from the added value from deception platforms. These benefits include generation of decoys that will increase an attacker's dwell time, or generation of local indicators of compromise (IOCs) and other threat intelligence (TI) which can give feedback into their TI efforts," Gartner senior director and analyst Pete Shoard writes in the report.

Attivo Networks has expanded its detection technology portfolio to help enterprise customers address increased attack destructiveness and expanded attack surfaces.

The company's ThreatDefend Platform detects threats early in the attack cycle by hiding real data and assets and misdirecting the attacker using decoys, lures, and other tactics.

The scalable portfolio of endpoint, network, and active directory protection solutions provides organisations with enhanced attack prevention, reduced dwell times, and accelerated incident response.

“Attivo Networks brings a unique set of capabilities to defenders and directly addresses their challenges related to detecting attacker lateral movement, targeted attacks on Active Directory, and other APT style tactics that sophisticated attackers are now using,” says Attivo Networks chief executive officer Tushar Kothari. 

“We appreciate Attivo Networks' inclusion in the Gartner report. We believe this recognition validates the continued market demand for deception technology as a critical security control for the enterprise.

Attivo Networks was also recognised in the Gartner Solution Comparison for Six Deception Platforms. “This Solution Comparison is based on vendor briefings and demos, customer interviews and inquiry data.”

Attivo Networks received the greatest number of “high” ratings as compared to the other threat deception vendors across 14 assessment criteria in the report.